Description
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
BUFFALO INC. WXR-11000XE12
firmware Ver. 1.10 and earlieraffected
BUFFALO INC. WXR-5700AX7S
firmware Ver. 1.27 and earlieraffected
BUFFALO INC. WXR-5700AX7B
firmware Ver. 1.27 and earlieraffected
BUFFALO INC. WSR-3200AX4S
firmware Ver. 1.26 and earlieraffected
BUFFALO INC. WSR-3200AX4B
firmware Ver. 1.25affected
BUFFALO INC. WSR-2533DHP
firmware Ver. 1.08 and earlieraffected
BUFFALO INC. WSR-2533DHP2
firmware Ver. 1.22 and earlieraffected
BUFFALO INC. WSR-A2533DHP2
firmware Ver. 1.22 and earlieraffected
BUFFALO INC. WSR-2533DHP3
firmware Ver. 1.26 and earlieraffected
BUFFALO INC. WSR-A2533DHP3
firmware Ver. 1.26 and earlieraffected
BUFFALO INC. WSR-2533DHPL
firmware Ver. 1.08 and earlieraffected
BUFFALO INC. WSR-2533DHPL2
firmware Ver. 1.03 and earlieraffected
BUFFALO INC. WSR-2533DHPLS
firmware Ver. 1.07 and earlieraffected
BUFFALO INC. WSR-2533DHPLB
firmware Ver. 1.05affected
BUFFALO INC. WSR-1166DHP
firmware Ver. 1.16 and earlieraffected
BUFFALO INC. WSR-1166DHP2
firmware Ver. 1.17 and earlieraffected
BUFFALO INC. WCR-1166DS
firmware Ver. 1.34 and earlieraffected