Buffalo Wzr-AMPG300NH Firmware vulnerabilities

2 CVEs affecting Buffalo Wzr-AMPG300NH Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40966, published 2022-12-07.

More from Buffalo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-40966, published 2022-12-07. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as…
• CVE-2022-39044, published 2022-12-07. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected…