CVE:CVE-2017-10896
CNNVD:CNNVD-201707-106
Buffalo BBR-4HG和BBR-4MG都是日本巴法络（Buffalo）集团的宽带路由器产品。
使用1.00版本至1.48版本和2.00版本至2.07版本固件的Buffalo BBR-4HG和BBR-4MG宽带路由器中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade buffalo bbr-4mg_firmware to a higher version than 1.48,2.07,and avoid the version [1.00,1.48],[2.00,2.07]; Upgrade buffalo bbr-4hg_firmware to a higher version than 1.48,2.07,and avoid the version [1.00,1.48],[2.00,2.07]