Description
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
Scores
CVSS v3
4.3
EPSS
0.0001
EPSS Percentile
0.8%
Attack Vector
ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-916
Status
published
Products (4)
BUFFALO INC./WSR-1800AX4
prior to Ver.1.09
BUFFALO INC./WSR-1800AX4-KH
prior to Ver.1.19
BUFFALO INC./WSR-1800AX4B
prior to Ver.1.11
BUFFALO INC./WSR-1800AX4S
prior to Ver.1.11
Published
Nov 07, 2025
Tracked Since
Feb 18, 2026