Buffalo Wzr-450hp Firmware vulnerabilities

6 CVEs affecting Buffalo Wzr-450hp Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40966, published 2022-12-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4816, published 2016-06-19. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
CVE-2021-3512, published 2021-04-28. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior,…
CVE-2021-3511, published 2021-04-28. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE…
CVE-2022-40966, published 2022-12-07. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as…
CVE-2022-39044, published 2022-12-07. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected…
CVE-2022-34840, published 2022-12-07. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as…