CVE-2025-61941

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

Buffalo Wi-Fi router WXR9300BE6P series vulnerable to path traversal

Overview Wi-Fi router WXR9300BE6P series provided by BUFFALO INC. contains the following vulnerability. Path traversal CWE-22 - CVE-2025-61941 Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Arbitrary file may be altered by ...

CVE-2025-61941

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

CVE-2025-61941

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

CVE-2025-61941

CVE-2025-61941 affects BUFFALO WXR9300BE6P series routers. A path traversal (CWE-22) vulnerability in firmware prior to Ver.1.10 allows an administrative user to alter arbitrary files and may enable arbitrary OS command execution via file alterations. Several sources corroborate the affected prod...

EUVD-2025-34529

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

BUFFALO WXR9300BE6P Series 路径遍历漏洞

The BUFFALO WXR9300BE6P Series is a series of wireless routers from BUFFALO Japan. A path traversal vulnerability exists in the BUFFALO WXR9300BE6P series prior to version 1.10, which stems from the presence of a path traversal issue that could lead to arbitrary file modification and arbitrary OS...

CVE-2025-61941: Improper Limitation of a Pathname to a Restricted Directory

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...