OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters.

Summary

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.

Timeline

1. Sep 10, 2024, 6:56 AM UTCCVE published
2. Sep 10, 2024, 6:57 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Sep 10, 2024, 7:58 PM UTCRecord last updated

Affected versions

• BUFFALO INC. WHR-1166DHP2

  Version range not reported

• BUFFALO INC. WHR-1166DHP3

  Version range not reported

• BUFFALO INC. WHR-1166DHP4

  Version range not reported

• BUFFALO INC. WSR-1166DHP3

  Version range not reported

• BUFFALO INC. WSR-600DHP

  Version range not reported

• BUFFALO INC. WEX-300HPTX/N

  Version range not reported

• BUFFALO INC. WEX-733DHP2

  Version range not reported

• BUFFALO INC. WEX-1166DHP2

  Version range not reported

• BUFFALO INC. WEX-1166DHPS

  Version range not reported

• BUFFALO INC. WEX-300HPS/N

  Version range not reported

• BUFFALO INC. WEX-733DHPS

  Version range not reported

• BUFFALO INC. WEX-733DHPTX

  Version range not reported

• BUFFALO INC. WEX-1166DHP

  Version range not reported

• BUFFALO INC. WEX-733DHP

  Version range not reported

• BUFFALO INC. WHR-1166DHP

  Version range not reported

• BUFFALO INC. WHR-300HP2

  Version range not reported

• BUFFALO INC. WHR-600D

  Version range not reported

• BUFFALO INC. WMR-300

  Version range not reported

References 2