Buffalo vulnerabilities
We track 19 vulnerabilities in Buffalo products across 60+ products. 19 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on September 28, 2026.
Latest Buffalo vulnerabilities
- 7.5 High severity
WSR-300HP: Stack-based Buffer Overflow
Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.
- 7.2 High severity
WSR-300HP: Improper Neutralization of Special Elements used in an OS Command
BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command.
- 9.8 Critical severity
xdmod: Improper Neutralization of Special Elements used in an SQL Command
OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Exploitation requires no a
- 9.8 Critical severity
xdmod: Improper Neutralization of Special Elements used in an OS Command
OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of the web serve
- 9.8 Critical severity
BUFFALO Wi-Fi router products: Hidden Functionality
Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.
- 8.7 High severity
BUFFALO Wi-Fi router products: Authentication Bypass Using an Alternate Path or Channel
Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.
- 9.8 Critical severity
BUFFALO Wi-Fi router products: Improper Control of Generation of Code
Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the products.
- 9.8 Critical severity
BUFFALO Wi-Fi router products: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.
- 8.6 High severity
WXR9300BE6P series: Improper Limitation of a Pathname to a Restricted Directory
A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration.
- 8.4 High severity
NAS Navigator2 (Windows version only): Unquoted Search Path or Element
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
- 9.8 Critical severity
WSR-2533DHP: Plaintext Storage of a Password
Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.
- 7.2 High severity
Ls210d Firmware: Improper Neutralization of Special Elements used in an OS Command
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
- 7.8 High severity
VR-S1000: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command.
- 7.5 High severity
terastation_nas_ts5410r: Exposure of Sensitive Information to an Unauthorized Actor
An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function.
- 7.5 High severity
BS-GSL and BS-GS series: Exposure of Resource to Wrong Sphere
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver.
- 8.1 High severity
BS-GSL and BS-GS series: Improper Access Control
Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmwar
- 8.8 High severity
WXR-11000XE12: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.
- 8.8 High severity
Buffalo network devices: Improper Authentication
Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmw
- 9.8 Critical severity
Arcadyan Buffalo Firmware Path Traversal Exploited
A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.