CVE-2024-26023: Buffalo Wcr-1166ds Firmware

Medium severity, CVSS 4.2. EPSS: 0.6% chance of exploitation in the next 30 days.

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

Affected products

• Buffalo Wcr-1166ds Firmware: before 1.33 (fixed in 1.33)
• Buffalo Wsr-1166dhp2 Firmware: before 1.15 (fixed in 1.15)
• Buffalo Wsr-1166dhp Firmware: before 1.15 (fixed in 1.15)
• Buffalo Wsr-2533dhp2 Firmware: before 1.11 (fixed in 1.11)
• Buffalo Wsr-2533dhp Firmware: before 1.07 (fixed in 1.07)
• Buffalo Wsr-2533dhpl Firmware: before 1.07 (fixed in 1.07)
• Buffalo Wsr-a2533dhp2 Firmware: before 1.11 (fixed in 1.11)

Published 2024-04-15. Last modified 2026-06-17.