CVE-2024-23486: Critical severity buffalo wireless lan routers and wireless lan repeaters vulnerability
Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23486?
CVE-2024-23486 has been classified as a high severity vulnerability due to the potential for an attacker to access sensitive credentials.
How do I fix CVE-2024-23486?
To fix CVE-2024-23486, users should update their BUFFALO wireless LAN routers to the latest firmware version provided by the manufacturer.
Who is affected by CVE-2024-23486?
CVE-2024-23486 affects users of BUFFALO wireless LAN routers that store passwords in plaintext.
What types of attacks are possible with CVE-2024-23486?
An attacker can exploit CVE-2024-23486 by accessing the router’s login page and retrieving stored plaintext passwords.
Is CVE-2024-23486 being actively exploited?
As of now, there is no public indication that CVE-2024-23486 is being actively exploited, but it is recommended to take precautionary measures.