What’s Vulnerable › Vulnerabilities

CVE-2024-44072

• Severity: medium (CVSS 5.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-10 · updated 2026-06-17
• Weakness: CWE-78

Description

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.

Affected products

• Buffalo Inc Wex 1166Dhp: through 1.23
• Buffalo Inc Wex 1166Dhp2: through 1.05
• Buffalo Inc Wex 1166Dhps: through 1.05
• Buffalo Inc Wex 300Hpsn: through 1.02
• Buffalo Inc Wex 300Hptxn: through 1.02
• Buffalo Inc Wex 733Dhp: through 1.64
• Buffalo Inc Wex 733Dhp2: through 1.03
• Buffalo Inc Wex 733Dhps: through 1.02
• Buffalo Inc Wex 733Hptx: through 1.03
• Buffalo Inc Whr 1166Dhp: through 2.92
• Buffalo Inc Whr 1166Dhp2: through 2.95
• Buffalo Inc Whr 1166Dhp3: through 2.95
• Buffalo Inc Whr 1166Dhp4: through 2.95
• Buffalo Inc Whr 300Hp2: through 2.51
• Buffalo Inc Whr 600D: through 2.91
• Buffalo Inc Wmr 300: through 2.50
• Buffalo Inc Wsr 1166Dhp3: through 1.18
• Buffalo Inc Wsr 600Dhp: through 2.93

References

• https://jvn.jp/en/jp/JVN12824024/
• https://www.buffalo.jp/news/detail/20240719-01.html

Get alerted when CVE-2024-44072 or the next vulnerability affects your stack