B
Buffalo
Security Risk Profile
61
/100
highSecurity Risk Score
Comprehensive risk assessment based on 67 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 19, 2016 to present
67
Total CVEs
41
Critical+High
1
Exploited
35
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
35
Critical/High
Risk Level
61/100
high
⚠️ 1 Active Exploits
Severity Distribution
Critical
9High
32Medium
26Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
14
2
Command Injection
13
3
XSS
7
4
Path Traversal
5
5
Infoleak
4
Most Affected Products
1. Buffalo WZR-600DHP firmware16
2. Buffalo WZR-900DHP firmware13
3. Buffalo WZR-600DHP2 firmware12
4. Buffalo WZR-1750DHP2 firmware11
5. Buffalo WZR-300HP firmware11
Recent Vulnerabilities
See more →CVE-2026-45779
CVSS 9.3critical
Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise
Jun 5, 2026🔧 No Patch
CVE-2026-45778
CVSS 8.6high
Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset
Jun 5, 2026🔧 No Patch
CVE-2026-45777
CVSS 9.3critical
Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection
Jun 5, 2026🔧 No Patch
CVE-2026-45776
CVSS 5.3medium
Open XDMoD has Broken Access Control via Client-Controlled Session Variable
Jun 5, 2026🔧 No Patch
CVE-2025-66954
CVSS 6.5medium
Apr 20, 2026🔧 No Patch
CVE-2026-33366
CVSS 6.9medium
Mar 27, 2026🔧 No Patch
CVE-2026-33280
CVSS 8.6high
Mar 27, 2026🔧 No Patch
CVE-2026-32678
CVSS 8.7high
Mar 27, 2026🔧 No Patch
CVE-2026-32669
CVSS 8.7high
Mar 27, 2026🔧 No Patch
CVE-2026-27650
CVSS 8.6high
Mar 27, 2026🔧 No Patch
Monitor Buffalo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.