Login Request a demo
BU
Vendor
Buffalo
182 products with CVEs on record
607
CVEs
2
On KEV
0
New 30D
Products
WF
Wsr-2533dhp3-bk Firmware
Buffalo
9.8
3 CVEs1 on KEV0 new
WF
Wsr-2533dhpl2-bk Firmware
Buffalo
9.8
3 CVEs1 on KEV0 new
WF
Wzr-600dhp Firmware
Buffalo
9.8
11 CVEs0 on KEV0 new
WF
Wzr-1750dhp2 Firmware
Buffalo
9.8
10 CVEs0 on KEV0 new
WF
Wzr-900dhp Firmware
Buffalo
9.8
10 CVEs0 on KEV0 new
WF
Wxr-1900dhp2 Firmware
Buffalo
9.8
9 CVEs0 on KEV0 new
WF
Wzr-600dhp2 Firmware
Buffalo
9.8
8 CVEs0 on KEV0 new
OX
Open Xdmod
Buffalo
9.8
7 CVEs0 on KEV0 new
TF
Ts5600d1206 Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wxr-1750dhp Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wxr-1900dhp Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-1166dhp Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-1166dhp2 Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-1750dhp Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-600dhp3 Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-900dhp2 Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-s600dhp Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
WF
Wzr-s900dhp Firmware
Buffalo
9.8
7 CVEs0 on KEV0 new
HF
Hw-450hp-zwe Firmware
Buffalo
8.8
6 CVEs0 on KEV0 new
WF
Wem-1266 Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wem-1266wp Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wrm-d2133hp Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wrm-d2133hs Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wtr-m2133hp Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wtr-m2133hs Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wxr-1750dhp2 Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wxr-1900dhp3 Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wxr-5950ax12 Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wxr-6000ax12b Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wxr-6000ax12s Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
WF
Wzr-300hp Firmware
Buffalo
8.8
6 CVEs0 on KEV0 new
WF
Wzr-450hp-cwt Firmware
Buffalo
8.8
6 CVEs0 on KEV0 new
WF
Wzr-450hp Firmware
Buffalo
8.8
6 CVEs0 on KEV0 new
WF
Wzr-450hp-ub Firmware
Buffalo
8.8
6 CVEs0 on KEV0 new
WF
Wzr-s1750dhp Firmware
Buffalo
9.8
6 CVEs0 on KEV0 new
BF
Bhr-4grv Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
DF
Dwr-hp-g300nh Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
FF
Fs-600dhp Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
FF
Fs-m1266 Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
FF
Fs-s1266 Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
VF
Vr-u300w Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
VF
Vr-u500x Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-1266r Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-1266wdpr Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-1266wdpra Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-1750d Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-2133r Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-2133tr Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-ax4r Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-ax8r Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wapm-axetr Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Waps-1266 Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Waps-ax4 Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wcr-1166dhpl Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Whr-300 Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
WF
Whr-300hp Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
WF
Whr-hp-g300n Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
WF
Wpl-05g300 Firmware
Buffalo
8.8
5 CVEs0 on KEV0 new
WF
Wsr-2533dhp2 Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
WF
Wsr-a2533dhp2 Firmware
Buffalo
9.8
5 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-45779
OX
Open Xdmod
Buffalo
9.8
0%
Jun 5Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise
CVE-2026-45778
OX
Open Xdmod
Buffalo
5.4
0%
Jun 5Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset
CVE-2026-45777
OX
Open Xdmod
Buffalo
9.8
0%
Jun 5Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection
CVE-2026-45776
OX
Open Xdmod
Buffalo
4.3
0%
Jun 5Open XDMoD has Broken Access Control via Client-Controlled Session Variable
CVE-2026-33366
WF
Wcr-1166dhpl Firmware
Buffalo
5.3
0%
Mar 27Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication
CVE-2026-33280
WF
Wzr-900dhp2 Firmware
Buffalo
9.8
0%
Mar 27Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution…
CVE-2026-32678
WF
Wsr3600be4p Firmware
Buffalo
7.5
0%
Mar 27Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication
CVE-2026-32669
WF
Wsr3600be4-kh Firmware
Buffalo
9.8
0%
Mar 27Code injection vulnerability exists in BUFFALO Wi-Fi router products
CVE-2026-27650
WF
Wxr-1900dhp2 Firmware
Buffalo
9.8
1%
Mar 27OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products
CVE-2026-29516
TN
TeraStation NAS TS5400R
Buffalo
4.9
1%
Mar 16Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
CVE-2024-26023
WF
Wcr-1166ds Firmware
Buffalo
4.2
1%
Apr 15OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands
CVE-2024-23486
WF
Wsr-2533dhpl Firmware
Buffalo
9.8
1%
Apr 15Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page…
CVE-2023-49038
LF
Ls210d Firmware
Buffalo
7.2
2%
Jan 29Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root
CVE-2023-51073
LF
Ls210d Firmware
Buffalo
8.1
1%
Jan 11An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh
CVE-2023-51363
VF
Vr-s1000 Firmware
Buffalo
6.5
0%
Dec 26VR-S1000 firmware Ver
CVE-2023-46711
VF
Vr-s1000 Firmware
Buffalo
4.6
0%
Dec 26VR-S1000 firmware Ver
CVE-2023-46681
VF
Vr-s1000 Firmware
Buffalo
7.8
0%
Dec 26Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver
CVE-2023-45741
VF
Vr-s1000 Firmware
Buffalo
6.8
0%
Dec 26VR-S1000 firmware Ver
CVE-2023-39620
TN
Terastation Nas 5410r Firmware
Buffalo
7.5
1%
Sep 8An Issue in Buffalo America, Inc
CVE-2023-26588
BF
Bs-gsl2016p Firmware
Buffalo
7.5
1%
Apr 11Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product
CVE-2023-24544
BF
Bs-gsl2016 Firmware
Buffalo
8.1
0%
Apr 11Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product
CVE-2023-24464
BF
Bs-gs2016 Firmware
Buffalo
5.4
0%
Apr 11Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on…
CVE-2022-43486
WF
Wsr-3200ax4s Firmware
Buffalo
6.8
0%
Dec 19Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute…
CVE-2022-43466
WF
Wsr-2533dhpls Firmware
Buffalo
6.8
1%
Dec 19OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially…
CVE-2022-43443
WF
Wsr-3200ax4s Firmware
Buffalo
8.8
1%
Dec 19OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the…
CVE-2022-40966
WF
Wcr-300 Firmware
Buffalo
8.8
0%
Dec 7Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device
CVE-2022-39044
WF
Wcr-300 Firmware
Buffalo
6.8
0%
Dec 7Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command
CVE-2022-34840
WF
Wzr-300hp Firmware
Buffalo
6.5
0%
Dec 7Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device
CVE-2021-20731
WF
Wsr-1166dhp4 Firmware
Buffalo
8.8
1%
Jun 9WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified…
CVE-2021-20730
WF
Wsr-1166dhp4 Firmware
Buffalo
4.3
0%
Jun 9Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration…
CVE-2021-20092
WF
Wsr-2533dhpl2-bk Firmware
Buffalo
7.5
8%
Apr 29The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an…
CVE-2021-20091
WF
Wsr-2533dhpl2-bk Firmware
Buffalo
8.8
8%
Apr 29The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input
CVE-2021-20090
In wildKEV
WF
Wsr-2533dhpl2-bk Firmware
Buffalo
9.8
100%
Apr 29Arcadyan Buffalo Firmware Path Traversal Vulnerability
CVE-2021-3512
FF
Fs-hp-g300n Firmware
Buffalo
8.8
1%
Apr 28Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99…
CVE-2021-3511
HF
Hw-450hp-zwe Firmware
Buffalo
4.3
1%
Apr 28Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and…
CVE-2021-20716
WF
Wbr2-b11 Firmware
Buffalo
9.8
3%
Apr 28Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54…
CVE-2020-5606
AW
Airstation Whr-g54s Firmware
Buffalo
6.1
1%
Sep 18Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page
CVE-2020-5605
AW
Airstation Whr-g54s Firmware
Buffalo
4.3
1%
Sep 18Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors
CVE-2018-16988
OX
Open Xdmod
Buffalo
9.8
2%
May 2An issue was discovered in Open XDMoD through 7.5.0
CVE-2018-16961
OX
Open Xdmod
Buffalo
7.5
3%
May 2An issue was discovered in Open XDMoD through 7.5.0
CVE-2018-16960
OX
Open Xdmod
Buffalo
6.1
1%
May 2An issue was discovered in Open XDMoD through 7.5.0
CVE-2018-13324
TF
Ts5600d1206 Firmware
Buffalo
9.8
23%
Nov 26Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header
CVE-2018-13323
TF
Ts5600d1206 Firmware
Buffalo
6.1
1%
Nov 26Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie
CVE-2018-13322
TF
Ts5600d1206 Firmware
Buffalo
6.5
1%
Nov 26Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter
CVE-2018-13321
TF
Ts5600d1206 Firmware
Buffalo
8.8
1%
Nov 26Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter
CVE-2018-13320
TF
Ts5600d1206 Firmware
Buffalo
7.2
3%
Nov 26System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsername and adminPassword…
CVE-2018-13319
TF
Ts5600d1206 Firmware
Buffalo
7.5
1%
Nov 26Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via an unauthenticated POST request
CVE-2018-13318
TF
Ts5600d1206 Firmware
Buffalo
7.2
3%
Nov 26System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" parameter
CVE-2018-0556
WF
Wzr-1750dhp2 Firmware
Buffalo
8.8
1%
Apr 9Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors
CVE-2018-0555
WF
Wzr-1750dhp2 Firmware
Buffalo
7.8
2%
Apr 9Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file
CVE-2018-0554
WF
Wzr-1750dhp2 Firmware
Buffalo
8.8
1%
Apr 9Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors
CVE-2018-0523
WF
Wxr-1900dhp2 Firmware
Buffalo
8.8
1%
Mar 9Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors
CVE-2018-0522
WF
Wxr-1900dhp2 Firmware
Buffalo
7.8
1%
Mar 9Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file
CVE-2018-0521
WF
Wxr-1900dhp2 Firmware
Buffalo
8.8
1%
Mar 9Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors
CVE-2017-10897
BF
Bbr-4mg Firmware
Buffalo
4.5
0%
Dec 8Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become…
CVE-2017-10896
BF
Bbr-4mg Firmware
Buffalo
6.1
1%
Dec 8Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web…
CVE-2017-10811
WF
Wcr-1166ds Firmware
Buffalo
6.8
1%
Aug 18Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors
CVE-2017-2274
WF
Wmr-433w Firmware
Buffalo
6.1
1%
Jul 22Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML…
CVE-2017-2273
WF
Wmr-433 Firmware
Buffalo
8.8
1%
Jul 22Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the…
CVE-2017-2126
WF
Wapm-1166d Firmware
Buffalo
9.8
4%
Jul 22WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configuration interface via…