CVE-2024-44072: OS Command Injection
OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44072?
CVE-2024-44072 is considered a high severity vulnerability due to its potential for arbitrary OS command execution.
How do I fix CVE-2024-44072?
To fix CVE-2024-44072, users should immediately update their BUFFALO wireless LAN routers and wireless LAN repeaters to the latest firmware version provided by the manufacturer.
Which products are affected by CVE-2024-44072?
CVE-2024-44072 affects BUFFALO wireless LAN routers and wireless LAN repeaters that are accessed through the management page.
What can attackers do with CVE-2024-44072?
Attackers exploiting CVE-2024-44072 can execute arbitrary OS commands on the affected devices, leading to potential system compromise.
Is there a workaround for CVE-2024-44072?
Currently, the best course of action for CVE-2024-44072 is to apply the firmware update or limit access to the management page until the update can be completed.