Description
OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
BUFFALO INC. WXR-5700AX7S
firmware Ver. 1.27 and earlieraffected
BUFFALO INC. WXR-5700AX7B
firmware Ver. 1.27 and earlieraffected
BUFFALO INC. WSR-3200AX4S
firmware Ver. 1.26 and earlieraffected
BUFFALO INC. WSR-3200AX4B
firmware Ver. 1.25affected
BUFFALO INC. WSR-2533DHP2
firmware Ver. 1.22 and earlieraffected
BUFFALO INC. WSR-A2533DHP2
firmware Ver. 1.22 and earlieraffected
BUFFALO INC. WSR-2533DHP3
firmware Ver. 1.26 and earlieraffected
BUFFALO INC. WSR-A2533DHP3
firmware Ver. 1.26 and earlieraffected
BUFFALO INC. WSR-2533DHPL2
firmware Ver. 1.03 and earlieraffected
BUFFALO INC. WSR-2533DHPLS
firmware Ver. 1.07 and earlieraffected
BUFFALO INC. WSR-2533DHPLB
firmware Ver. 1.05affected
BUFFALO INC. WEX-1800AX4
firmware Ver. 1.13 and earlieraffected
BUFFALO INC. WEX-1800AX4EA
firmware Ver. 1.13 and earlieraffected