OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters
Published Sep 10, 2024
5.7
MEDIUMCVSS 3.1
EPSS 0.60%
Description
OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.
Affected products
-
Affected
- Ver. 1.23 and earlier
-
Affected
- Ver. 1.05 and earlier
-
Affected
- Ver. 1.05 and earlier
-
Affected
- Ver. 1.02 and earlier
-
Affected
- Ver. 1.02 and earlier
-
Affected
- Ver. 1.64 and earlier
-
Affected
- Ver. 1.03 and earlier
-
Affected
- Ver. 1.02 and earlier
-
Affected
- Ver. 1.03 and earlier
-
Affected
- Ver. 2.92 and earlier
-
Affected
- Ver. 2.95 and earlier
-
Affected
- Ver. 2.95 and earlier
-
Affected
- Ver. 2.95 and earlier
-
Affected
- Ver. 2.51 and earlier
-
Affected
- Ver. 2.91 and earlier
-
Affected
- Ver. 2.50 and earlier
-
Affected
- Ver. 1.18 and earlier
-
Affected
- Ver. 2.93 and earlier
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Buffalo Inc. | Wex-1166dhp | unknown | Affected
|
| Buffalo Inc. | Wex-1166dhp2 | unknown | Affected
|
| Buffalo Inc. | Wex-1166dhps | unknown | Affected
|
| Buffalo Inc. | Wex-300hps/n | unknown | Affected
|
| Buffalo Inc. | Wex-300hptx/n | unknown | Affected
|
| Buffalo Inc. | Wex-733dhp | unknown | Affected
|
| Buffalo Inc. | Wex-733dhp2 | unknown | Affected
|
| Buffalo Inc. | Wex-733dhps | unknown | Affected
|
| Buffalo Inc. | Wex-733dhptx | unknown | Affected
|
| Buffalo Inc. | Whr-1166dhp | unknown | Affected
|
| Buffalo Inc. | Whr-1166dhp2 | unknown | Affected
|
| Buffalo Inc. | Whr-1166dhp3 | unknown | Affected
|
| Buffalo Inc. | Whr-1166dhp4 | unknown | Affected
|
| Buffalo Inc. | Whr-300hp2 | unknown | Affected
|
| Buffalo Inc. | WHR-600D | unknown | Affected
|
| Buffalo Inc. | WMR-300 | unknown | Affected
|
| Buffalo Inc. | Wsr-1166dhp3 | unknown | Affected
|
| Buffalo Inc. | Wsr-600dhp | unknown | Affected
|
No data.
-
Affected
- ≥ 0, ≤ 1.23
-
Affected
- ≥ 0, ≤ 1.05
-
Affected
- ≥ 0, ≤ 1.05
-
Affected
- ≥ 0, ≤ 1.02
-
Affected
- ≥ 0, ≤ 1.02
-
Affected
- ≥ 0, ≤ 1.64
-
Affected
- ≥ 0, ≤ 1.03
-
Affected
- ≥ 0, ≤ 1.02
-
Affected
- ≥ 0, ≤ 1.03
-
Affected
- ≥ 0, ≤ 2.92
-
Affected
- ≥ 0, ≤ 2.95
-
Affected
- ≥ 0, ≤ 2.95
-
Affected
- ≥ 0, ≤ 2.95
-
Affected
- ≥ 0, ≤ 2.51
-
Affected
- ≥ 0, ≤ 2.91
-
Affected
- ≥ 0, ≤ 2.50
-
Affected
- ≥ 0, ≤ 1.18
-
Affected
- ≥ 0, ≤ 2.93
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Buffalo Inc | Wex 1166dhp | unknown | Affected
|
| Buffalo Inc | Wex 1166dhp2 | unknown | Affected
|
| Buffalo Inc | Wex 1166dhps | unknown | Affected
|
| Buffalo Inc | Wex 300hpsn | unknown | Affected
|
| Buffalo Inc | Wex 300hptxn | unknown | Affected
|
| Buffalo Inc | Wex 733dhp | unknown | Affected
|
| Buffalo Inc | Wex 733dhp2 | unknown | Affected
|
| Buffalo Inc | Wex 733dhps | unknown | Affected
|
| Buffalo Inc | Wex 733hptx | unknown | Affected
|
| Buffalo Inc | Whr 1166dhp | unknown | Affected
|
| Buffalo Inc | Whr 1166dhp2 | unknown | Affected
|
| Buffalo Inc | Whr 1166dhp3 | unknown | Affected
|
| Buffalo Inc | Whr 1166dhp4 | unknown | Affected
|
| Buffalo Inc | Whr 300hp2 | unknown | Affected
|
| Buffalo Inc | Whr 600d | unknown | Affected
|
| Buffalo Inc | Wmr 300 | unknown | Affected
|
| Buffalo Inc | Wsr 1166dhp3 | unknown | Affected
|
| Buffalo Inc | Wsr 600dhp | unknown | Affected
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data