Medium severity4.2NVD Advisory· Published Apr 15, 2024· Updated Jun 17, 2026

CVE-2024-26023

Description

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

LLM-synthesized narrative grounded in this CVE's description and references.

Buffalotech/WCR-1166DS2 versions
cpe:2.3:o:buffalo:wcr-1166ds_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wcr-1166ds_firmware:*:*:*:*:*:*:*:*range: <1.33
- (no CPE)range: firmware Ver. 1.32 and earlier
Buffalotech/Wsr 1166dhp2 Firmware
cpe:2.3:o:buffalo:wsr-1166dhp2_firmware:*:*:*:*:*:*:*:*
Range: <1.15
Buffalotech/Wzr S900dhp Firmware2 versions
cpe:2.3:o:buffalo:wsr-1166dhp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wsr-1166dhp_firmware:*:*:*:*:*:*:*:*range: <1.15
- (no CPE)range: firmware Ver. 1.14 and earlier
Buffalotech/Wsr 2533dhp2 Firmware
cpe:2.3:o:buffalo:wsr-2533dhp2_firmware:*:*:*:*:*:*:*:*
Range: <1.11
Buffalotech/Wsr 2533dhp Firmware
cpe:2.3:o:buffalo:wsr-2533dhp_firmware:*:*:*:*:*:*:*:*
Range: <1.07
Buffalotech/Wsr 2533dhpl Firmware
cpe:2.3:o:buffalo:wsr-2533dhpl_firmware:*:*:*:*:*:*:*:*
Range: <1.07
Buffalotech/Wsr A2533dhp2 Firmware2 versions
cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:*range: <1.11
- (no CPE)range: firmware Ver. 1.10 and earlier
Buffalotech/wireless LAN routersllm-create
Buffalotech/WSR-1166DHPcpe-rescue
Range: firmware Ver. 1.14 and earlier
Buffalotech/WSR-2533DHP3cpe-rescue2 versions
firmware Ver. 1.06 and earlier+ 1 more
- (no CPE)range: firmware Ver. 1.06 and earlier
- (no CPE)range: firmware Ver. 1.10 and earlier
Buffalotech/WSR-2533DHPL2cpe-rescue
Range: firmware Ver. 1.06 and earlier