CVE-2017-2126

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-22 · updated 2026-06-17
Weakness: CWE-287

Description

WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configuration interface via unspecified vectors.

Affected products

Buffalo Wapm-1166D Firmware: through 1.2.7
Buffalo Wapm-Apg600H Firmware: through 1.16.1

References

http://buffalo.jp/support_s/s20170718.html
https://jvn.jp/en/jp/JVN48823557/index.html
http://buffalo.jp/support_s/s20170718.html
https://jvn.jp/en/jp/JVN48823557/index.html

Get alerted when CVE-2017-2126 or the next vulnerability affects your stack