Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
82 results · page 1 of 2
Sep 28, 2026Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products.CVE-2026-95104 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.7
Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.
- Product
- WSR-300HP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 28, 2026BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally.CVE-2026-86530 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.6
BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.
- Product
- WSR-300HP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2026Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support.CVE-2026-55407 · Other software · anthropics · reported by GitHubMedium 6.3
Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the decode_unknown_field function in buffa's protobuf decoder allocated heap memory in proportion to untrusted input (unknown fields in the serialized protobuf) without enforcing an allocation budget, affecting any message decoded from untrusted input using code generated with preserve_unknown_fields=true (the default); a small, well-formed payload of nested unknown fields inside a StartGroup could trigger roughly 22x memory amplification (for example a 64 MiB input forcing about 1.4 GB of heap allocation), and length-delimited unknown fields could be sized arbitrarily, so an unauthenticated attacker could crash a process through memory exhaustion because the top-level message size cap did not account for in-decode amplification. This issue is fixed in version 0.8.0.
- Product
- buffa
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2026Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support.CVE-2026-55406 · Other software · anthropics · reported by GitHubMedium 5.9
Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView<V> type allowed safe Rust code to trigger a use-after-free: the OwnedView::decode constructor transmuted a borrowed slice to &'static [u8], and the Deref implementation exposed the promoted 'static lifetime on borrowed view fields (such as &'static str and &'static [u8]) to callers, so the borrow checker permitted those references to outlive the OwnedView; once the OwnedView was dropped and its backing buffer freed, the references became dangling, enabling memory corruption, information disclosure of freed heap contents, and cross-thread misuse without any unsafe code in the calling application. This issue is fixed in version 0.7.0.
- Product
- buffa
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 20, 2026A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their assCVE-2025-66954 · Other software · reported by MITREMedium 6.5
A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentCVE-2026-33366 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.9
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.
- Product
- BUFFALO Wi-Fi router products
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resultiCVE-2026-33280 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.6
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- Product
- BUFFALO Wi-Fi router products
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authenticationCVE-2026-32678 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.7
Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.
- Product
- BUFFALO Wi-Fi router products
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026Code injection vulnerability exists in BUFFALO Wi-Fi router products.CVE-2026-32669 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.7
Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.
- Product
- BUFFALO Wi-Fi router products
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.CVE-2026-27650 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.6
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.
- Product
- BUFFALO Wi-Fi router products
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 16, 2026Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to CVE-2026-29516 · Other software · Buffalo · reported by VulnCheckMedium 6.9
Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root.
- Product
- TeraStation NAS TS5400R
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbuffaloamericas.comvulncheck.com
Nov 7, 2025Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'.CVE-2025-46413 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 5.3
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
- Product
- WSR-1800AX4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2025A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.CVE-2025-61941 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.6
A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration.
- Product
- WXR9300BE6P series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 10, 2025NAS Navigator2 Windows version by BUFFALO INC.CVE-2025-61871 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.4
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
- Product
- NAS Navigator2 (Windows version only)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 6, 2025Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.CVE-2025-26167 · Other software · reported by MITREHigh 7.5
Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters.CVE-2024-44072 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 5.7
OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed.
- Product
- WHR-1166DHP2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 15, 2024OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.CVE-2024-26023 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 4.2
OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.
- Product
- WCR-1166DS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 15, 2024Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the proCVE-2024-23486 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpCritical 9.8
Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.
- Product
- WSR-2533DHP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 29, 2024Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.CVE-2023-49038 · Other software · Buffalo · reported by MITREHigh 7.2
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
- Product
- Ls210d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 10, 2024An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.CVE-2023-51073 · Other software · Buffalo · reported by MITREHigh 8.1
An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.
- Product
- Ls210d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.combuffalotech.com
Dec 26, 2023VR-S1000 firmware Ver.CVE-2023-51363 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.5
VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive information.
- Product
- VR-S1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023VR-S1000 firmware Ver.CVE-2023-46711 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 4.6
VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.
- Product
- VR-S1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver.CVE-2023-46681 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 7.8
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command.
- Product
- VR-S1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2023VR-S1000 firmware Ver.CVE-2023-45741 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.8
VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands.
- Product
- VR-S1000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 7, 2023An Issue in Buffalo America, Inc.CVE-2023-39620 · Other software · buffalo_america_inc · reported by MITREHigh 7.5
An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function.
- Product
- terastation_nas_ts5410r
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2023Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product.CVE-2023-26588 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 7.5
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier
- Product
- BS-GSL and BS-GS series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2023Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product.CVE-2023-24544 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.1
Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier
- Product
- BS-GSL and BS-GS series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2023Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbiCVE-2023-24464 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 5.4
Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier
- Product
- BS-GS series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2022Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalCVE-2022-43486 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.8
Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.
- Product
- WXR-5700AX7S
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2022OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS comCVE-2022-43466 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.8
OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.
- Product
- WXR-5700AX7S
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2022OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted requCVE-2022-43443 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.8
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.
- Product
- WXR-11000XE12
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 7, 2022Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device.CVE-2022-40966 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.8
Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WRM-D2133HP firmware Ver. 2.85 and earlier, WRM-D2133HS firmware Ver. 2.96 and earlier, WTR-M2133HP firmware Ver. 2.85 and earlier, WTR-M2133HS firmware Ver. 2.96 and earlier, WXR-1900DHP firmware Ver. 2.50 and earlier, WXR-1900DHP2 firmware Ver. 2.59 and earlier, WXR-1900DHP3 firmware Ver. 2.63 and earlier, WXR-5950AX12 firmware Ver. 3.40 and earlier, WXR-6000AX12B firmware Ver. 3.40 and earlier, WXR-6000AX12S firmware Ver. 3.40 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-1750DHP2 firmware Ver. 2.31 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WEM-1266 firmware Ver. 2.85 and earlier, WEM-1266WP firmware Ver. 2.85 and
- Product
- Buffalo network devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 7, 2022Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitraCVE-2022-39044 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.8
Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and e
- Product
- Buffalo network devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 7, 2022Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the deviceCVE-2022-34840 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.5
Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, and WZR-D1100H firmware Ver. 2.00 and earlier.
- Product
- Buffalo network devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2021WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges viCVE-2021-20731 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.8
WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.
- Product
- WSR-1166DHP3 and WSR-1166DHP4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2021Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain confCVE-2021-20730 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 4.3
Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors.
- Product
- WSR-1166DHP3 and WSR-1166DHP4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 2021The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive infoCVE-2021-20092 · Other software · Buffalo · reported by vulnreport@tenable.comHigh 7.5
The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor.
- Product
- Wsr-2533dhpl2-bk Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtenable.comtenable.com
Apr 29, 2021The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input.CVE-2021-20091 · Other software · Buffalo · reported by vulnreport@tenable.comHigh 8.8
The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.
- Product
- Wsr-2533dhpl2-bk Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtenable.comtenable.com
Apr 29, 2021Arcadyan Buffalo Firmware Path Traversal VulnerabilityCVE-2021-20090 · Network & remote access · Arcadyan · reported by vulnreport@tenable.comExploitedCritical 9.8
Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors.
- Product
- Buffalo Firmware
- On CISA’s list since
- Nov 3, 2021 (federal fix deadline Nov 17, 2021)
- What to do
- Attackers are using this now. Install Arcadyan’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogkb.cert.orgsecpod.com
Apr 27, 2021Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWCVE-2021-3512 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpHigh 8.8
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via
- Product
- Buffalo broadband routers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 27, 2021Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmCVE-2021-3511 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 4.3
Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors.
- Product
- Buffalo broadband routers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 27, 2021Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 anCVE-2021-20716 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpCritical 9.8
Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior,
- Product
- Buffalo network devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2020Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.CVE-2020-5606 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 6.1
Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.
- Product
- WHR-G54S
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2020Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecifieCVE-2020-5605 · Other software · BUFFALO INC. · reported by vultures@jpcert.or.jpMedium 4.3
Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors.
- Product
- WHR-G54S
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 2, 2019An issue was discovered in Open XDMoD through 7.5.0.CVE-2018-16988 · Other software · Buffalo · reported by MITRECritical 9.8
An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires only 600 guesses in the plausible situation where the attacker knows that the victim has started a password-reset process (pass_reset.php, password_reset.php, XDUser.php) in the past few minutes.
- Product
- Open Xdmod
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 2, 2019An issue was discovered in Open XDMoD through 7.5.0.CVE-2018-16961 · Other software · Buffalo · reported by MITREHigh 7.5
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories.
- Product
- Open Xdmod
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 2, 2019An issue was discovered in Open XDMoD through 7.5.0.CVE-2018-16960 · Other software · Buffalo · reported by MITREMedium 6.1
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter.
- Product
- Open Xdmod
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 26, 2018Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.CVE-2018-13324 · Other software · Buffalo · reported by MITRECritical 9.8
Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.
- Product
- Ts5600d1206 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.securityevaluators.comblog.securityevaluators.com
Nov 26, 2018Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.CVE-2018-13323 · Other software · Buffalo · reported by MITREMedium 6.1
Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.
- Product
- Ts5600d1206 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.securityevaluators.comblog.securityevaluators.com
Nov 26, 2018Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter.CVE-2018-13322 · Other software · Buffalo · reported by MITREMedium 6.5
Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter.
- Product
- Ts5600d1206 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.securityevaluators.comblog.securityevaluators.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.