Vendor
BUFFALO
53 known vulnerabilities.
BUFFALO at a glance
- Last 12 months
- 8
- Critical · all time
- 1
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 2 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 6 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 1 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
WNC01WH 7
BUFFALO Wi-Fi router products 5
WSR-2533DHP2 5
WSR-A2533DHP2 5
VR-S1000 4
Buffalo network devices 4
WCR-1166DS 4
WSR-2533DHP 4
WSR-2533DHPL 4
WXR-1900DHP2 3
WZR-1750DHP2 3
WXR-5700AX7S 3
WXR-5700AX7B 3
WSR-3200AX4S 3
WSR-3200AX4B 3
WSR-2533DHP3 3
WSR-A2533DHP3 3
WSR-2533DHPL2 3
WSR-2533DHPLS 3
WSR-2533DHPLB 3
WHR-G54S 2
WMR-433 2
WMR-433W 2
BBR-4HG 2
BBR-4MG 2
Buffalo broadband routers 2
WSR-300HP 2
WEX-G300 2
BS-GSL and BS-GS series 2
WSR-1166DHP 2
WSR-1166DHP2 2
WSR-1166DHP3 and WSR-1166DHP4 2
WEX-1800AX4 2
WEX-1800AX4EA 2
BS-GS series 1
WAPM-1166D 1
WAPM-APG600H 1
WHR-1166DHP2 1
WHR-1166DHP3 1
WHR-1166DHP4 1
53 results · Feed
-
High 7.5
Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request ma…
-
High 7.2
BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administra…
-
Medium 5.3
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to fo…
-
High 7.2
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the p…
-
High 7.5
Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical conf…
-
High 8.8
Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary …
-
High 8.8
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbi…
-
Medium 4.9
Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers ca…
-
Medium 4.3
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. …
-
High 7.2
A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered …
-
Medium 6.7
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the …
-
Medium 5.7
OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in…
-
Medium 4.2
OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS comm…
-
Critical 9.8
Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauth…
-
Unscored —
VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's…
-
Unscored —
VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the …
-
Unscored —
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware V…
-
Unscored —
VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute …
-
High 8.1
Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific …
-
Medium 5.4
Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web manageme…
-
High 7.5
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function …
-
Medium 6.8
OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative…
-
Medium 6.8
Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative…
-
High 8.0
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitra…
-
Medium 6.5
Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to a…
-
Medium 6.8
Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an admin…
-
High 8.8
Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass au…
-
Unscored —
WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbi…
-
Unscored —
Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 an…
-
Unscored —
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH…
-
Unscored —
Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmwa…
-
Unscored —
Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04…
-
Unscored —
Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive informat…
-
Unscored —
Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary sc…
-
Unscored —
Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
-
Unscored —
Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a special…
-
Unscored —
Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on…
-
Unscored —
Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary co…
-
Unscored —
Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified …
-
Unscored —
Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via …