BUFFALO vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-95104 Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products.High 8.7 · Sep 28, 2026
• CVE-2026-86530 BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally.High 8.6 · Sep 28, 2026
• CVE-2026-33280 Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resultiHigh 8.6 · Mar 27, 2026
• CVE-2026-32678 Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authenticationHigh 8.7 · Mar 27, 2026
• CVE-2026-32669 Code injection vulnerability exists in BUFFALO Wi-Fi router products.High 8.7 · Mar 27, 2026
• CVE-2026-27650 OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.High 8.6 · Mar 27, 2026
• CVE-2025-61941 A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.High 8.6 · Oct 15, 2025
• CVE-2025-61871 NAS Navigator2 Windows version by BUFFALO INC.High 8.4 · Oct 10, 2025
• CVE-2024-23486 Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the proCritical 9.8 · Apr 15, 2024
• CVE-2023-49038 Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.High 7.2 · Jan 29, 2024
• CVE-2023-51073 An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.High 8.1 · Jan 10, 2024
• CVE-2023-46681 Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver.High 7.8 · Dec 26, 2023
• CVE-2023-26588 Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product.High 7.5 · Apr 11, 2023
• CVE-2023-24544 Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product.High 8.1 · Apr 11, 2023
• CVE-2022-43443 OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted requHigh 8.8 · Dec 18, 2022
• CVE-2022-40966 Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device.High 8.8 · Dec 7, 2022
• CVE-2021-20731 WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges viHigh 8.8 · Jun 8, 2021
• CVE-2021-20092 The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive infoHigh 7.5 · Apr 29, 2021
• CVE-2021-20091 The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input.High 8.8 · Apr 29, 2021
• CVE-2021-3512 Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWHigh 8.8 · Apr 27, 2021
• CVE-2021-20716 Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 anCritical 9.8 · Apr 27, 2021
• CVE-2018-16988 An issue was discovered in Open XDMoD through 7.5.0.Critical 9.8 · May 2, 2019
• CVE-2018-16961 An issue was discovered in Open XDMoD through 7.5.0.High 7.5 · May 2, 2019
• CVE-2018-13324 Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.Critical 9.8 · Nov 26, 2018
• CVE-2018-13321 Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter.High 8.8 · Nov 26, 2018