Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-46413

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be ob

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BUFFALO INC. WSR-1800AX4

  • prior to Ver.1.09affected

BUFFALO INC. WSR-1800AX4S

  • prior to Ver.1.11affected

BUFFALO INC. WSR-1800AX4B

  • prior to Ver.1.11affected

BUFFALO INC. WSR-1800AX4-KH

  • prior to Ver.1.19affected

References