Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-23486 EUVD-2024-20984GHSA-5v78-8gv6-c945

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker w…

Published Apr 15, 2024 · Updated Mar 18, 2025 · Assigned by jpcert

Description

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.

Affected products

VendorProductAffectedFixed
BUFFALO WSR-2533DHP firmware Ver. 1.06 and earlier —
BUFFALO WSR-2533DHPL firmware Ver. 1.06 and earlier —
BUFFALO WSR-2533DHP2 firmware Ver. 1.10 and earlier —
BUFFALO WSR-A2533DHP2 firmware Ver. 1.10 and earlier —

References