Buffalo Inc.
50 CVEs across 60 Buffalo Inc. products. Browse Buffalo Inc. vulnerabilities, severities, and proof-of-concept exploits.
Buffalo Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33366 | Medium | 5.3 | 2026-03-27 | Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authen… |
CVE-2026-33280 | Critical | 9.8 | 2026-03-27 | Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, result… |
CVE-2026-32678 | High | 7.5 | 2026-03-27 | Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authenticatio… |
CVE-2026-32669 | Critical | 9.8 | 2026-03-27 | Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products. |
CVE-2026-27650 | Critical | 9.8 | 2026-03-27 | OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the… |
CVE-2025-46413 | Medium | 4.3 | 2025-11-07 | Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-… |
CVE-2025-61941 | High | 7.2 | 2025-10-15 | A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to… |
CVE-2025-61871 | Medium | 6.7 | 2025-10-10 | NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory o… |
CVE-2024-44072 | Medium | 5.7 | 2024-09-10 | OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a spec… |
CVE-2024-26023 | Medium | 4.2 | 2024-04-15 | OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands. |
CVE-2024-23486 | Critical | 9.8 | 2024-04-15 | Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the pr… |
CVE-2023-51363 | Medium | 6.5 | 2023-12-26 | VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive… |
CVE-2023-46711 | Medium | 4.6 | 2023-12-26 | VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user. |
CVE-2023-46681 | High | 7.8 | 2023-12-26 | Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authentic… |
CVE-2023-45741 | Medium | 6.8 | 2023-12-26 | VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands. |
CVE-2023-26588 | High | 7.5 | 2023-04-11 | Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products an… |
CVE-2023-24544 | High | 8.1 | 2023-04-11 | Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the p… |
CVE-2023-24464 | Medium | 5.4 | 2023-04-11 | Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arb… |
CVE-2022-43486 | Medium | 6.8 | 2022-12-19 | Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functiona… |
CVE-2022-43466 | Medium | 6.8 | 2022-12-19 | OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS co… |
CVE-2022-43443 | High | 8.8 | 2022-12-19 | OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted req… |
CVE-2022-40966 | High | 8.8 | 2022-12-07 | Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The… |
CVE-2022-39044 | Medium | 6.8 | 2022-12-07 | Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitr… |
CVE-2022-34840 | Medium | 6.5 | 2022-12-07 | Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the devic… |
CVE-2021-20731 | High | 8.8 | 2021-06-09 | WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges v… |
CVE-2021-20730 | Medium | 4.3 | 2021-06-09 | Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain con… |
CVE-2021-3512 | High | 8.8 | 2021-04-28 | Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-Z… |
CVE-2021-3511 | Medium | 4.3 | 2021-04-28 | Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH fir… |
CVE-2021-20716 | Critical | 9.8 | 2021-04-28 | Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 a… |
CVE-2020-5606 | Medium | 6.1 | 2020-09-18 | Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page. |
CVE-2020-5605 | Medium | 4.3 | 2020-09-18 | Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecifi… |
CVE-2018-0556 | High | 8.8 | 2018-04-09 | Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. |
CVE-2018-0555 | High | 7.8 | 2018-04-09 | Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file. |
CVE-2018-0554 | High | 8.8 | 2018-04-09 | Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors. |
CVE-2018-0523 | High | 8.8 | 2018-03-09 | Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. |
CVE-2018-0522 | High | 7.8 | 2018-03-09 | Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file. |
CVE-2018-0521 | High | 8.8 | 2018-03-09 | Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vec… |
CVE-2017-10897 | Medium | 4.5 | 2017-12-08 | Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device… |
CVE-2017-10896 | Medium | 6.1 | 2017-12-08 | Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to injec… |
CVE-2017-10811 | Medium | 6.8 | 2017-08-18 | Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. |
CVE-2017-2274 | Medium | 6.1 | 2017-07-22 | Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary… |
CVE-2017-2273 | High | 8.8 | 2017-07-22 | Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hij… |
CVE-2017-2126 | Critical | 9.8 | 2017-07-22 | WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configu… |
CVE-2016-7826 | Medium | 6.5 | 2017-06-09 | Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files v… |
CVE-2016-7825 | Medium | 6.5 | 2017-06-09 | Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files v… |
CVE-2016-7824 | High | 8.8 | 2017-06-09 | Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via uns… |
CVE-2016-7823 | Medium | 4.3 | 2017-06-09 | Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web… |
CVE-2016-7822 | High | 8.8 | 2017-06-09 | Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the auth… |
CVE-2016-7821 | Medium | 6.5 | 2017-06-09 | Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspeci… |
CVE-2017-2152 | Medium | 6.8 | 2017-04-28 | WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors. |