Unrated severityNVD Advisory· Published Apr 15, 2024· Updated Mar 18, 2025

CVE-2024-23486

Description

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ELECOM CO.,LTD./wireless LAN routersllm-fuzzy
Buffalotech/WSR-2533DHP3cpe-rescue2 versions
firmware Ver. 1.06 and earlier+ 1 more
- (no CPE)range: firmware Ver. 1.06 and earlier
- (no CPE)range: firmware Ver. 1.10 and earlier
Buffalotech/WSR-2533DHPL2cpe-rescue
Range: firmware Ver. 1.06 and earlier
BUFFALO INC./WSR-A2533DHP2v5
Range: firmware Ver. 1.10 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN58236836/mitre
www.buffalo.jp/news/detail/20240410-01.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000