CVE-2014-9284: Buffalotech Bhr-4grv2 Firmware

High severity, CVSS 7.7. EPSS: 1.1% chance of exploitation in the next 30 days.

The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Affected products

• Buffalotech Bhr-4grv2 Firmware: up to and including 1.04
• Buffalotech Wex-300 Firmware: up to and including 1.60
• Buffalotech Whr-1166dhp Firmware: up to and including 1.60
• Buffalotech Whr-300hp2 Firmware: up to and including 1.60
• Buffalotech Whr-600d Firmware: up to and including 1.60
• Buffalotech Wmr-300 Firmware: up to and including 1.60
• Buffalotech Wsr-600dhp Firmware: up to and including 1.60

Published 2015-06-09. Last modified 2026-06-17.