Buffalo Inc Wcr-1166Ds vulnerabilities

CVE-2022-43443 [HIGH] CWE-78 CVE-2022-43443: OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.

CVE-2022-43486 [MEDIUM] CWE-94 CVE-2022-43486: Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker wit Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.

CVE-2017-10811 [MEDIUM] CWE-78 CVE-2017-10811: Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.

CVE-2024-26023 [MEDIUM] CWE-78 CVE-2024-26023: OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execut OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.