Vulnerabilidades en BUFFALO INC.
52 resultadosCVE-2026-95104HIGHStack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-sEPSS 0.4%CVE-2022-40966HIGHAuthentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and acceEPSS 0.4%CVE-2023-45741—VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commandsEPSS 0.3%CVE-2022-39044MEDIUMHidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege tEPSS 0.3%CVE-2023-24544HIGHImproper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product.EPSS 0.3%CVE-2023-51363—VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page EPSS 0.3%CVE-2026-32669HIGHCode injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed EPSS 0.3%CVE-2023-46681—Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier EPSS 0.3%CVE-2022-34840MEDIUMUse of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration seEPSS 0.2%CVE-2023-46711—VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specifiEPSS 0.2%CVE-2025-61871HIGHNAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on tEPSS 0.2%CVE-2025-46413MEDIUMUse of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, EPSS 0.1%