Buffalo Inc. vulnerabilities
53 CVEs and advisories name Buffalo Inc. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-95104Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products.
- CVE-2026-86530BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally.
- CVE-2026-33366Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the pro
- CVE-2026-33280Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging fu
- CVE-2026-32678Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings wi
- CVE-2026-32669Code injection vulnerability exists in BUFFALO Wi-Fi router products.
- CVE-2026-27650OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.
- CVE-2026-29516Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
- CVE-2025-46413Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'.
- CVE-2025-61941A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.
- CVE-2025-61871NAS Navigator2 Windows version by BUFFALO INC.
- CVE-2024-44072OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters.
- CVE-2024-26023OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.
- CVE-2024-23486Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker wi
- CVE-2023-51363VR-S1000 firmware Ver.
- CVE-2023-46711VR-S1000 firmware Ver.
- CVE-2023-46681Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver.
- CVE-2023-45741VR-S1000 firmware Ver.
- CVE-2023-26588Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product.
- CVE-2023-24544Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product.
- CVE-2023-24464Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the pro
- CVE-2022-43486Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable
- CVE-2022-43466OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute
- CVE-2022-43443OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a sp
- CVE-2022-40966Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and acce
- CVE-2022-39044Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege t
- CVE-2022-34840Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration se
- CVE-2021-20731WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands wit
- CVE-2021-20730Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an att
- CVE-2021-3512Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 an