WF
Product
Wzr-600dhp2 Firmware
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 3Low 0
Watch
Add Wzr-600dhp2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33280 | 9.8 | Mar 27 | Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution… Affected: All versions, or not specified |
| CVE-2026-32669 | 9.8 | Mar 27 | Code injection vulnerability exists in BUFFALO Wi-Fi router products Affected: All versions, or not specified |
| CVE-2026-27650 | 9.8 | Mar 27 | OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products Affected: All versions, or not specified |
| CVE-2026-32678 | 7.5 | Mar 27 | Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication Affected: All versions, or not specified |
| CVE-2016-4815 | 7.5 | Jun 19 | Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to… Affected: through 1.13 |
| CVE-2022-39044 | 6.8 | Dec 7 | Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command Affected: through 1.15 |
| CVE-2022-34840 | 6.5 | Dec 7 | Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device Affected: through 1.15 |
| CVE-2026-33366 | 5.3 | Mar 27 | Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication Affected: All versions, or not specified |
Showing 8
