MEDIUM🇵🇱 Wersja polska

CVE-2017-10811

CVSS 6.8v3.0pub. 2017-08-18upd. 2026-05-13

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Buffalo Wcr 1166ds

    HW
    Buffalo
    all versions

  • Buffalo Wcr 1166ds Firmware

    OS
    Buffalo
    1.30
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2022-43443HIGH8.8same product

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute a...

CVE-2024-26023MEDIUM4.2same product

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrar...

CVE-2022-43486MEDIUM6.8same product

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an admin...

CVE-2021-20090CRITICAL9.8⚠ KEVPL ✓same vendor

Path Traversal umożliwiający obejście uwierzytelnienia w routerach Buffalo

CVE-2026-45777CRITICAL9.3PL ✓same vendor

RCE poprzez command injection w Open XDMoD (wersje 9.5.0–11.0.2)