Buffalo WSR-2533DHPL2 - Improper Access Control

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor. id: CVE-2021-20092 info: name: Buffalo WSR-2533DHPL2 - Improper Access Control author: gy741,pdteam,par...

Buffalo WSR-2533DHPL2 - Configuration File Injection

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 does not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially leading to remote code execution. id:...

buffalo

Buffalo 대상 SSH 서버에 대해 두 개의 텍스트 파일을 입력으로 사용하여 사전/워드리스트 공격을 실행하는 Python 3 스크립트입니다. 제 Intel 기술 검증을 위해 작성되었습니다. 설치 이 스크립트는 Paramiko 및 Colorama에 의존합니다. pip install -r requirements.txt 또는 pip3 install -r requirements.txt로 종속성을 설치하십시오. 사용법 기본 설정 포트 22, 시도 제한 또는 잠금 기간 없음 python3 buffalo.py localhost...

CVE-2023-51073

CVE-2023-51073 - Buffalo LS210D 版本 1.78-0.03 固件更新服务器验证漏洞 Christopher J. Pace 和 Ryan Miller Buffalo LS210D 是一款面向小型企业和个人设计及销售的网络附加存储（NAS）服务器。LS210D 具备远程下载并安装固件更新的功能。LS210D 在此功能中存在“中间人”（AitM）攻击漏洞。控制受害者上游连接的攻击者将能够为更新服务器提供错误的 DNS 名称，或将来自更新服务器的流量重定向到恶意服务器。这可能导致以 root 用户身份执行命令，或直接安装恶意软件。 文件...

CVE-2026-95104

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service DoS condition...

CVE-2026-86530

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

CVE-2026-95104

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service DoS condition...

EUVD-2026-88166

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service DoS condition...

CVE-2026-95104

A stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products . An unauthenticated attacker can send a crafted HTTP request to trigger the vulnerability, potentially resulting in a denial-of-service (DoS) condition. No specific affected versions or remediation steps are provided in...

CVE-2026-86530

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

EUVD-2026-88165

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

CVE-2026-86530

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

CVE-2026-86530

BUFFALO Wi-Fi products are vulnerable to an arbitrary OS command execution flaw due to improper handling of certain web form inputs when assembling internal command line strings. An administrative user can exploit this by sending a crafted HTTP request . No specific version numbers, root cause fi...

PT-2026-99812

Name of the Vulnerable Software and Affected Versions BUFFALO Wi-Fi products affected versions not specified Description BUFFALO Wi-Fi products improperly handle input from web forms when assembling internal command line strings. This allows an administrative user to execute arbitrary operating...

CVE-2026-86530: Improper Neutralization of Special Elements used in an OS Command

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

CVE-2026-95104: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service DoS condition...

Buffalo WSR-2533DHPL2 - Path Traversal

Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 are susceptible to a path traversal vulnerability that could allow unauthenticated remote attackers to bypass authentication in their web interfaces. id: CVE-2021-20090 info: name: Buffalo WSR-2533DHPL2 - Path...

Exploit for OS Command Injection in Buffalo Open_Xdmod

CVE-2...

CVE-2025-66954

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...

EUVD-2025-209534

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...