CVE-2026-33366

Published: Mar 27, 2026Modified: Mar 31, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: vultures@jpcert.or.jp (Secondary)

Description

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

Affected (46)

Products: Buffalo: Wcr 1166dhpl Firmware, Wsr3600be4 Kh Firmware, Wsr3600be4p Firmware, Wxr 1750dhp Firmware, Wxr 1750dhp2 Firmware, Wxr18000be10p Firmware, Wxr 1900dhp Firmware, Wxr 1900dhp2 Firmware, Wxr 1900dhp3 Firmware, Wxr 5950ax12 Firmware, Wxr 6000ax12b Firmware, Wxr 6000ax12p Firmware, Wxr 6000ax12s Firmware, Wzr 1166dhp Firmware, Wzr 1166dhp2 Firmware, Wzr 1750dhp Firmware, Wzr 1750dhp2 Firmware, Wzr S1750dhp Firmware, Wrm D2133hp Firmware, Wrm D2133hs Firmware, Wtr M2133hp Firmware, Wtr M2133hs Firmware, Wem 1266 Firmware, Wem 1266wp Firmware, Vr U300w Firmware, Vr U500x Firmware, Wapm 1266r Firmware, Wapm 1266wdpr Firmware, Wapm 1266wdpra Firmware, Wapm 1750d Firmware, Wapm 2133r Firmware, Wapm 2133tr Firmware, Wapm Ax4r Firmware, Wapm Ax8r Firmware, Wapm Axetr Firmware, Waps 1266 Firmware, Waps Ax4 Firmware, Fs M1266 Firmware, Fs S1266 Firmware, Wzr 600dhp Firmware, Wzr 600dhp2 Firmware, Wzr 600dhp3 Firmware, Wzr 900dhp Firmware, Wzr 900dhp2 Firmware, Wzr S600dhp Firmware, Wzr S900dhp Firmware

Buffalo

46 products

Wcr 1166dhpl Firmware

Wsr3600be4 Kh Firmware

Wsr3600be4p Firmware

Wxr 1750dhp Firmware

Wxr 1750dhp2 Firmware

Wxr18000be10p Firmware

Wxr 1900dhp Firmware

Wxr 1900dhp2 Firmware

Wxr 1900dhp3 Firmware

Wxr 5950ax12 Firmware

Wxr 6000ax12b Firmware

Wxr 6000ax12p Firmware

Wxr 6000ax12s Firmware

Wzr 1166dhp Firmware

Wzr 1166dhp2 Firmware

Wzr 1750dhp Firmware

Wzr 1750dhp2 Firmware

Wzr S1750dhp Firmware

Wapm 1266wdpr Firmware

Wapm 1266wdpra Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wcr 1166dhpl Firmware	Before 1.01

Running on/with	Platform Versions
Buffalo Wcr 1166dhpl	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wsr3600be4 Kh Firmware	Before 6.02

Running on/with	Platform Versions
Buffalo Wsr3600be4 Kh	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wsr3600be4p Firmware	Before 5.02

Running on/with	Platform Versions
Buffalo Wsr3600be4p	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 1750dhp Firmware	Before 2.63

Running on/with	Platform Versions
Buffalo Wxr 1750dhp	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 1750dhp2 Firmware	Before 2.63

Running on/with	Platform Versions
Buffalo Wxr 1750dhp2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr18000be10p Firmware	Before 5.03

Running on/with	Platform Versions
Buffalo Wxr18000be10p	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 1900dhp Firmware	Before 2.53

Running on/with	Platform Versions
Buffalo Wxr 1900dhp	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 1900dhp2 Firmware	Before 2.62

Running on/with	Platform Versions
Buffalo Wxr 1900dhp2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 1900dhp3 Firmware	Before 2.66

Running on/with	Platform Versions
Buffalo Wxr 1900dhp3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 5950ax12 Firmware	Before 3.57

Running on/with	Platform Versions
Buffalo Wxr 5950ax12	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 6000ax12b Firmware	Before 3.57

Running on/with	Platform Versions
Buffalo Wxr 6000ax12b	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 6000ax12p Firmware	Before 3.57

Running on/with	Platform Versions
Buffalo Wxr 6000ax12p	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wxr 6000ax12s Firmware	Before 3.57

Running on/with	Platform Versions
Buffalo Wxr 6000ax12s	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 1166dhp Firmware	Before 2.20

Running on/with	Platform Versions
Buffalo Wzr 1166dhp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 1166dhp2 Firmware	Before 2.20

Running on/with	Platform Versions
Buffalo Wzr 1166dhp2	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 1750dhp Firmware	Before 2.32

Running on/with	Platform Versions
Buffalo Wzr 1750dhp	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 1750dhp2 Firmware	Before 2.33

Running on/with	Platform Versions
Buffalo Wzr 1750dhp2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr S1750dhp Firmware	Before 2.34

Running on/with	Platform Versions
Buffalo Wzr S1750dhp	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wrm D2133hp Firmware	Before 3.01

Running on/with	Platform Versions
Buffalo Wrm D2133hp	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wrm D2133hs Firmware	Before 3.01

Running on/with	Platform Versions
Buffalo Wrm D2133hs	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wtr M2133hp Firmware	Before 3.01

Running on/with	Platform Versions
Buffalo Wtr M2133hp	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wtr M2133hs Firmware	Before 3.01

Running on/with	Platform Versions
Buffalo Wtr M2133hs	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wem 1266 Firmware	Before 2.87

Running on/with	Platform Versions
Buffalo Wem 1266	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wem 1266wp Firmware	Before 2.87

Running on/with	Platform Versions
Buffalo Wem 1266wp	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Vr U300w Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Vr U300w	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Vr U500x Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Vr U500x	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm 1266r Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm 1266r	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm 1266wdpr Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm 1266wdpr	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm 1266wdpra Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm 1266wdpra	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm 1750d Firmware	Before 1.07

Running on/with	Platform Versions
Buffalo Wapm 1750d	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm 2133r Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm 2133r	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm 2133tr Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm 2133tr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm Ax4r Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm Ax4r	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm Ax8r Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm Ax8r	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wapm Axetr Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Wapm Axetr	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Waps 1266 Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Waps 1266	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Waps Ax4 Firmware	Before 1.42

Running on/with	Platform Versions
Buffalo Waps Ax4	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Fs M1266 Firmware	Before 4.13

Running on/with	Platform Versions
Buffalo Fs M1266	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Fs S1266 Firmware	Before 4.13

Running on/with	Platform Versions
Buffalo Fs S1266	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 600dhp Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr 600dhp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 600dhp2 Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr 600dhp2	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 600dhp3 Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr 600dhp3	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 900dhp Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr 900dhp	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 900dhp2 Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr 900dhp2	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr S600dhp Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr S600dhp	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr S900dhp Firmware	All versions

Running on/with	Platform Versions
Buffalo Wzr S900dhp	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://jvn.jp/en/jp/JVN83788689/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.buffalo.jp/news/detail/20260323-01.html

Source: vultures@jpcert.or.jp

Vendor Advisory

Timeline

No history available yet.