Buffalo Inc. vulnerabilities

Products

• Wnc01wh 7
• Wi-fi Router Products 5
• Wsr-2533dhp2 5
• Wsr-a2533dhp2 5
• Network Devices 4
• Vr-s1000 4
• Wcr-1166ds 4
• Wsr-2533dhp 4
• Wsr-2533dhpl 4
• Wsr-2533dhp3 3
• Wsr-2533dhpl2 3
• Wsr-2533dhplb 3
• Wsr-2533dhpls 3
• Wsr-3200ax4b 3
• Wsr-3200ax4s 3
• Wsr-a2533dhp3 3
• Wxr-1900dhp2 3
• Wxr-5700ax7b 3
• Wxr-5700ax7s 3
• Wzr-1750dhp2 3
• Bbr-4hg 2
• Bbr-4mg 2
• Bs-gsl And Bs-gs Series 2
• Broadband Routers 2
• Wex-1800ax4 2
• Wex-1800ax4ea 2
• Wex-g300 2
• Whr-g54s 2
• Wmr-433 2
• Wmr-433w 2
• Wsr-1166dhp 2
• Wsr-1166dhp2 2
• Wsr-1166dhp3 And Wsr-1166dhp4 2
• Wsr-300hp 2

Newest

• buffalo inc. wex-g300, wsr-300hp +1 more Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated... CVE-2026-95104 8.7 HighSeptember 28, 2026
• buffalo inc. wex-g300, wsr-300hp +1 more BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings... CVE-2026-86530 8.6 HighSeptember 28, 2026
• buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may... CVE-2026-33366 6.9 MediumMarch 27, 2026
• buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker... CVE-2026-33280 8.6 HighMarch 27, 2026
• buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker... CVE-2026-32678 8.7 HighMarch 27, 2026
• buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is... CVE-2026-32669 8.7 HighMarch 27, 2026
• buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability... CVE-2026-27650 8.6 HighMarch 27, 2026
• buffalo inc. wsr-1800ax4, wsr-1800ax4-kh, wsr-1800ax4b +1 more +3 more Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router ... CVE-2025-46413 5.3 MediumNovember 7, 2025
• buffalo inc. wxr9300be6p series A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.... CVE-2025-61941 8.6 HighOctober 15, 2025
• buffalo inc. nas navigator2 (windows version only) NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file... CVE-2025-61871 8.4 HighOctober 10, 2025
• buffalo inc. wex-1166dhp, wex-1166dhp2, wex-1166dhps +33 more +35 more OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN... CVE-2024-44072 5.7 MediumSeptember 10, 2024
• buffalo wcr-1166ds firmware, wsr-1166dhp2 firmware, wsr-1166dhp firmware +12 more +14 more OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to... CVE-2024-26023 4.2 MediumApril 15, 2024
• buffalo a2533dhp2, wsr-2533dhp2 firmware, wsr-2533dhp firmware +6 more +8 more Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a... CVE-2024-23486 9.8 CriticalApril 15, 2024
• buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who... CVE-2023-51363 6.5 MediumDecember 26, 2023
• buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an... CVE-2023-46711 4.6 MediumDecember 26, 2023
• buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability... CVE-2023-46681 7.8 HighDecember 26, 2023
• buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web... CVE-2023-45741 6.8 MediumDecember 26, 2023
• buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +14 more +16 more Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to... CVE-2023-26588 7.5 HighApril 11, 2023
• buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +10 more +12 more Improper access control vulnerability in Buffalo network devices allows a network-adjacent... CVE-2023-24544 8.1 HighApril 11, 2023
• buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +5 more +7 more Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with... CVE-2023-24464 5.4 MediumApril 11, 2023
• buffalo wsr-3200ax4s firmware, buffalo inc. wsr-3200ax4s, buffalo wcr-1166ds firmware +26 more +28 more Hidden functionality vulnerability in Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and... CVE-2022-43486 6.8 MediumDecember 19, 2022
• buffalo wsr-3200ax4b firmware, wsr-3200ax4s firmware, buffalo inc. wsr-3200ax4b +20 more +22 more Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and earlier, WSR-3200AX4B firmware Ver. 1... CVE-2022-43466 6.8 MediumDecember 19, 2022
• buffalo wsr-3200ax4b firmware, wsr-3200ax4s firmware, buffalo inc. wsr-3200ax4b +25 more +27 more Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and earlier, WSR-3200AX4B firmware Ver. 1... CVE-2022-43443 8.8 HighDecember 19, 2022
• buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, dwr-pg firmware +73 more +75 more Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent... CVE-2022-40966 8.8 HighDecember 7, 2022
• buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, dwr-pg firmware +52 more +54 more Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent... CVE-2022-39044 6.8 MediumDecember 7, 2022
• buffalo hw-450hp-zwe firmware, wzr-300hp firmware, wzr-450hp-cwt firmware +7 more +9 more Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network... CVE-2022-34840 6.5 MediumDecember 7, 2022
• buffalo wsr-1166dhp3 firmware, wsr-1166dhp4 firmware, buffalo inc. wsr-1166dhp3 and wsr-1166dhp4 +2 more WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an... CVE-2021-20731 8.8 HighJune 9, 2021
• buffalo wsr-1166dhp3 firmware, wsr-1166dhp4 firmware, buffalo inc. wsr-1166dhp3 and wsr-1166dhp4 +2 more Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR... CVE-2021-20730 4.3 MediumJune 9, 2021
• buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, fs-600dhp firmware +22 more +24 more Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99... CVE-2021-3512 8.8 HighApril 28, 2021
• buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, fs-600dhp firmware +22 more +24 more Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband... CVE-2021-3511 4.3 MediumApril 28, 2021
• buffalo bhr-4rv firmware, fs-g54 firmware, wbr-b11 firmware +33 more +35 more Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS... CVE-2021-20716 9.8 CriticalApril 28, 2021
• buffalo inc. whr-g54s, buffalo airstation whr-g54s firmware +1 more Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers... CVE-2020-5606 6.1 MediumSeptember 18, 2020
• buffalo inc. whr-g54s, buffalo airstation whr-g54s firmware +1 more Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to... CVE-2020-5605 4.3 MediumSeptember 18, 2020
• buffalo inc. wzr-1750dhp2, buffalo wzr-1750dhp2 firmware +1 more Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via... CVE-2018-0556 8.8 HighApril 9, 2018
• buffalo inc. wzr-1750dhp2, buffalo wzr-1750dhp2 firmware +1 more Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute... CVE-2018-0555 7.8 HighApril 9, 2018
• buffalo inc. wzr-1750dhp2, buffalo wzr-1750dhp2 firmware +1 more Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute... CVE-2018-0554 8.8 HighApril 9, 2018
• buffalo wxr-1900dhp2 firmware, buffalo inc. wxr-1900dhp2 +1 more Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS... CVE-2018-0523 8.8 HighMarch 9, 2018
• buffalo wxr-1900dhp2 firmware, buffalo inc. wxr-1900dhp2 +1 more Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to... CVE-2018-0522 7.8 HighMarch 9, 2018
• buffalo wxr-1900dhp2 firmware, buffalo inc. wxr-1900dhp2 +1 more Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication... CVE-2018-0521 8.8 HighMarch 9, 2018
• buffalo inc. bbr-4hg, bbr-4mg, buffalo bbr-4hg firmware +1 more +3 more Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to... CVE-2017-10897 4.5 MediumDecember 8, 2017
• buffalo inc. bbr-4hg, bbr-4mg, buffalo bbr-4hg firmware +1 more +3 more Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with... CVE-2017-10896 6.1 MediumDecember 8, 2017
• buffalo inc. wcr-1166ds, buffalo wcr-1166ds firmware +1 more Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary... CVE-2017-10811 6.8 MediumAugust 18, 2017
• buffalo wmr-433 firmware, wmr-433w firmware, buffalo inc. wmr-433 +1 more +3 more Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware... CVE-2017-2274 6.1 MediumJuly 22, 2017
• buffalo wmr-433 firmware, wmr-433w firmware, buffalo inc. wmr-433 +1 more +3 more Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR... CVE-2017-2273 8.8 HighJuly 22, 2017
• buffalo wapm-1166d firmware, wapm-apg600h firmware, buffalo inc. wapm-1166d +1 more +3 more WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows... CVE-2017-2126 9.8 CriticalJuly 22, 2017
• buffalo inc. wnc01wh, buffalotech wnc01wh firmware +1 more Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and... CVE-2016-7826 6.5 MediumJune 9, 2017
• buffalo inc. wnc01wh, buffalotech wnc01wh firmware +1 more Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and... CVE-2016-7825 6.5 MediumJune 9, 2017
• buffalo inc. wnc01wh, buffalotech wnc01wh firmware +1 more Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers... CVE-2016-7824 8.8 HighJune 9, 2017
• buffalo inc. wnc01wh, buffalotech wnc01wh firmware +1 more Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and... CVE-2016-7823 4.3 MediumJune 9, 2017
• buffalo inc. wnc01wh, buffalotech wnc01wh firmware +1 more Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version... CVE-2016-7822 8.8 HighJune 9, 2017
• Show olderLoading…