Critical severity9.8NVD Advisory· Published Apr 15, 2024· Updated Jun 17, 2026
CVE-2024-23486
CVE-2024-23486
Description
Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:o:buffalo:wsr-2533dhp2_firmware:*:*:*:*:*:*:*:*Range: <1.11
- cpe:2.3:o:buffalo:wsr-2533dhpl_firmware:*:*:*:*:*:*:*:*Range: <1.07
cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:*range: <1.11
- (no CPE)range: firmware Ver. 1.10 and earlier
firmware Ver. 1.06 and earlier+ 1 more
- (no CPE)range: firmware Ver. 1.06 and earlier
- (no CPE)range: firmware Ver. 1.10 and earlier
- Range: firmware Ver. 1.06 and earlier
Patches
Vulnerability mechanics
References
2- jvn.jp/en/jp/JVN58236836/nvdThird Party Advisory
- www.buffalo.jp/news/detail/20240410-01.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.