cbcvebase.
CVE-2024-26023
published 2024-04-15

CVE-2024-26023: OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

PriorityP428medium4.2CVSS 3.1
AVLACLPRHUINSUCLILAL
EPSS
0.55%
41.8th percentile
OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

Affected

14 ranges
VendorProductVersion rangeFixed in
buffalowcr-1166ds_firmware< 1.331.33
buffalowsr-1166dhp2_firmware< 1.151.15
buffalowsr-1166dhp_firmware< 1.151.15
buffalowsr-2533dhp2_firmware< 1.111.11
buffalowsr-2533dhp_firmware< 1.071.07
buffalowsr-2533dhpl_firmware< 1.071.07
buffalowsr-a2533dhp2_firmware< 1.111.11
buffalo_incwcr-1166ds——
buffalo_incwsr-1166dhp——
buffalo_incwsr-1166dhp2——
buffalo_incwsr-2533dhp——
buffalo_incwsr-2533dhp2——
buffalo_incwsr-2533dhpl——
buffalo_incwsr-a2533dhp2——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.