Buffalo

20 CVEs across 362 Buffalo products. Browse Buffalo vulnerabilities, severities, and proof-of-concept exploits.

Buffalo products with known CVEs

ProductCVEs
Wzr-600dhp11
Wzr-600dhp Firmware11
Wzr-1750dhp210
Wzr-1750dhp2 Firmware10
Wzr-900dhp10
Wzr-900dhp Firmware10
Wxr-1900dhp29
Wxr-1900dhp2 Firmware9
Wzr-600dhp29
Wzr-600dhp2 Firmware9
Wzr-600dhp38
Wzr-600dhp3 Firmware8
Wzr-900dhp28
Wzr-900dhp2 Firmware8
Wzr-S600dhp8
Wzr-S600dhp Firmware8
Wzr-S900dhp8
Wzr-S900dhp Firmware8
Open Xdmod7
Ts5600d12067
Ts5600d1206 Firmware7
Wxr-1750dhp7
Wxr-1750dhp Firmware7
Wxr-1900dhp7
Wxr-1900dhp Firmware7
Wzr-1166dhp7
Wzr-1166dhp27
Wzr-1166dhp2 Firmware7
Wzr-1166dhp Firmware7
Wzr-1750dhp7
Wzr-1750dhp Firmware7
Wzr-S1750dhp7
Wzr-S1750dhp Firmware7
Hw-450hp-Zwe6
Hw-450hp-Zwe Firmware6
Wem-12666
Wem-1266 Firmware6
Wem-1266wp6
Wem-1266wp Firmware6
Wrm-D2133hp6
Wrm-D2133hp Firmware6
Wrm-D2133hs6
Wrm-D2133hs Firmware6
Wtr-M2133hp6
Wtr-M2133hp Firmware6
Wtr-M2133hs6
Wtr-M2133hs Firmware6
Wxr-1750dhp26
Wxr-1750dhp2 Firmware6
Wxr-1900dhp36
Buffalo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45779Critical9.82026-06-05OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allo…
CVE-2026-45778Medium5.42026-06-05OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attacker can inject malicious JavaScript int…
CVE-2026-45777Critical9.82026-06-05OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execut…
CVE-2026-45776Medium4.32026-06-05OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacke…
CVE-2026-33366Medium5.32026-03-27Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authen…
CVE-2026-33280Critical9.82026-03-27Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, result…
CVE-2026-32678High7.52026-03-27Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authenticatio…
CVE-2026-32669Critical9.82026-03-27Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.
CVE-2026-27650Critical9.82026-03-27OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the…
CVE-2026-29516Medium4.92026-03-16Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to…
CVE-2024-26023Medium4.22024-04-15OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.
CVE-2024-23486Critical9.82024-04-15Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the pr…
CVE-2023-49038High7.22024-01-29Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
CVE-2023-51073High8.12024-01-11An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.
CVE-2023-51363Medium6.52023-12-26VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive…
CVE-2023-46711Medium4.62023-12-26VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.
CVE-2023-46681High7.82023-12-26Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authentic…
CVE-2023-45741Medium6.82023-12-26VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands.
CVE-2023-39620High7.52023-09-08An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account fun…
CVE-2023-26588High7.52023-04-11Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products an…
CVE-2023-24544High8.12023-04-11Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the p…
CVE-2023-24464Medium5.42023-04-11Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arb…
CVE-2022-43486Medium6.82022-12-19Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functiona…
CVE-2022-43466Medium6.82022-12-19OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS co…
CVE-2022-43443High8.82022-12-19OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted req…
CVE-2022-40966High8.82022-12-07Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The…
CVE-2022-39044Medium6.82022-12-07Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitr…
CVE-2022-34840Medium6.52022-12-07Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the devic…
CVE-2021-20731High8.82021-06-09WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges v…
CVE-2021-20730Medium4.32021-06-09Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain con…
CVE-2021-20092High7.52021-04-29The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive inf…
CVE-2021-20091High8.82021-04-29The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenti…
CVE-2021-20090Critical9.82021-04-29A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow un…
CVE-2021-3512High8.82021-04-28Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-Z…
CVE-2021-3511Medium4.32021-04-28Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH fir…
CVE-2021-20716Critical9.82021-04-28Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 a…
CVE-2020-5606Medium6.12020-09-18Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.
CVE-2020-5605Medium4.32020-09-18Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecifi…
CVE-2018-16988Critical9.82019-05-02An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force a…
CVE-2018-16961High7.52019-05-02An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attacker…
CVE-2018-16960Medium6.12019-05-02An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter.
CVE-2018-13324Critical9.82018-11-26Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.
CVE-2018-13323Medium6.12018-11-26Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.
CVE-2018-13322Medium6.52018-11-26Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter.
CVE-2018-13321High8.82018-11-26Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter.
CVE-2018-13320High7.22018-11-26System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsernam…
CVE-2018-13319High7.52018-11-26Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via an unauthen…
CVE-2018-13318High7.22018-11-26System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" parameter.
CVE-2018-0556High8.82018-04-09Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVE-2018-0555High7.82018-04-09Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
CVE-2018-0554High8.82018-04-09Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.
CVE-2018-0523High8.82018-03-09Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVE-2018-0522High7.82018-03-09Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
CVE-2018-0521High8.82018-03-09Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vec…
CVE-2017-10897Medium4.52017-12-08Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device…
CVE-2017-10896Medium6.12017-12-08Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to injec…
CVE-2017-10811Medium6.82017-08-18Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2274Medium6.12017-07-22Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary…
CVE-2017-2273High8.82017-07-22Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hij…
CVE-2017-2126Critical9.82017-07-22WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configu…
CVE-2016-4816Medium6.52016-06-19BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive informati…
CVE-2016-4815High7.52016-06-19Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows r…