CVE-2024-44072 - Vulnerability Details

Vendors	Products
Buffalo Inc	Wex 1166dhp Wex 1166dhp2 Wex 1166dhps Wex 300hpsn Wex 300hptxn Wex 733dhp Wex 733dhp2 Wex 733dhps Wex 733hptx Whr 1166dhp Whr 1166dhp2 Whr 1166dhp3 Whr 1166dhp4 Whr 300hp2 Whr 600d Wmr 300 Wsr 1166dhp3 Wsr 600dhp

Link	Providers
https://jvn.jp/en/jp/JVN12824024/
https://www.buffalo.jp/news/detail/20240719-01.html

Type	Values Removed	Values Added
First Time appeared		Buffalo Inc Buffalo Inc wex 1166dhp Buffalo Inc wex 1166dhp2 Buffalo Inc wex 1166dhps Buffalo Inc wex 300hpsn Buffalo Inc wex 300hptxn Buffalo Inc wex 733dhp Buffalo Inc wex 733dhp2 Buffalo Inc wex 733dhps Buffalo Inc wex 733hptx Buffalo Inc whr 1166dhp Buffalo Inc whr 1166dhp2 Buffalo Inc whr 1166dhp3 Buffalo Inc whr 1166dhp4 Buffalo Inc whr 300hp2 Buffalo Inc whr 600d Buffalo Inc wmr 300 Buffalo Inc wsr 1166dhp3 Buffalo Inc wsr 600dhp
Weaknesses		CWE-78
CPEs		cpe:2.3:h:buffalo_inc:wex_1166dhp2:::::::: cpe:2.3:h:buffalo_inc:wex_1166dhp:::::::: cpe:2.3:h:buffalo_inc:wex_1166dhps:::::::: cpe:2.3:h:buffalo_inc:wex_300hpsn:::::::: cpe:2.3:h:buffalo_inc:wex_300hptxn:::::::: cpe:2.3:h:buffalo_inc:wex_733dhp2:::::::: cpe:2.3:h:buffalo_inc:wex_733dhp:::::::: cpe:2.3:h:buffalo_inc:wex_733dhps:::::::: cpe:2.3:h:buffalo_inc:wex_733hptx:::::::: cpe:2.3:h:buffalo_inc:whr_1166dhp2:::::::: cpe:2.3:h:buffalo_inc:whr_1166dhp3:::::::: cpe:2.3:h:buffalo_inc:whr_1166dhp4:::::::: cpe:2.3:h:buffalo_inc:whr_1166dhp:::::::: cpe:2.3:h:buffalo_inc:whr_300hp2:::::::: cpe:2.3:h:buffalo_inc:whr_600d:::::::: cpe:2.3:h:buffalo_inc:wmr_300:::::::: cpe:2.3:h:buffalo_inc:wsr_1166dhp3:::::::: cpe:2.3:h:buffalo_inc:wsr_600dhp::::::::
Vendors & Products		Buffalo Inc Buffalo Inc wex 1166dhp Buffalo Inc wex 1166dhp2 Buffalo Inc wex 1166dhps Buffalo Inc wex 300hpsn Buffalo Inc wex 300hptxn Buffalo Inc wex 733dhp Buffalo Inc wex 733dhp2 Buffalo Inc wex 733dhps Buffalo Inc wex 733hptx Buffalo Inc whr 1166dhp Buffalo Inc whr 1166dhp2 Buffalo Inc whr 1166dhp3 Buffalo Inc whr 1166dhp4 Buffalo Inc whr 300hp2 Buffalo Inc whr 600d Buffalo Inc wmr 300 Buffalo Inc wsr 1166dhp3 Buffalo Inc wsr 600dhp
Metrics		cvssV3_1 `{'score': 5.7, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.
References		https://jvn.jp/en/jp/JVN12824024/ https://www.buffalo.jp/news/detail/20240719-01.html

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-44072", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2024-08-19T02:08:40.600Z", "datePublished": "2024-09-10T06:56:44.182Z", "dateUpdated": "2024-09-10T19:58:39.140Z"}, "containers": {"cna": {"affected": [{"vendor": "BUFFALO INC.", "product": "WHR-1166DHP2", "versions": [{"version": "Ver. 2.95 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-1166DHP3", "versions": [{"version": "Ver. 2.95 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-1166DHP4", "versions": [{"version": "Ver. 2.95 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WSR-1166DHP3", "versions": [{"version": "Ver. 1.18 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WSR-600DHP", "versions": [{"version": "Ver. 2.93 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-300HPTX/N", "versions": [{"version": "Ver. 1.02 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHP2", "versions": [{"version": "Ver. 1.03 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-1166DHP2", "versions": [{"version": "Ver. 1.05 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-1166DHPS", "versions": [{"version": "Ver. 1.05 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-300HPS/N", "versions": [{"version": "Ver. 1.02 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHPS", "versions": [{"version": "Ver. 1.02 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHPTX", "versions": [{"version": "Ver. 1.03 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-1166DHP", "versions": [{"version": "Ver. 1.23 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHP", "versions": [{"version": "Ver. 1.64 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-1166DHP", "versions": [{"version": "Ver. 2.92 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-300HP2", "versions": [{"version": "Ver. 2.51 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-600D", "versions": [{"version": "Ver. 2.91 and earlier", "status": "affected"}]}, {"vendor": "BUFFALO INC.", "product": "WMR-300", "versions": [{"version": "Ver. 2.50 and earlier", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed."}], "problemTypes": [{"descriptions": [{"description": "OS command injection", "lang": "en", "type": "text"}]}], "references": [{"url": "https://www.buffalo.jp/news/detail/20240719-01.html"}, {"url": "https://jvn.jp/en/jp/JVN12824024/"}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-09-10T06:56:44.182Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "affected": [{"vendor": "buffalo_inc", "product": "whr_1166dhp2", "cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp2:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.95", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "whr_1166dhp3", "cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp3:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.95", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "whr_1166dhp4", "cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp4:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.95", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wsr_1166dhp3", "cpes": ["cpe:2.3:h:buffalo_inc:wsr_1166dhp3:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.18", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wsr_600dhp", "cpes": ["cpe:2.3:h:buffalo_inc:wsr_600dhp:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.93", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_300hptxn", "cpes": ["cpe:2.3:h:buffalo_inc:wex_300hptxn:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.02", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_733dhp2", "cpes": ["cpe:2.3:h:buffalo_inc:wex_733dhp2:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.03", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_1166dhp2", "cpes": ["cpe:2.3:h:buffalo_inc:wex_1166dhp2:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.05", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_1166dhps", "cpes": ["cpe:2.3:h:buffalo_inc:wex_1166dhps:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.05", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_300hpsn", "cpes": ["cpe:2.3:h:buffalo_inc:wex_300hpsn:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.02", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_733dhps", "cpes": ["cpe:2.3:h:buffalo_inc:wex_733dhps:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.02", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_733hptx", "cpes": ["cpe:2.3:h:buffalo_inc:wex_733hptx:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.03", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_1166dhp", "cpes": ["cpe:2.3:h:buffalo_inc:wex_1166dhp:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.23", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wex_733dhp", "cpes": ["cpe:2.3:h:buffalo_inc:wex_733dhp:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.64", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "whr_1166dhp", "cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.92", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "whr_300hp2", "cpes": ["cpe:2.3:h:buffalo_inc:whr_300hp2:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.51", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "whr_600d", "cpes": ["cpe:2.3:h:buffalo_inc:whr_600d:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.91", "versionType": "custom"}]}, {"vendor": "buffalo_inc", "product": "wmr_300", "cpes": ["cpe:2.3:h:buffalo_inc:wmr_300:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.50", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-10T18:57:48.477370Z", "id": "CVE-2024-44072", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-10T19:58:39.140Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-44072 (string)

assignerOrgId : ede6fdc4-6654-4307-a26d-3331c018e2ce (string)

state : PUBLISHED (string)

assignerShortName : jpcert (string)

dateReserved : 2024-08-19T02:08:40.600Z (string)

datePublished : 2024-09-10T06:56:44.182Z (string)

dateUpdated : 2024-09-10T19:58:39.140Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP2 (string)

versions : [ »

0 : { »

version : Ver. 2.95 and earlier (string)

status : affected (string)

}

]

}

1 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP3 (string)

versions : [ »

0 : { »

version : Ver. 2.95 and earlier (string)

status : affected (string)

}

]

}

2 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP4 (string)

versions : [ »

0 : { »

version : Ver. 2.95 and earlier (string)

status : affected (string)

}

]

}

3 : { »

vendor : BUFFALO INC. (string)

product : WSR-1166DHP3 (string)

versions : [ »

0 : { »

version : Ver. 1.18 and earlier (string)

status : affected (string)

}

]

}

4 : { »

vendor : BUFFALO INC. (string)

product : WSR-600DHP (string)

versions : [ »

0 : { »

version : Ver. 2.93 and earlier (string)

status : affected (string)

}

]

}

5 : { »

vendor : BUFFALO INC. (string)

product : WEX-300HPTX/N (string)

versions : [ »

0 : { »

version : Ver. 1.02 and earlier (string)

status : affected (string)

}

]

}

6 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHP2 (string)

versions : [ »

0 : { »

version : Ver. 1.03 and earlier (string)

status : affected (string)

}

]

}

7 : { »

vendor : BUFFALO INC. (string)

product : WEX-1166DHP2 (string)

versions : [ »

0 : { »

version : Ver. 1.05 and earlier (string)

status : affected (string)

}

]

}

8 : { »

vendor : BUFFALO INC. (string)

product : WEX-1166DHPS (string)

versions : [ »

0 : { »

version : Ver. 1.05 and earlier (string)

status : affected (string)

}

]

}

9 : { »

vendor : BUFFALO INC. (string)

product : WEX-300HPS/N (string)

versions : [ »

0 : { »

version : Ver. 1.02 and earlier (string)

status : affected (string)

}

]

}

10 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHPS (string)

versions : [ »

0 : { »

version : Ver. 1.02 and earlier (string)

status : affected (string)

}

]

}

11 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHPTX (string)

versions : [ »

0 : { »

version : Ver. 1.03 and earlier (string)

status : affected (string)

}

]

}

12 : { »

vendor : BUFFALO INC. (string)

product : WEX-1166DHP (string)

versions : [ »

0 : { »

version : Ver. 1.23 and earlier (string)

status : affected (string)

}

]

}

13 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHP (string)

versions : [ »

0 : { »

version : Ver. 1.64 and earlier (string)

status : affected (string)

}

]

}

14 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP (string)

versions : [ »

0 : { »

version : Ver. 2.92 and earlier (string)

status : affected (string)

}

]

}

15 : { »

vendor : BUFFALO INC. (string)

product : WHR-300HP2 (string)

versions : [ »

0 : { »

version : Ver. 2.51 and earlier (string)

status : affected (string)

}

]

}

16 : { »

vendor : BUFFALO INC. (string)

product : WHR-600D (string)

versions : [ »

0 : { »

version : Ver. 2.91 and earlier (string)

status : affected (string)

}

]

}

17 : { »

vendor : BUFFALO INC. (string)

product : WMR-300 (string)

versions : [ »

0 : { »

version : Ver. 2.50 and earlier (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : OS command injection (string)

lang : en (string)

type : text (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.buffalo.jp/news/detail/20240719-01.html (string)

}

1 : { »

url : https://jvn.jp/en/jp/JVN12824024/ (string)

}

]

providerMetadata : { »

orgId : ede6fdc4-6654-4307-a26d-3331c018e2ce (string)

shortName : jpcert (string)

dateUpdated : 2024-09-10T06:56:44.182Z (string)

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-78 (string)

lang : en (string)

description : CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (string)

}

]

}

]

affected : [ »

0 : { »

vendor : buffalo_inc (string)

product : whr_1166dhp2 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp2:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.95 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : buffalo_inc (string)

product : whr_1166dhp3 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp3:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.95 (string)

versionType : custom (string)

}

]

}

2 : { »

vendor : buffalo_inc (string)

product : whr_1166dhp4 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp4:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.95 (string)

versionType : custom (string)

}

]

}

3 : { »

vendor : buffalo_inc (string)

product : wsr_1166dhp3 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wsr_1166dhp3:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.18 (string)

versionType : custom (string)

}

]

}

4 : { »

vendor : buffalo_inc (string)

product : wsr_600dhp (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wsr_600dhp:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.93 (string)

versionType : custom (string)

}

]

}

5 : { »

vendor : buffalo_inc (string)

product : wex_300hptxn (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_300hptxn:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.02 (string)

versionType : custom (string)

}

]

}

6 : { »

vendor : buffalo_inc (string)

product : wex_733dhp2 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733dhp2:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.03 (string)

versionType : custom (string)

}

]

}

7 : { »

vendor : buffalo_inc (string)

product : wex_1166dhp2 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_1166dhp2:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.05 (string)

versionType : custom (string)

}

]

}

8 : { »

vendor : buffalo_inc (string)

product : wex_1166dhps (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_1166dhps:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.05 (string)

versionType : custom (string)

}

]

}

9 : { »

vendor : buffalo_inc (string)

product : wex_300hpsn (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_300hpsn:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.02 (string)

versionType : custom (string)

}

]

}

10 : { »

vendor : buffalo_inc (string)

product : wex_733dhps (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733dhps:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.02 (string)

versionType : custom (string)

}

]

}

11 : { »

vendor : buffalo_inc (string)

product : wex_733hptx (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733hptx:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.03 (string)

versionType : custom (string)

}

]

}

12 : { »

vendor : buffalo_inc (string)

product : wex_1166dhp (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_1166dhp:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.23 (string)

versionType : custom (string)

}

]

}

13 : { »

vendor : buffalo_inc (string)

product : wex_733dhp (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733dhp:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 1.64 (string)

versionType : custom (string)

}

]

}

14 : { »

vendor : buffalo_inc (string)

product : whr_1166dhp (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.92 (string)

versionType : custom (string)

}

]

}

15 : { »

vendor : buffalo_inc (string)

product : whr_300hp2 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_300hp2:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.51 (string)

versionType : custom (string)

}

]

}

16 : { »

vendor : buffalo_inc (string)

product : whr_600d (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_600d:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.91 (string)

versionType : custom (string)

}

]

}

17 : { »

vendor : buffalo_inc (string)

product : wmr_300 (string)

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wmr_300:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 2.50 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.7 (number)

attackVector : ADJACENT_NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : HIGH (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-09-10T18:57:48.477370Z (string)

id : CVE-2024-44072 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-10T19:58:39.140Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-44072", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-10T18:57:48.477370Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp2:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "whr_1166dhp2", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.95"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp3:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "whr_1166dhp3", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.95"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp4:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "whr_1166dhp4", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.95"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wsr_1166dhp3:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wsr_1166dhp3", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.18"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wsr_600dhp:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wsr_600dhp", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.93"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_300hptxn:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_300hptxn", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.02"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_733dhp2:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_733dhp2", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.03"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_1166dhp2:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_1166dhp2", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.05"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_1166dhps:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_1166dhps", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.05"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_300hpsn:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_300hpsn", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.02"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_733dhps:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_733dhps", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.02"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_733hptx:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_733hptx", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.03"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_1166dhp:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_1166dhp", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.23"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wex_733dhp:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wex_733dhp", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.64"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:whr_1166dhp:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "whr_1166dhp", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.92"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:whr_300hp2:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "whr_300hp2", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.51"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:whr_600d:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "whr_600d", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.91"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:buffalo_inc:wmr_300:*:*:*:*:*:*:*:*"], "vendor": "buffalo_inc", "product": "wmr_300", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.50"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-10T19:02:33.417Z"}}], "cna": {"affected": [{"vendor": "BUFFALO INC.", "product": "WHR-1166DHP2", "versions": [{"status": "affected", "version": "Ver. 2.95 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-1166DHP3", "versions": [{"status": "affected", "version": "Ver. 2.95 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-1166DHP4", "versions": [{"status": "affected", "version": "Ver. 2.95 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WSR-1166DHP3", "versions": [{"status": "affected", "version": "Ver. 1.18 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WSR-600DHP", "versions": [{"status": "affected", "version": "Ver. 2.93 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-300HPTX/N", "versions": [{"status": "affected", "version": "Ver. 1.02 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHP2", "versions": [{"status": "affected", "version": "Ver. 1.03 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-1166DHP2", "versions": [{"status": "affected", "version": "Ver. 1.05 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-1166DHPS", "versions": [{"status": "affected", "version": "Ver. 1.05 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-300HPS/N", "versions": [{"status": "affected", "version": "Ver. 1.02 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHPS", "versions": [{"status": "affected", "version": "Ver. 1.02 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHPTX", "versions": [{"status": "affected", "version": "Ver. 1.03 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-1166DHP", "versions": [{"status": "affected", "version": "Ver. 1.23 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WEX-733DHP", "versions": [{"status": "affected", "version": "Ver. 1.64 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-1166DHP", "versions": [{"status": "affected", "version": "Ver. 2.92 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-300HP2", "versions": [{"status": "affected", "version": "Ver. 2.51 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WHR-600D", "versions": [{"status": "affected", "version": "Ver. 2.91 and earlier"}]}, {"vendor": "BUFFALO INC.", "product": "WMR-300", "versions": [{"status": "affected", "version": "Ver. 2.50 and earlier"}]}], "references": [{"url": "https://www.buffalo.jp/news/detail/20240719-01.html"}, {"url": "https://jvn.jp/en/jp/JVN12824024/"}], "descriptions": [{"lang": "en", "value": "OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "OS command injection"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-09-10T06:56:44.182Z"}}}, "cveMetadata": {"cveId": "CVE-2024-44072", "state": "PUBLISHED", "dateUpdated": "2024-09-10T19:58:39.140Z", "dateReserved": "2024-08-19T02:08:40.600Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2024-09-10T06:56:44.182Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.7 (number)

attackVector : ADJACENT_NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : HIGH (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-44072 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-10T18:57:48.477370Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp2:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : whr_1166dhp2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.95 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp3:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : whr_1166dhp3 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.95 (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp4:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : whr_1166dhp4 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.95 (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wsr_1166dhp3:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wsr_1166dhp3 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.18 (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wsr_600dhp:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wsr_600dhp (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.93 (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_300hptxn:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_300hptxn (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.02 (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733dhp2:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_733dhp2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.03 (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_1166dhp2:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_1166dhp2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.05 (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_1166dhps:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_1166dhps (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.05 (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_300hpsn:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_300hpsn (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.02 (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733dhps:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_733dhps (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.02 (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733hptx:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_733hptx (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.03 (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_1166dhp:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_1166dhp (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.23 (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wex_733dhp:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wex_733dhp (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 1.64 (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_1166dhp:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : whr_1166dhp (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.92 (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_300hp2:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : whr_300hp2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.51 (string)

}

]

defaultStatus : unknown (string)

}

16 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:whr_600d:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : whr_600d (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.91 (string)

}

]

defaultStatus : unknown (string)

}

17 : { »

cpes : [ »

0 : cpe:2.3:h:buffalo_inc:wmr_300:*:*:*:*:*:*:*:* (string)

]

vendor : buffalo_inc (string)

product : wmr_300 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 2.50 (string)

}

]

defaultStatus : unknown (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-78 (string)

description : CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-10T19:02:33.417Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP2 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.95 and earlier (string)

}

]

}

1 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP3 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.95 and earlier (string)

}

]

}

2 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP4 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.95 and earlier (string)

}

]

}

3 : { »

vendor : BUFFALO INC. (string)

product : WSR-1166DHP3 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.18 and earlier (string)

}

]

}

4 : { »

vendor : BUFFALO INC. (string)

product : WSR-600DHP (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.93 and earlier (string)

}

]

}

5 : { »

vendor : BUFFALO INC. (string)

product : WEX-300HPTX/N (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.02 and earlier (string)

}

]

}

6 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHP2 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.03 and earlier (string)

}

]

}

7 : { »

vendor : BUFFALO INC. (string)

product : WEX-1166DHP2 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.05 and earlier (string)

}

]

}

8 : { »

vendor : BUFFALO INC. (string)

product : WEX-1166DHPS (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.05 and earlier (string)

}

]

}

9 : { »

vendor : BUFFALO INC. (string)

product : WEX-300HPS/N (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.02 and earlier (string)

}

]

}

10 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHPS (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.02 and earlier (string)

}

]

}

11 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHPTX (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.03 and earlier (string)

}

]

}

12 : { »

vendor : BUFFALO INC. (string)

product : WEX-1166DHP (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.23 and earlier (string)

}

]

}

13 : { »

vendor : BUFFALO INC. (string)

product : WEX-733DHP (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 1.64 and earlier (string)

}

]

}

14 : { »

vendor : BUFFALO INC. (string)

product : WHR-1166DHP (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.92 and earlier (string)

}

]

}

15 : { »

vendor : BUFFALO INC. (string)

product : WHR-300HP2 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.51 and earlier (string)

}

]

}

16 : { »

vendor : BUFFALO INC. (string)

product : WHR-600D (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.91 and earlier (string)

}

]

}

17 : { »

vendor : BUFFALO INC. (string)

product : WMR-300 (string)

versions : [ »

0 : { »

status : affected (string)

version : Ver. 2.50 and earlier (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.buffalo.jp/news/detail/20240719-01.html (string)

}

1 : { »

url : https://jvn.jp/en/jp/JVN12824024/ (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : OS command injection (string)

}

]

}

]

providerMetadata : { »

orgId : ede6fdc4-6654-4307-a26d-3331c018e2ce (string)

shortName : jpcert (string)

dateUpdated : 2024-09-10T06:56:44.182Z (string)

}

cveMetadata : { »

cveId : CVE-2024-44072 (string)

state : PUBLISHED (string)

dateUpdated : 2024-09-10T19:58:39.140Z (string)

dateReserved : 2024-08-19T02:08:40.600Z (string)

assignerOrgId : ede6fdc4-6654-4307-a26d-3331c018e2ce (string)

datePublished : 2024-09-10T06:56:44.182Z (string)

assignerShortName : jpcert (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed."}, {"lang": "es", "value": "Existe una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en los enrutadores y repetidores de LAN inal\u00e1mbrica de BUFFALO. Si un usuario inicia sesi\u00f3n en la p\u00e1gina de administraci\u00f3n y env\u00eda una solicitud especialmente manipulada al producto afectado desde la p\u00e1gina de administraci\u00f3n espec\u00edfica del producto, se puede ejecutar un comando arbitrario del sistema operativo."}], "id": "CVE-2024-44072", "lastModified": "2024-09-10T20:35:09.990", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 4.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-09-10T07:15:01.963", "references": [{"source": "vultures@jpcert.or.jp", "url": "https://jvn.jp/en/jp/JVN12824024/"}, {"source": "vultures@jpcert.or.jp", "url": "https://www.buffalo.jp/news/detail/20240719-01.html"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed. (string)

}

1 : { »

lang : es (string)

value : Existe una vulnerabilidad de inyección de comandos del sistema operativo en los enrutadores y repetidores de LAN inalámbrica de BUFFALO. Si un usuario inicia sesión en la página de administración y envía una solicitud especialmente manipulada al producto afectado desde la página de administración específica del producto, se puede ejecutar un comando arbitrario del sistema operativo. (string)

}

]

id : CVE-2024-44072 (string)

lastModified : 2024-09-10T20:35:09.990 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 0.9 (number)

impactScore : 4.7 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-09-10T07:15:01.963 (string)

references : [ »

0 : { »

source : vultures@jpcert.or.jp (string)

url : https://jvn.jp/en/jp/JVN12824024/ (string)

}

1 : { »

source : vultures@jpcert.or.jp (string)

url : https://www.buffalo.jp/news/detail/20240719-01.html (string)

}

]

sourceIdentifier : vultures@jpcert.or.jp (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-78 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object