CVE-2025-46413 — BUFFALO INC. / WSR-1800AX4

CVE-2025-46413

BUFFALO INC. / WSR-1800AX4 PUBLISHED

Description (CNA)

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.

Affected (CNA)

Vendor / product	Versions
BUFFALO INC. / WSR-1800AX4	affected prior to Ver.1.09
BUFFALO INC. / WSR-1800AX4S	affected prior to Ver.1.11
BUFFALO INC. / WSR-1800AX4B	affected prior to Ver.1.11
BUFFALO INC. / WSR-1800AX4-KH	affected prior to Ver.1.19

CWE

CWE-916

References

https://www.buffalo.jp/news/detail/20251107-01.html
https://jvn.jp/en/jp/JVN13754005/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.