Browse all 52 CVE security advisories affecting BUFFALO INC.. AI-powered Chinese analysis, POCs, and references for each vulnerability.
BUFFALO INC. primarily manufactures consumer networking hardware, including wireless routers and network-attached storage devices, serving home and small office environments. Security audits have identified approximately 50 Common Vulnerabilities and Exposures (CVEs) associated with its product line, predominantly affecting firmware and embedded web interfaces. The most prevalent vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and improper access control mechanisms that facilitate privilege escalation. These flaws often stem from legacy codebases and insufficient input validation within the device management consoles. While no single catastrophic data breach has been publicly attributed solely to BUFFALO INC., the high volume of disclosed CVEs indicates systemic weaknesses in secure development practices. Users are advised to maintain strict firmware update schedules to mitigate risks associated with these historically common implementation errors in embedded Linux environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-95104 | BUFFALO Wi-Fi 栈缓冲区溢出致DoS — WSR-300HP CWE-121 | 7.5 | High | 2026-09-28 |
| CVE-2026-86530 | BUFFALO Wi-Fi产品命令注入漏洞 — WSR-300HP CWE-78 | 7.2 | High | 2026-09-28 |
| CVE-2026-33366 | BUFFALO Wi-Fi router 访问控制错误漏洞 — BUFFALO Wi-Fi router products CWE-306 | 4.6 | - | 2026-03-27 |
| CVE-2026-33280 | BUFFALO Wi-Fi router 安全漏洞 — BUFFALO Wi-Fi router products CWE-912 | 9.8 | - | 2026-03-27 |
| CVE-2026-32678 | BUFFALO Wi-Fi router 安全漏洞 — BUFFALO Wi-Fi router products CWE-288 | 8.8 | - | 2026-03-27 |
| CVE-2026-32669 | BUFFALO Wi-Fi router 代码注入漏洞 — BUFFALO Wi-Fi router products CWE-94 | 9.8 | - | 2026-03-27 |
| CVE-2026-27650 | BUFFALO Wi-Fi router 操作系统命令注入漏洞 — BUFFALO Wi-Fi router products CWE-78 | 9.8 | - | 2026-03-27 |
| CVE-2025-46413 | BUFFALO WSR-1800AX4 Series 安全漏洞 — WSR-1800AX4 CWE-916 | 7.5 | - | 2025-11-07 |
| CVE-2025-61941 | BUFFALO WXR9300BE6P Series 路径遍历漏洞 — WXR9300BE6P series CWE-22 | 7.2AI | High AI | 2025-10-15 |
| CVE-2025-61871 | Buffalo NAS Navigator2 代码问题漏洞 — NAS Navigator2 (Windows version only) CWE-428 | 7.8AI | High AI | 2025-10-10 |
| CVE-2024-44072 | Buffalo wireless LAN routers 安全漏洞 — WHR-1166DHP2 | 8.8AI | High AI | 2024-09-10 |
| CVE-2024-26023 | Buffalo wireless LAN routers 安全漏洞 — WCR-1166DS | 8.0AI | High AI | 2024-04-15 |
| CVE-2024-23486 | BUFFALO wireless LAN routers 安全漏洞 — WSR-2533DHP | 8.8AI | High AI | 2024-04-15 |
| CVE-2023-51363 | Buffalo VR-S1000 安全漏洞 — VR-S1000 | 6.5AI | Medium AI | 2023-12-26 |
| CVE-2023-46711 | Buffalo VR-S1000 安全漏洞 — VR-S1000 | 7.5AI | High AI | 2023-12-26 |
| CVE-2023-46681 | Buffalo VR-S1000 安全漏洞 — VR-S1000 | 8.8AI | High AI | 2023-12-26 |
| CVE-2023-45741 | Buffalo VR-S1000 安全漏洞 — VR-S1000 | 8.8AI | High AI | 2023-12-26 |
| CVE-2023-26588 | Buffalo network devices 安全漏洞 — BS-GSL and BS-GS series | 9.1 | - | 2023-04-11 |
| CVE-2023-24544 | Buffalo network devices 安全漏洞 — BS-GSL and BS-GS series | 8.1 | - | 2023-04-11 |
| CVE-2023-24464 | Buffalo network devices 跨站脚本漏洞 — BS-GS series | 5.4 | - | 2023-04-11 |
| CVE-2022-43486 | Buffalo network devices 安全漏洞 — WXR-5700AX7S | 9.8 | - | 2022-12-19 |
| CVE-2022-43466 | Buffalo network devices 操作系统命令注入漏洞 — WXR-5700AX7S | 9.8 | - | 2022-12-19 |
| CVE-2022-43443 | Buffalo network devices 操作系统命令注入漏洞 — WXR-11000XE12 | 9.8 | - | 2022-12-19 |
| CVE-2022-34840 | Buffalo network devices 信任管理问题漏洞 — Buffalo network devices | 8.1 | - | 2022-12-07 |
| CVE-2022-40966 | Buffalo network devices 授权问题漏洞 — Buffalo network devices | 8.8 | - | 2022-12-07 |
| CVE-2022-39044 | Buffalo network devices 安全漏洞 — Buffalo network devices | 6.8 | - | 2022-12-07 |
| CVE-2021-20731 | BUFFALO INC WSR-1166DHP3-BK 操作系统命令注入漏洞 — WSR-1166DHP3 and WSR-1166DHP4 | 8.8 | - | 2021-06-09 |
| CVE-2021-20730 | BUFFALO INC WSR-1166DHP3-BK 访问控制不当漏洞 — WSR-1166DHP3 and WSR-1166DHP4 | 4.3 | - | 2021-06-09 |
| CVE-2021-3512 | Buffalo broadband routers 安全漏洞 — Buffalo broadband routers | 8.8 | - | 2021-04-28 |
| CVE-2021-3511 | Buffalo broadband routers 安全漏洞 — Buffalo broadband routers | 7.1 | - | 2021-04-28 |
This page lists every published CVE security advisory associated with BUFFALO INC.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.