BUFFALO INC. WSR-1166DHP2

• CVE-2024-26023 Medium 4.2 OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands. 0.5%
• CVE-2022-43443 High 8.0 OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page. 0.8%