CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

CVE-2025-26167

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...

Buffalo LinkStation Arbitrary File Read Vulnerability (Mar 2025) - Active Check

Buffalo LinkStation is prone to an arbitrary file read vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

CVE-2025-26167

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...

CVE-2025-26167: Exposure of Sensitive Information to an Unauthorized Actor

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...

CVE-2025-26167

The Buffalo LS520D network attached storage device is vulnerable to an arbitrary file read vulnerability in version 4.53 . This flaw allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files. A proof-of-concept exploit was published on March 6, 2025, and the vuln...

CVE-2025-26167

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...

CVE-2025-26167

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...

Buffalo LS520D 信息泄露漏洞

The Buffalo LS520D is a network attached storage device from Buffalo Japan that efficiently handles multi-CPU access to store and share data. A security vulnerability exists in the Buffalo LS520D version 4.53 that originates from an unauthenticated user being able to access the NAS web UI and rea...

PT-2025-9993

Name of the Vulnerable Software and Affected Versions Buffalo LS520D version 4.53 Description The issue allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files. Recommendations For Buffalo LS520D version 4.53, update to a newer version that contains a fix for...

VulnCheck KEV: CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

CVE-2024-44072

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed...

CVE-2024-44072

An OS command injection vulnerability (CWE-78) exists in BUFFALO wireless LAN routers and repeaters. An attacker who can log in to the management page can execute arbitrary OS commands by sending a specially crafted request from a specific management page. Affected models include WHR-1166DHP, WHR...

CVE-2024-44072

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed...

CVE-2024-44072

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed...

PT-2024-30936 · Buffalo · Buffalo Wireless Lan Repeaters +1

Name of the Vulnerable Software and Affected Versions: BUFFALO wireless LAN routers and wireless LAN repeaters affected versions not specified Description: An OS command injection issue exists, allowing an arbitrary OS command to be executed if a specially crafted request is sent to the product's...

CVE-2024-44072: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS command may be executed...

BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection

Overview Wireless LAN routers and wireless LAN repeaters provided by BUFFALO INC. contain an OS command injection vulnerability CWE-78. Yoshiki Mori and Masaki Kubo of National Institute of Information and Communications Technology, Cybersecurity Research Laboratory reported this vulnerability to...

Buffalo wireless LAN routers 安全漏洞

Buffalo wireless LAN routers is a series of routers from Buffalo, Japan. A security vulnerability exists in Buffalo wireless LAN routers, which originates from an operating system command injection vulnerability. The affected products and versions are as follows: WEX-1166DHP 1.23 and earlier,...

JVN#12824024: BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection

Wireless LAN routers and wireless LAN repeaters provided by BUFFALO INC. contain an OS command injection vulnerability CWE-78. Impact If a user logs in to the management page and sends a specially crafted request to the affected product from the product's specific management page, an arbitrary OS...