4.3Medium
CVE-2025-46413
Description
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
Weakness (CWE):
CWE-916
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| BUFFALO INC. | WSR-1800AX4 | prior to Ver.1.09 | |
| BUFFALO INC. | WSR-1800AX4-KH | prior to Ver.1.19 | |
| BUFFALO INC. | WSR-1800AX4B | prior to Ver.1.11 | |
| BUFFALO INC. | WSR-1800AX4S | prior to Ver.1.11 |