Read the docs

BUFFALO INC.

Records75All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

BUFFALO INC. records in CISA KEV
TI-2021-03393 Arcadyan Buffalo Firmware Path Traversal Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Wzr-600dhp Firmware 11 records MEDIUM Wzr-1750dhp2 Firmware 10 records MEDIUM Wzr-900dhp Firmware 10 records MEDIUM Wxr-1900dhp2 Firmware 9 records MEDIUM Wzr-600dhp2 Firmware 9 records MEDIUM Wzr-600dhp3 Firmware 8 records MEDIUM Wzr-900dhp2 Firmware 8 records MEDIUM Wzr-s600dhp Firmware 8 records MEDIUM

Records

11 records in Wzr-600dhp Firmware · all components

TI-2026-25171 CVE-2026-32678 · GHSA-x9gr-c22h-6mqf

Authentication bypass in BUFFALO Wi-Fi router products

Priority MEDIUM 44

Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00367 Published 2026-03-27 No fix listed CWE-288
TI-2021-02471 CVE-2021-3512 · GHSA-m7x4-xmjq-8hxp

Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware…

Priority MEDIUM 40

Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 a…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00857 Published 2021-04-28 No fix listed
TI-2026-25168 CVE-2026-32669 · GHSA-vxrf-632h-2jj6

Code injection in BUFFALO Wi-Fi router products

Priority LOW 39

Code injection vulnerability exists in BUFFALO Wi-Fi router products.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00271 Published 2026-03-27 No fix listed CWE-94
TI-2022-19509 CVE-2022-40966 · GHSA-xqpf-m85g-4rg9

Improper authentication in Buffalo network devices

Priority LOW 38

Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00351 Published 2022-12-07 No fix listed CWE-287
TI-2026-25767 CVE-2026-33366 · GHSA-h3gg-7vcj-v4m8

Missing authentication in BUFFALO Wi-Fi router products

Priority LOW 37

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00391 Published 2026-03-27 No fix listed CWE-306
TI-2022-15646 CVE-2022-34840 · GHSA-pgrg-rvjm-c6vq

Hard-coded credentials in Buffalo network devices

Priority LOW 28

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00251 Published 2022-12-07 No fix listed CWE-798
Open these records in search →