CVE-2018-13324: Buffalo TS5600D1206 Firmware

Critical severity, CVSS 9.8. EPSS: 23.2% chance of exploitation in the next 30 days.

Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.

Affected products

• Buffalo TS5600D1206 Firmware: version 3.61-0.10 only

Published 2018-11-26. Last modified 2026-06-17.