İçeriğe atla
Noroxi

Buffalo kayıtları

buffalo üreticisine ait 61 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %1,6
Silahlaştırılmış
1 · %1,6
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
188 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

61 kayıt
  • CVE-2021-20090
    99Hemen

    A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <=

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    buffalo · wsr-2533dhpl2-bk firmware29 Nis 2021

  • CVE-2018-13324
    46Planlayın

    Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified

    KritikCVSS 9,8İstismar yokEPSS %23

    buffalo · ts5600d1206 firmware26 Kas 2018

  • CVE-2017-2126
    40Planlayın

    WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and

    KritikCVSS 9,8İstismar yokEPSS %4

    buffalo · wapm-1166d firmware21 Tem 2017

  • CVE-2021-20716
    40Planlayın

    Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11

    KritikCVSS 9,8İstismar yokEPSS %3

    buffalo · bhr-4rv firmware27 Nis 2021

  • CVE-2018-16988
    39İzleyin

    An issue was discovered in Open XDMoD through 7.5.0.

    KritikCVSS 9,8İstismar yokEPSS %2

    buffalo · open xdmod2 May 2019

  • CVE-2024-23486
    39İzleyin

    Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker wi

    KritikCVSS 9,8İstismar yokEPSS %1

    buffalo · wsr-2533dhp firmware15 Nis 2024

  • CVE-2021-20091
    38İzleyin

    The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user

    YüksekCVSS 8,8Kavram kanıtıEPSS %9

    buffalo · wsr-2533dhpl2-bk firmware29 Nis 2021

  • CVE-2026-45779
    37İzleyin

    Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise

    KritikCVSS 9,3İstismar yokEPSS %1

    buffalo · open xdmod5 Haz 2026

  • CVE-2026-45777
    37İzleyin

    Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection

    KritikCVSS 9,3İstismar yokEPSS %1

    buffalo · open xdmod5 Haz 2026

  • CVE-2018-13321
    35İzleyin

    Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "m

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · ts5600d1206 firmware26 Kas 2018

  • CVE-2021-3512
    35İzleyin

    Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 an

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · bhr-4grv firmware27 Nis 2021

  • CVE-2018-0554
    35İzleyin

    Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspe

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wzr-1750dhp2 firmware9 Nis 2018

  • CVE-2018-0521
    35İzleyin

    Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wxr-1900dhp2 firmware9 Mar 2018

  • CVE-2022-43443
    35İzleyin

    OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a sp

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wsr-3200ax4s firmware18 Ara 2022

  • CVE-2017-2273
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remo

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wmr-433 firmware21 Tem 2017

  • CVE-2018-0556
    35İzleyin

    Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wzr-1750dhp2 firmware9 Nis 2018

  • CVE-2018-0523
    35İzleyin

    Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wxr-1900dhp2 firmware9 Mar 2018

  • CVE-2021-20731
    35İzleyin

    WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands wit

    YüksekCVSS 8,8İstismar yokEPSS %1

    buffalo · wsr-1166dhp4 firmware8 Haz 2021

  • CVE-2022-40966
    35İzleyin

    Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and acce

    YüksekCVSS 8,8İstismar yokEPSS %0

    buffalo · wcr-300 firmware7 Ara 2022

  • CVE-2026-27650
    34İzleyin

    OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.

    YüksekCVSS 8,6İstismar yokEPSS %1

    buffalo · wcr-1166dhpl firmware27 Mar 2026

  • CVE-2026-33280
    34İzleyin

    Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging fu

    YüksekCVSS 8,6İstismar yokEPSS %1

    buffalo · wcr-1166dhpl firmware27 Mar 2026

  • CVE-2026-32678
    34İzleyin

    Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings wi

    YüksekCVSS 8,7İstismar yokEPSS %1

    buffalo · wzr-s900dhp firmware27 Mar 2026

  • CVE-2026-32669
    34İzleyin

    Code injection vulnerability exists in BUFFALO Wi-Fi router products.

    YüksekCVSS 8,7İstismar yokEPSS %0

    buffalo · wcr-1166dhpl firmware27 Mar 2026

  • CVE-2026-45778
    34İzleyin

    Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset

    YüksekCVSS 8,6İstismar yokEPSS %0

    buffalo · open xdmod5 Haz 2026

  • CVE-2021-20092
    32İzleyin

    The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict acce

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    buffalo · wsr-2533dhpl2-bk firmware29 Nis 2021