CVE-2024-26023: OS Command Injection
Published Apr 15, 2024
·Updated
OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.
Affected Software
14 affected components
All of the following
Buffalo WSR-2533DHP firmware<1.07
Buffalo WSR-2533DHP
All of the following
Buffalo WSR-2533DHPL firmware<1.07
Buffalo WSR-2533DHPL
All of the following
Buffalo WSR-2533DHP2 firmware<1.11
Buffalo WSR-2533DHP2
All of the following
Buffalo WSR-A2533DHP2 firmware<1.11
Buffalo WSR-A2533DHP2
All of the following
Buffalo WCR-1166DS firmware<1.33
Buffalo WCR-1166DS
All of the following
Buffalo Wsr-1166dhp Firmware<1.15
Buffalo Wsr-1166dhp
All of the following
Buffalo Wsr-1166dhp2 Firmware<1.15
Buffalo Wsr-1166dhp2
Event History
Apr 15, 2024
CVE Published
via MITRE·10:51 AM
Data Sourced
via MITRE·10:51 AM
DescriptionWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-26023?
CVE-2024-26023 has a critical severity rating due to its ability to allow arbitrary OS command execution.
2
How do I fix CVE-2024-26023?
Fix CVE-2024-26023 by updating the firmware of affected Buffalo routers to the latest version.
3
Which Buffalo routers are affected by CVE-2024-26023?
CVE-2024-26023 affects Buffalo wireless LAN routers including models WSR-2533DHP, WSR-2533DHPL, WSR-2533DHP2, WSR-A2533DHP2, WCR-1166DS, WSR-1166DHP, and WSR-1166DHP2 with specific firmware versions.
4
What type of vulnerability is CVE-2024-26023?
CVE-2024-26023 is classified as an OS command injection vulnerability.
5
Can CVE-2024-26023 be exploited by unauthenticated users?
No, CVE-2024-26023 requires the attacker to be a logged-in user to execute arbitrary OS commands.