What’s Vulnerable › Vulnerabilities

CVE-2025-46413

• Severity: medium (CVSS 5.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-07 · updated 2026-10-18
• Weakness: CWE-916

Description

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.

Affected products

• BUFFALO INC. WSR-1800AX4: before Ver.1.09
• BUFFALO INC. WSR-1800AX4-KH: before Ver.1.19
• BUFFALO INC. WSR-1800AX4B: before Ver.1.11
• BUFFALO INC. WSR-1800AX4S: before Ver.1.11

References

• https://jvn.jp/en/jp/JVN13754005/
• https://www.buffalo.jp/news/detail/20251107-01.html

Get alerted when CVE-2025-46413 or the next vulnerability affects your stack