CVE-2024-44072

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Sep 10, 2024
Source updated: Sep 10, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WHR-1166DHP2

Vendor: BUFFALO INC.
Product: WHR-1166DHP2
Platforms: Unknown
Default status: Unknown

WHR-1166DHP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.95 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WHR-1166DHP3

Vendor: BUFFALO INC.
Product: WHR-1166DHP3
Platforms: Unknown
Default status: Unknown

WHR-1166DHP3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.95 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WHR-1166DHP4

Vendor: BUFFALO INC.
Product: WHR-1166DHP4
Platforms: Unknown
Default status: Unknown

WHR-1166DHP4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.95 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-1166DHP3

Vendor: BUFFALO INC.
Product: WSR-1166DHP3
Platforms: Unknown
Default status: Unknown

WSR-1166DHP3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.18 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-600DHP

Vendor: BUFFALO INC.
Product: WSR-600DHP
Platforms: Unknown
Default status: Unknown

WSR-600DHP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.93 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-300HPTX/N

Vendor: BUFFALO INC.
Product: WEX-300HPTX/N
Platforms: Unknown
Default status: Unknown

WEX-300HPTX/N · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.02 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-733DHP2

Vendor: BUFFALO INC.
Product: WEX-733DHP2
Platforms: Unknown
Default status: Unknown

WEX-733DHP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.03 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-1166DHP2

Vendor: BUFFALO INC.
Product: WEX-1166DHP2
Platforms: Unknown
Default status: Unknown

WEX-1166DHP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.05 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-1166DHPS

Vendor: BUFFALO INC.
Product: WEX-1166DHPS
Platforms: Unknown
Default status: Unknown

WEX-1166DHPS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.05 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-300HPS/N

Vendor: BUFFALO INC.
Product: WEX-300HPS/N
Platforms: Unknown
Default status: Unknown

WEX-300HPS/N · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.02 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-733DHPS

Vendor: BUFFALO INC.
Product: WEX-733DHPS
Platforms: Unknown
Default status: Unknown

WEX-733DHPS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.02 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-733DHPTX

Vendor: BUFFALO INC.
Product: WEX-733DHPTX
Platforms: Unknown
Default status: Unknown

WEX-733DHPTX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.03 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-1166DHP

Vendor: BUFFALO INC.
Product: WEX-1166DHP
Platforms: Unknown
Default status: Unknown

WEX-1166DHP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.23 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-733DHP

Vendor: BUFFALO INC.
Product: WEX-733DHP
Platforms: Unknown
Default status: Unknown

WEX-733DHP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 1.64 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WHR-1166DHP

Vendor: BUFFALO INC.
Product: WHR-1166DHP
Platforms: Unknown
Default status: Unknown

WHR-1166DHP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.92 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WHR-300HP2

Vendor: BUFFALO INC.
Product: WHR-300HP2
Platforms: Unknown
Default status: Unknown

WHR-300HP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.51 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WHR-600D

Vendor: BUFFALO INC.
Product: WHR-600D
Platforms: Unknown
Default status: Unknown

WHR-600D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.91 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WMR-300

Vendor: BUFFALO INC.
Product: WMR-300
Platforms: Unknown
Default status: Unknown

WMR-300 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Ver. 2.50 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed