GCVE - cpe:2.3:h:buffalo:wcr-1166ds:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:buffalo:wcr-1166ds:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Buffalo (`ae033968-4286-5bf6-8bbd-eb847d0b0a12`)
Product	Wcr 1166Ds (`c41994e3-d98d-557b-ad78-99c52ead9c74`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-26023`	not_vulnerable	2026-06-08 06:31:24.691585	Details available OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands. Published: 2024-04-15T10:51:04.093Z Updated: 2024-08-01T23:59:31.288Z Open on db.gcve.eu Reference links https://www.buffalo.jp/news/detail/20240410-01.html https://jvn.jp/en/jp/JVN58236836/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43486`	not_vulnerable	2026-06-08 05:49:32.129068	Details available Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices. Published: 2022-12-19T00:00:00.000Z Updated: 2025-04-17T14:34:25.560Z Open on db.gcve.eu Reference links https://www.buffalo.jp/news/detail/20240131-01.html https://jvn.jp/en/vu/JVNVU97099584/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43443`	not_vulnerable	2026-06-08 05:49:31.976559	Details available OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page. Published: 2022-12-19T00:00:00.000Z Updated: 2025-04-17T14:54:48.368Z Open on db.gcve.eu Reference links https://www.buffalo.jp/news/detail/20240131-01.html https://jvn.jp/en/vu/JVNVU97099584/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-10811`	not_vulnerable	2026-06-08 05:08:36.323303	Details available Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. Published: 2017-08-18T13:00:00.000Z Updated: 2024-08-05T17:50:11.696Z Open on db.gcve.eu Reference links http://buffalo.jp/support_s/s20170804_1.html https://jvn.jp/en/jp/JVN05340005/index.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.