OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.
Search vulnerabilities
CVE-2024-26023
CVSS 3.1 · 4.2 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-23486
Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.
CVSS 3.1 · 9.8 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-43486
Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.
CVSS 3.1 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-43443
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.
CVSS 3.1 · 8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.