buffalo Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

wsr-2533dhpl2-bk_firmware2 vulnerabilities
a2533dhp21 vulnerability
TeraStation NAS TS5400R1 vulnerability
wsr-2533dhpl1 vulnerability

buffalo vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-29516MEDIUM	Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root. CWE-732Mar 16, 2026	CVSS6.9v4.0	EPSS0.513%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-23486CRITICAL	Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials. CWE-256Apr 15, 2024	CVSS9.8v3.1	EPSS0.561%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-20092HIGH	buffalo wsr-2533dhpl2-bk_firmware Improper Authentication The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor. CWE-200 CWE-287Apr 29, 20211 related artifact	CVSS7.5v3.1	EPSS8.17%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX
CVE-2021-20091HIGH	Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 Configuration Injection The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution. Apr 29, 20211 related artifact	CVSS8.8v3.1	EPSS8.8%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX