4.3Media
CVE-2025-46413
Descripción
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
Debilidad (CWE):
CWE-916
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| BUFFALO INC. | WSR-1800AX4 | prior to Ver.1.09 | |
| BUFFALO INC. | WSR-1800AX4-KH | prior to Ver.1.19 | |
| BUFFALO INC. | WSR-1800AX4B | prior to Ver.1.11 | |
| BUFFALO INC. | WSR-1800AX4S | prior to Ver.1.11 |