CVE-2024-44072

2024-09-1006:56:44

jpcert

github.com

command injection

buffalo

wireless lan

routers

management page

AI Score

7.7

Confidence

Low

EPSS

Percentile

10.2%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product’s specific management page, an arbitrary OS command may be executed.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:whr_1166dhp2:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "whr_1166dhp2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.95"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:whr_1166dhp3:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "whr_1166dhp3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.95"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:whr_1166dhp4:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "whr_1166dhp4",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.95"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wsr_1166dhp3:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wsr_1166dhp3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.18"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wsr_600dhp:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wsr_600dhp",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.93"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_300hptxn:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_300hptxn",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.02"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_733dhp2:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_733dhp2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.03"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_1166dhp2:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_1166dhp2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.05"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_1166dhps:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_1166dhps",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.05"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_300hpsn:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_300hpsn",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.02"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_733dhps:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_733dhps",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.02"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_733hptx:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_733hptx",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.03"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_1166dhp:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_1166dhp",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.23"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wex_733dhp:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wex_733dhp",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.64"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:whr_1166dhp:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "whr_1166dhp",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.92"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:whr_300hp2:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "whr_300hp2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.51"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:whr_600d:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "whr_600d",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.91"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:buffalo_inc:wmr_300:*:*:*:*:*:*:*:*"
    ],
    "vendor": "buffalo_inc",
    "product": "wmr_300",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.50"
      }
    ],
    "defaultStatus": "unknown"
  }
]