Read the docs

BUFFALO INC.

Records75All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

BUFFALO INC. records in CISA KEV
TI-2021-03393 Arcadyan Buffalo Firmware Path Traversal Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Wzr-600dhp Firmware 11 records MEDIUM Wzr-1750dhp2 Firmware 10 records MEDIUM Wzr-900dhp Firmware 10 records MEDIUM Wxr-1900dhp2 Firmware 9 records MEDIUM Wzr-600dhp2 Firmware 9 records MEDIUM Wzr-600dhp3 Firmware 8 records MEDIUM Wzr-900dhp2 Firmware 8 records MEDIUM Wzr-s600dhp Firmware 8 records MEDIUM

Records

9 records in Wxr-1900dhp2 Firmware · all components

TI-2026-25171 CVE-2026-32678 · GHSA-x9gr-c22h-6mqf

Authentication bypass in BUFFALO Wi-Fi router products

Priority MEDIUM 44

Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00367 Published 2026-03-27 No fix listed CWE-288
TI-2018-00478 CVE-2018-0521 · GHSA-cmgx-2w9w-7ph2

Missing authentication in BUFFALO INC. WXR-1900DHP2

Priority MEDIUM 40

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00814 Published 2018-03-09 No fix listed CWE-306
TI-2026-25168 CVE-2026-32669 · GHSA-vxrf-632h-2jj6

Code injection in BUFFALO Wi-Fi router products

Priority LOW 39

Code injection vulnerability exists in BUFFALO Wi-Fi router products.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00271 Published 2026-03-27 No fix listed CWE-94
TI-2018-00480 CVE-2018-0523 · GHSA-6rfr-6gg7-342p

OS command injection in BUFFALO INC. WXR-1900DHP2

Priority LOW 39

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00704 Published 2018-03-09 No fix listed CWE-78
TI-2022-19509 CVE-2022-40966 · GHSA-xqpf-m85g-4rg9

Improper authentication in Buffalo network devices

Priority LOW 38

Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00351 Published 2022-12-07 No fix listed CWE-287
TI-2026-25767 CVE-2026-33366 · GHSA-h3gg-7vcj-v4m8

Missing authentication in BUFFALO Wi-Fi router products

Priority LOW 37

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00391 Published 2026-03-27 No fix listed CWE-306
TI-2018-00479 CVE-2018-0522 · GHSA-jq2q-7qx5-g3wj

Memory corruption in BUFFALO INC. WXR-1900DHP2

Priority LOW 37

Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01318 Published 2018-03-09 No fix listed CWE-119
Open these records in search →