Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-46413 EUVD-2025-38245GHSA-v3pv-cj5w-92hv

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled,…

Published Nov 7, 2025 · Updated Nov 7, 2025 · Assigned by jpcert

Description

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.

Affected products

VendorProductAffectedFixed
BUFFALO WSR-1800AX4 prior to Ver.1.09 —
BUFFALO WSR-1800AX4S prior to Ver.1.11 —
BUFFALO WSR-1800AX4B prior to Ver.1.11 —
BUFFALO WSR-1800AX4-KH prior to Ver.1.19 —

References