Advisories · Technology

BUFFALO INC. WSR-A2533DHP2.

Every CVE that names BUFFALO INC. WSR-A2533DHP2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-26023 CVE record

CVSS 4.2 Medium

OS command injection in BUFFALO INC. WCR-1166DS and others
- BUFFALO INC. WCR-1166DS
- BUFFALO INC. WSR-1166DHP
- Command injection
Not analysed yet 15 Apr 2024
CVE-2024-23486 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Plaintext password storage in BUFFALO INC. WSR-2533DHP and others
- BUFFALO INC. WSR-2533DHP
- BUFFALO INC. WSR-2533DHPL
- CWE-256
Not analysed yet 15 Apr 2024
CVE-2022-43486 CVE record

CVSS 6.8 Medium

Code injection in BUFFALO INC. WXR-5700AX7S and others
- BUFFALO INC. WXR-5700AX7S
- BUFFALO INC. WXR-5700AX7B
- Code injection
Not analysed yet 19 Dec 2022
CVE-2022-43466 CVE record

CVSS 6.8 Medium

OS command injection in BUFFALO INC. WXR-5700AX7S and others
- BUFFALO INC. WXR-5700AX7S
- BUFFALO INC. WXR-5700AX7B
- Command injection
Not analysed yet 19 Dec 2022
CVE-2022-43443 CVE record

CVSS 8.0 High

OS command injection in BUFFALO INC. WXR-11000XE12 and others
- BUFFALO INC. WXR-11000XE12
- BUFFALO INC. WXR-5700AX7S
- Command injection
Not analysed yet 19 Dec 2022