BUFFALO Wi-Fi Routers Code Injection Vulnerability

A code injection vulnerability has been identified in multiple BUFFALO Wi-Fi router products. This vulnerability allows for the execution of arbitrary code on the affected devices. The issue arises from a dependency on a vulnerable third-party component, mini_httpd, which has its own known vulnerability (CVE-2015-1548).

Impact

Exploitation of this vulnerability allows for the execution of arbitrary code on the affected router.

Remediation

Users are advised to update the router's firmware to the latest version. Instructions for downloading the update are available on the BUFFALO support website. For models no longer supported, it is recommended to discontinue use and consider transitioning to a new product.