Hidden functionality vulnerability in multiple Buffalo network devices allows a…
Priority LOW 30Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WLI-TX4-AG300N firmware Ver. 1.53 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WZR2-G108 firmware Ver. 1.33 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, and WZR-HP-G450H firmware Ver. 1.90 and earlier.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00329 26th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| BUFFALO INC. | Buffalo network devices | A wide range of products is affected. For the specific products/versions information, see the URLs provided by the vendor and JVN which are listed in [Reference] section. | — | No fix listed | CNA |
- Buffalo network devices VendorBUFFALO INC. Affected A wide range of products is affected. For the specific products/versions information, see the URLs provided by the vendor and JVN which are listed in [Reference] section. Fixed in — No fix listed CNA
CPE configurations NVD · 108
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:buffalo:wcr-300_firmware:*:*:*:*:*:*:*:* | up to 1.87 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wcr-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-hp-g300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-hp-gn_firmware:*:*:*:*:*:*:*:* | up to 1.87 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-hp-gn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:* | up to 1.88 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wpl-05g300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-300hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
- cpe:2.3:o:buffalo:wcr-300_firmware:*:*:*:*:*:*:*:* Versions up to 1.87 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wcr-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-hp-g300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-hp-gn_firmware:*:*:*:*:*:*:*:* Versions up to 1.87 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-hp-gn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:* Versions up to 1.88 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wpl-05g300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-300hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Show 98 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-450hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-600dhp_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-900dhp_firmware:*:*:*:*:*:*:*:* | up to 1.15 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-900dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:* | up to 1.76 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-hp-ag300h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:* | up to 1.86 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-hp-g302h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wlae-ag300n_firmware:*:*:*:*:*:*:*:* | up to 1.86 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wlae-ag300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:* | up to 3.40 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-600dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-g300n_firmware:*:*:*:*:*:*:*:* | up to 3.14 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-g300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-hp-g300n_firmware:*:*:*:*:*:*:*:* | up to 3.33 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-hp-g300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-r600dhp_firmware:*:*:*:*:*:*:*:* | up to 3.40 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-r600dhp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:bhr-4grv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:* | up to 1.84 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:dwr-hp-g300nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:dwr-pg_firmware:*:*:*:*:*:*:*:* | up to 1.83 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:dwr-pg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:hw-450hp-zwe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wer-a54g54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wer-a54g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wer-ag54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wer-ag54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wer-am54g54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wer-am54g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wer-amg54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wer-amg54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-300hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-am54g54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-am54g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-amg54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-amg54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-ampg_firmware:*:*:*:*:*:*:*:* | up to 1.52 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-ampg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g_firmware:*:*:*:*:*:*:*:* | up to 1.49 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g300n_firmware:*:*:*:*:*:*:*:* | up to 1.65 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g301n_firmware:*:*:*:*:*:*:*:* | up to 1.87 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g301n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g54s_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g54s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g54s-ni_firmware:*:*:*:*:*:*:*:* | up to 1.24 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g54s-ni:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-hp-ampg_firmware:*:*:*:*:*:*:*:* | up to 1.49 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-hp-ampg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-hp-g_firmware:*:*:*:*:*:*:*:* | up to 1.49 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-hp-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-hp-g54_firmware:*:*:*:*:*:*:*:* | up to 1.43 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-hp-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli-h4-d600_firmware:*:*:*:*:*:*:*:* | up to 1.88 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli-h4-d600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli-tx4-ag300n_firmware:*:*:*:*:*:*:*:* | up to 1.53 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli-tx4-ag300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:ws024bf_firmware:*:*:*:*:*:*:*:* | up to 1.60 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:ws024bf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:ws024bf-nw_firmware:*:*:*:*:*:*:*:* | up to 1.60 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:ws024bf-nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr2-g108_firmware:*:*:*:*:*:*:*:* | up to 1.33 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr2-g108:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr2-g300n_firmware:*:*:*:*:*:*:*:* | up to 1.55 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr2-g300n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-450hp-cwt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-450hp-ub:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-600dhp2_firmware:*:*:*:*:*:*:*:* | up to 1.15 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-600dhp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-agl300nh_firmware:*:*:*:*:*:*:*:* | up to 1.55 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-agl300nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-ampg144nh_firmware:*:*:*:*:*:*:*:* | up to 1.49 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-ampg144nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-ampg300nh_firmware:*:*:*:*:*:*:*:* | up to 1.51 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-ampg300nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:* | up to 2.00 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-d1100h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-g144n_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-g144n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-g144nh_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-g144nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:* | up to 1.84 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-hp-g300nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:* | up to 1.84 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-hp-g301nh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:* | up to 1.90 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-hp-g450h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
- cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-450hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-600dhp_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-900dhp_firmware:*:*:*:*:*:*:*:* Versions up to 1.15 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-900dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:* Versions up to 1.76 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-hp-ag300h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:* Versions up to 1.86 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-hp-g302h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wlae-ag300n_firmware:*:*:*:*:*:*:*:* Versions up to 1.86 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wlae-ag300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:* Versions up to 3.40 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-600dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-g300n_firmware:*:*:*:*:*:*:*:* Versions up to 3.14 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-g300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-hp-g300n_firmware:*:*:*:*:*:*:*:* Versions up to 3.33 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-hp-g300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-r600dhp_firmware:*:*:*:*:*:*:*:* Versions up to 3.40 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-r600dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:bhr-4grv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.84 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:dwr-hp-g300nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:dwr-pg_firmware:*:*:*:*:*:*:*:* Versions up to 1.83 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:dwr-pg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:hw-450hp-zwe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wer-a54g54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wer-a54g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wer-ag54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wer-ag54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wer-am54g54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wer-am54g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wer-amg54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wer-amg54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-300hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-am54g54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-am54g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-amg54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-amg54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-ampg_firmware:*:*:*:*:*:*:*:* Versions up to 1.52 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-ampg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g_firmware:*:*:*:*:*:*:*:* Versions up to 1.49 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g300n_firmware:*:*:*:*:*:*:*:* Versions up to 1.65 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g301n_firmware:*:*:*:*:*:*:*:* Versions up to 1.87 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g301n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g54s_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g54s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g54s-ni_firmware:*:*:*:*:*:*:*:* Versions up to 1.24 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g54s-ni:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-hp-ampg_firmware:*:*:*:*:*:*:*:* Versions up to 1.49 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-hp-ampg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-hp-g_firmware:*:*:*:*:*:*:*:* Versions up to 1.49 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-hp-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-hp-g54_firmware:*:*:*:*:*:*:*:* Versions up to 1.43 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-hp-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli-h4-d600_firmware:*:*:*:*:*:*:*:* Versions up to 1.88 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli-h4-d600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli-tx4-ag300n_firmware:*:*:*:*:*:*:*:* Versions up to 1.53 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli-tx4-ag300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:ws024bf_firmware:*:*:*:*:*:*:*:* Versions up to 1.60 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:ws024bf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:ws024bf-nw_firmware:*:*:*:*:*:*:*:* Versions up to 1.60 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:ws024bf-nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr2-g108_firmware:*:*:*:*:*:*:*:* Versions up to 1.33 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr2-g108:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr2-g300n_firmware:*:*:*:*:*:*:*:* Versions up to 1.55 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr2-g300n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-450hp-cwt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-450hp-ub:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-600dhp2_firmware:*:*:*:*:*:*:*:* Versions up to 1.15 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-600dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-agl300nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.55 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-agl300nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-ampg144nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.49 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-ampg144nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-ampg300nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.51 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-ampg300nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:* Versions up to 2.00 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-d1100h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-g144n_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-g144n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-g144nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-g144nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.84 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-hp-g300nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:* Versions up to 1.84 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-hp-g301nh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:* Versions up to 1.90 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-hp-g450h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-39044
- 2026-10-03 Alias added: GHSA-mjw8-8wg8-qjw9
References
More BUFFALO INC. Bhr-4grv Firmware vulnerabilities
- TI-2021-02471 Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware… CVSS 3.1HIGH 8.8
- TI-2022-19509 Improper authentication in Buffalo network devices CVSS 3.1HIGH 8.8
- TI-2016-04161 BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow… CVSS 3.0MEDIUM 6.5
- TI-2021-02470 Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo… CVSS 3.1MEDIUM 4.3
Sources
- CVE-2022-39044 · CVE Program
- CVE-2022-39044 · NVD
- FIRST EPSS
- GHSA-mjw8-8wg8-qjw9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences