Read the docs

BUFFALO INC.

Records75All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

BUFFALO INC. records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Wzr-1750dhp2 Firmware · all components

Priority MEDIUM 44

Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00367 Published 2026-03-27 No fix listed CWE-288
Priority MEDIUM 40

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00814 Published 2018-04-09 No fix listed CWE-306
Priority LOW 39

Code injection vulnerability exists in BUFFALO Wi-Fi router products.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00271 Published 2026-03-27 No fix listed CWE-94
Priority LOW 38

Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00351 Published 2022-12-07 No fix listed CWE-287
Priority LOW 37

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00391 Published 2026-03-27 No fix listed CWE-306
Priority LOW 37

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01531 Published 2018-04-09 No fix listed CWE-119
Open these records in search →