4.3Mittel
CVE-2025-46413
Beschreibung
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
Schwachstellentyp (CWE):
CWE-916
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| BUFFALO INC. | WSR-1800AX4 | prior to Ver.1.09 | |
| BUFFALO INC. | WSR-1800AX4-KH | prior to Ver.1.19 | |
| BUFFALO INC. | WSR-1800AX4B | prior to Ver.1.11 | |
| BUFFALO INC. | WSR-1800AX4S | prior to Ver.1.11 |