High severity8.8NVD Advisory· Published Dec 7, 2022· Updated Jun 17, 2026

CVE-2022-40966

Description

Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WRM-D2133HP firmware Ver. 2.85 and earlier, WRM-D2133HS firmware Ver. 2.96 and earlier, WTR-M2133HP firmware Ver. 2.85 and earlier, WTR-M2133HS firmware Ver. 2.96 and earlier, WXR-1900DHP firmware Ver. 2.50 and earlier, WXR-1900DHP2 firmware Ver. 2.59 and earlier, WXR-1900DHP3 firmware Ver. 2.63 and earlier, WXR-5950AX12 firmware Ver. 3.40 and earlier, WXR-6000AX12B firmware Ver. 3.40 and earlier, WXR-6000AX12S firmware Ver. 3.40 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-1750DHP2 firmware Ver. 2.31 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WEM-1266 firmware Ver. 2.85 and earlier, WEM-1266WP firmware Ver. 2.85 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WXR-1750DHP firmware Ver. 2.60 and earlier, WXR-1750DHP2 firmware Ver. 2.60 and earlier, WZR-1166DHP firmware Ver. 2.18 and earlier, WZR-1166DHP2 firmware Ver. 2.18 and earlier, WZR-1750DHP firmware Ver. 2.30 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-600DHP3 firmware Ver. 2.19 and earlier, WZR-900DHP2 firmware Ver. 2.19 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, WZR-HP-G450H firmware Ver. 1.90 and earlier, WZR-S1750DHP firmware Ver. 2.32 and earlier, WZR-S600DHP firmware Ver. 2.19 and earlier, and WZR-S900DHP firmware Ver. 2.19 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Buffalotech/Bhr 4grv Firmware
cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Dwr Hp G300nh Firmware
cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:*
Range: <=1.84
Buffalotech/Dwr Pg Firmware
cpe:2.3:o:buffalo:dwr-pg_firmware:*:*:*:*:*:*:*:*
Range: <=1.83
Buffalotech/Wzr 600dhp3 Firmware2 versions
cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:*range: <=3.40
- cpe:2.3:o:buffalo:wzr-600dhp3_firmware:*:*:*:*:*:*:*:*range: <=2.19
Buffalotech/Fs G300n Firmware
cpe:2.3:o:buffalo:fs-g300n_firmware:*:*:*:*:*:*:*:*
Range: <=3.14
Buffalotech/Fs Hp G300n Firmware
cpe:2.3:o:buffalo:fs-hp-g300n_firmware:*:*:*:*:*:*:*:*
Range: <=3.33
Buffalotech/Fs R600dhp Firmware
cpe:2.3:o:buffalo:fs-r600dhp_firmware:*:*:*:*:*:*:*:*
Range: <=3.40
Buffalotech/Hw 450hp Zwe Firmware
cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wcr 300 Firmware
cpe:2.3:o:buffalo:wcr-300_firmware:*:*:*:*:*:*:*:*
Range: <=1.87
Buffalotech/Waps 1266 Firmware2 versions
cpe:2.3:o:buffalo:wem-1266_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wem-1266_firmware:*:*:*:*:*:*:*:*range: <=2.85
- cpe:2.3:o:buffalo:wem-1266wp_firmware:*:*:*:*:*:*:*:*range: <=2.85
Buffalotech/Whr Am54g543 versions
cpe:2.3:o:buffalo:wer-a54g54_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:buffalo:wer-a54g54_firmware:*:*:*:*:*:*:*:*range: <=1.43
- cpe:2.3:o:buffalo:wer-am54g54_firmware:*:*:*:*:*:*:*:*range: <=1.43
- cpe:2.3:o:buffalo:whr-am54g54_firmware:*:*:*:*:*:*:*:*range: <=1.43
Buffalotech/Wer Ag54
cpe:2.3:o:buffalo:wer-ag54_firmware:*:*:*:*:*:*:*:*
Range: <=1.43
Buffalotech/Wer Amg54
cpe:2.3:o:buffalo:wer-amg54_firmware:*:*:*:*:*:*:*:*
Range: <=1.43
Buffalotech/Whr 300 Firmware
cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Whr 300hp Firmware
cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Whr Hp Ampg2 versions
cpe:2.3:o:buffalo:whr-amg54_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:whr-amg54_firmware:*:*:*:*:*:*:*:*range: <=1.43
- cpe:2.3:o:buffalo:whr-hp-ampg_firmware:*:*:*:*:*:*:*:*range: <=1.43
Buffalotech/Whr Ampg Firmware
cpe:2.3:o:buffalo:whr-ampg_firmware:*:*:*:*:*:*:*:*
Range: <=1.52
Buffalotech/Whr G300n Firmware
cpe:2.3:o:buffalo:whr-g300n_firmware:*:*:*:*:*:*:*:*
Range: <=1.65
Buffalotech/Whr G301n Firmware
cpe:2.3:o:buffalo:whr-g301n_firmware:*:*:*:*:*:*:*:*
Range: <=1.87
Buffalotech/Whr G54s Ni Firmware
cpe:2.3:o:buffalo:whr-g54s-ni_firmware:*:*:*:*:*:*:*:*
Range: <=1.24
Buffalotech/Whr G54s
cpe:2.3:o:buffalo:whr-g54s_firmware:*:*:*:*:*:*:*:*
Range: <=1.43
Buffalotech/Whr G Firmware
cpe:2.3:o:buffalo:whr-g_firmware:*:*:*:*:*:*:*:*
Range: <=1.49
Buffalotech/Whr Hp G300n Firmware
cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Whr Hp G542 versions
cpe:2.3:o:buffalo:whr-hp-g54_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:whr-hp-g54_firmware:*:*:*:*:*:*:*:*range: <=1.43
- cpe:2.3:o:buffalo:whr-hp-g_firmware:*:*:*:*:*:*:*:*range: <=1.49
Buffalotech/Whr Hp Gn Firmware
cpe:2.3:o:buffalo:whr-hp-gn_firmware:*:*:*:*:*:*:*:*
Range: <=1.87
Buffalotech/Wlae Ag300n Firmware
cpe:2.3:o:buffalo:wlae-ag300n_firmware:*:*:*:*:*:*:*:*
Range: <=1.86
Buffalotech/Wli H4 D600 Firmware
cpe:2.3:o:buffalo:wli-h4-d600_firmware:*:*:*:*:*:*:*:*
Range: <=1.88
Buffalotech/Wpl 05g300 Firmware
cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:*
Range: <=1.88
Buffalotech/Wrm D2133hp Firmware
cpe:2.3:o:buffalo:wrm-d2133hp_firmware:*:*:*:*:*:*:*:*
Range: <=2.85
Buffalotech/Wrm D2133hs Firmware
cpe:2.3:o:buffalo:wrm-d2133hs_firmware:*:*:*:*:*:*:*:*
Range: <=2.96
Buffalotech/Ws024bf Nw Firmware
cpe:2.3:o:buffalo:ws024bf-nw_firmware:*:*:*:*:*:*:*:*
Range: <=1.60
Buffalotech/Ws024bf Firmware
cpe:2.3:o:buffalo:ws024bf_firmware:*:*:*:*:*:*:*:*
Range: <=1.60
Buffalotech/Wtr M2133hp Firmware
cpe:2.3:o:buffalo:wtr-m2133hp_firmware:*:*:*:*:*:*:*:*
Range: <=2.85
Buffalotech/Wtr M2133hs Firmware
cpe:2.3:o:buffalo:wtr-m2133hs_firmware:*:*:*:*:*:*:*:*
Range: <=2.96
Buffalotech/Wzr S1750dhp Firmware4 versions
cpe:2.3:o:buffalo:wxr-1750dhp2_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:buffalo:wxr-1750dhp2_firmware:*:*:*:*:*:*:*:*range: <=2.60
- cpe:2.3:o:buffalo:wzr-1750dhp2_firmware:*:*:*:*:*:*:*:*range: <=2.31
- cpe:2.3:o:buffalo:wzr-1750dhp_firmware:*:*:*:*:*:*:*:*range: <=2.30
- cpe:2.3:o:buffalo:wzr-s1750dhp_firmware:*:*:*:*:*:*:*:*range: <=2.32
Buffalotech/Wxr 1750dhp Firmware
cpe:2.3:o:buffalo:wxr-1750dhp_firmware:*:*:*:*:*:*:*:*
Range: <=2.60
Buffalotech/Wxr 1900dhp2 Firmware
cpe:2.3:o:buffalo:wxr-1900dhp2_firmware:*:*:*:*:*:*:*:*
Range: <=2.59
Buffalotech/Wxr 1900dhp3 Firmware
cpe:2.3:o:buffalo:wxr-1900dhp3_firmware:*:*:*:*:*:*:*:*
Range: <=2.63
Buffalotech/Wxr 1900dhp Firmware
cpe:2.3:o:buffalo:wxr-1900dhp_firmware:*:*:*:*:*:*:*:*
Range: <=2.50
Buffalotech/Wxr 5950ax12 Firmware
cpe:2.3:o:buffalo:wxr-5950ax12_firmware:*:*:*:*:*:*:*:*
Range: <=3.40
Buffalotech/Wxr 6000ax12b Firmware
cpe:2.3:o:buffalo:wxr-6000ax12b_firmware:*:*:*:*:*:*:*:*
Range: <=3.40
Buffalotech/Wxr 6000ax12s Firmware
cpe:2.3:o:buffalo:wxr-6000ax12s_firmware:*:*:*:*:*:*:*:*
Range: <=3.40
Buffalotech/Wzr 1166dhp2 Firmware
cpe:2.3:o:buffalo:wzr-1166dhp2_firmware:*:*:*:*:*:*:*:*
Range: <=2.18
Buffalotech/Wzr S900dhp Firmware2 versions
cpe:2.3:o:buffalo:wzr-1166dhp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wzr-1166dhp_firmware:*:*:*:*:*:*:*:*range: <=2.18
- cpe:2.3:o:buffalo:wzr-s900dhp_firmware:*:*:*:*:*:*:*:*range: <=2.19
Buffalotech/Wzr 300hp Firmware
cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wzr 450hp Cwt Firmware
cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wzr 450hp Ub Firmware
cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wzr 450hp Firmware
cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wzr 600dhp2 Firmware
cpe:2.3:o:buffalo:wzr-600dhp2_firmware:*:*:*:*:*:*:*:*
Range: <=1.15
Buffalotech/Wzr 600dhp Firmware
cpe:2.3:o:buffalo:wzr-600dhp_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wzr 900dhp2 Firmware
cpe:2.3:o:buffalo:wzr-900dhp2_firmware:*:*:*:*:*:*:*:*
Range: <=2.19
Buffalotech/Wzr 900dhp Firmware
cpe:2.3:o:buffalo:wzr-900dhp_firmware:*:*:*:*:*:*:*:*
Range: <=1.15
Buffalotech/Wzr Agl300nh Firmware
cpe:2.3:o:buffalo:wzr-agl300nh_firmware:*:*:*:*:*:*:*:*
Range: <=1.55
Buffalotech/Wzr G144n Firmware2 versions
cpe:2.3:o:buffalo:wzr-ampg144nh_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wzr-ampg144nh_firmware:*:*:*:*:*:*:*:*range: <=1.49
- cpe:2.3:o:buffalo:wzr-g144n_firmware:*:*:*:*:*:*:*:*range: <=1.48
Buffalotech/Wzr Ampg300nh
cpe:2.3:o:buffalo:wzr-ampg300nh_firmware:*:*:*:*:*:*:*:*
Range: <=1.51
Buffalotech/Wzr D1100h Firmware
cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:*
Range: <=2.00
Buffalotech/Wzr G144nh
cpe:2.3:o:buffalo:wzr-g144nh_firmware:*:*:*:*:*:*:*:*
Range: <=1.48
Buffalotech/Wzr Hp Ag300h Firmware
cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:*
Range: <=1.76
Buffalotech/Wzr Hp G300nh Firmware
cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:*
Range: <=1.84
Buffalotech/Wzr Hp G301nh Firmware
cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:*
Range: <=1.84
Buffalotech/Wzr Hp G302h Firmware
cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:*
Range: <=1.86
Buffalotech/Wzr Hp G450h Firmware
cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:*
Range: <=1.90
Buffalotech/Wzr S600dhp Firmware
cpe:2.3:o:buffalo:wzr-s600dhp_firmware:*:*:*:*:*:*:*:*
Range: <=2.19
Buffalotech/Wzr2 G300n
cpe:2.3:o:buffalo:wzr2-g300n_firmware:*:*:*:*:*:*:*:*
Range: <=1.55
Buffalotech/WCR-300llm-fuzzy
Range: 1.87 and earlier
Buffalotech/WHR-HP-G300Nllm-fuzzy
Range: 2.00 and earlier
Buffalotech/network devicesllm-fuzzy2 versions
multiple versions listed+ 1 more
- (no CPE)range: multiple versions listed
- (no CPE)range: A wide range of products is affected. For the specific products/versions information, see the URLs provided by the vendor and JVN which are listed in [Reference] section.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2022-40966

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions