CVE-2026-33366

MEDIUM

BUFFALO Wi-Fi router products - Unauthenticated Denial of Service via Forced Reboot

Title source: llm

Description

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

References (2)

Core 2

Core References

https://www.buffalo.jp/news/detail/20260323-01.html

https://jvn.jp/en/jp/JVN83788689/

Scores

CVSS v3 5.3

EPSS 0.0034

EPSS Percentile 25.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-306

Status published

Products (47)

buffalo/fs-m1266_firmware < 4.13

buffalo/fs-s1266_firmware < 4.13

buffalo/vr-u300w_firmware < 1.42

buffalo/vr-u500x_firmware < 1.42

buffalo/wapm-1266r_firmware < 1.42

buffalo/wapm-1266wdpr_firmware < 1.42

buffalo/wapm-1266wdpra_firmware < 1.42

buffalo/wapm-1750d_firmware < 1.07

buffalo/wapm-2133r_firmware < 1.42

buffalo/wapm-2133tr_firmware < 1.42

... and 37 more

Published Mar 27, 2026

Tracked Since Mar 27, 2026