Buffalo Wsr-2533Dhp2 Firmware vulnerabilities

CVE-2024-23486 [CRITICAL] CWE-256 CVE-2024-23486: Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a netw Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.

CVE-2022-43443 [HIGH] CWE-78 CVE-2022-43443: OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.

CVE-2022-43466 [MEDIUM] CWE-78 CVE-2022-43466: OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker wit OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

CVE-2022-43486 [MEDIUM] CWE-94 CVE-2022-43486: Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker wit Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.

CVE-2024-26023 [MEDIUM] CWE-78 CVE-2024-26023: OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execut OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.