Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2024-26023

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

Description

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BUFFALO INC. WCR-1166DS

  • firmware Ver. 1.32 and earlieraffected

BUFFALO INC. WSR-1166DHP

  • firmware Ver. 1.14 and earlieraffected

BUFFALO INC. WSR-1166DHP2

  • firmware Ver. 1.14 and earlieraffected

BUFFALO INC. WSR-2533DHP

  • firmware Ver. 1.06 and earlieraffected

BUFFALO INC. WSR-2533DHPL

  • firmware Ver. 1.06 and earlieraffected

BUFFALO INC. WSR-2533DHP2

  • firmware Ver. 1.10 and earlieraffected

BUFFALO INC. WSR-A2533DHP2

  • firmware Ver. 1.10 and earlieraffected

References