Arbitrary OS Command Injection Vulnerability Affects BUFFALO Wireless LAN Routers
CVE-2024-26023

Currently unrated

Key Information:

Vendor

Buffalo Inc.

Status
Wcr-1166ds
Wsr-1166dHP
Wsr-1166dHP2
Wsr-2533dHP
Vendor
CVE Published:
15 April 2024

What is CVE-2024-26023?

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WCR-1166DS firmware Ver. 1.32 and earlier

WSR-1166DHP firmware Ver. 1.14 and earlier

WSR-1166DHP2 firmware Ver. 1.14 and earlier

References

https://www.buffalo.jp/news/detail/20240410-01.html
https://jvn.jp/en/jp/JVN58236836/

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.