Details of VAR-202603-4861

ID

VAR-202603-4861

CVE

CVE-2026-33366

DESCRIPTION

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

Trust: 1.0

sources: NVD: CVE-2026-33366

AFFECTED PRODUCTS

vendor:	buffalo	model:	vr-u500x	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-ax4r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr-1900dhp	scope:	lt	version:	2.53	Trust: 1.0
vendor:	buffalo	model:	wem-1266wp	scope:	lt	version:	2.87	Trust: 1.0
vendor:	buffalo	model:	fs-s1266	scope:	lt	version:	4.13	Trust: 1.0
vendor:	buffalo	model:	wzr-900dhp2	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wapm-1750d	scope:	lt	version:	1.07	Trust: 1.0
vendor:	buffalo	model:	wxr-1750dhp2	scope:	lt	version:	2.63	Trust: 1.0
vendor:	buffalo	model:	wzr-1750dhp2	scope:	lt	version:	2.33	Trust: 1.0
vendor:	buffalo	model:	wxr-5950ax12	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wsr3600be4-kh	scope:	lt	version:	6.02	Trust: 1.0
vendor:	buffalo	model:	wem-1266	scope:	lt	version:	2.87	Trust: 1.0
vendor:	buffalo	model:	vr-u300w	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-2133tr	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-2133r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wrm-d2133hp	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	wapm-1266wdpr	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wapm-1266wdpra	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr18000be10p	scope:	lt	version:	5.03	Trust: 1.0
vendor:	buffalo	model:	wapm-axetr	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wzr-600dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wzr-600dhp3	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wsr3600be4p	scope:	lt	version:	5.02	Trust: 1.0
vendor:	buffalo	model:	wxr-1900dhp3	scope:	lt	version:	2.66	Trust: 1.0
vendor:	buffalo	model:	wxr-6000ax12b	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wcr-1166dhpl	scope:	lt	version:	1.01	Trust: 1.0
vendor:	buffalo	model:	wapm-1266r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr-6000ax12p	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wzr-1166dhp	scope:	lt	version:	2.20	Trust: 1.0
vendor:	buffalo	model:	wtr-m2133hp	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	waps-1266	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wzr-1166dhp2	scope:	lt	version:	2.20	Trust: 1.0
vendor:	buffalo	model:	wzr-1750dhp	scope:	lt	version:	2.32	Trust: 1.0
vendor:	buffalo	model:	wzr-900dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wxr-1750dhp	scope:	lt	version:	2.63	Trust: 1.0
vendor:	buffalo	model:	wapm-ax8r	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wzr-s600dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wzr-s1750dhp	scope:	lt	version:	2.34	Trust: 1.0
vendor:	buffalo	model:	fs-m1266	scope:	lt	version:	4.13	Trust: 1.0
vendor:	buffalo	model:	waps-ax4	scope:	lt	version:	1.42	Trust: 1.0
vendor:	buffalo	model:	wxr-6000ax12s	scope:	lt	version:	3.57	Trust: 1.0
vendor:	buffalo	model:	wrm-d2133hs	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	wtr-m2133hs	scope:	lt	version:	3.01	Trust: 1.0
vendor:	buffalo	model:	wxr-1900dhp2	scope:	lt	version:	2.62	Trust: 1.0
vendor:	buffalo	model:	wzr-s900dhp	scope:	eq	version:	-	Trust: 1.0
vendor:	buffalo	model:	wzr-600dhp2	scope:	eq	version:	-	Trust: 1.0

sources: NVD: CVE-2026-33366

CVSS

SEVERITY

CVSSV2

CVSSV3

vultures@jpcert.or.jp:	CVE-2026-33366
value:	MEDIUM
Trust: 1.0

vultures@jpcert.or.jp:	CVE-2026-33366
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 1.0

sources: NVD: CVE-2026-33366

PROBLEMTYPE DATA

problemtype:

CWE-306

Trust: 1.0

sources: NVD: CVE-2026-33366

EXTERNAL IDS

db:	JVN	id:	JVN83788689	Trust: 1.0
db:	NVD	id:	CVE-2026-33366	Trust: 1.0

sources: NVD: CVE-2026-33366

REFERENCES

url:	https://jvn.jp/en/jp/jvn83788689/	Trust: 1.0
url:	https://www.buffalo.jp/news/detail/20260323-01.html	Trust: 1.0

sources: NVD: CVE-2026-33366

SOURCES

db:

NVD

id:

CVE-2026-33366

LAST UPDATE DATE

2026-04-02T23:16:31.932000+00:00

SOURCES UPDATE DATE

db:

NVD

id:

CVE-2026-33366

date:

2026-03-31T19:03:18.543

SOURCES RELEASE DATE

db:

NVD

id:

CVE-2026-33366

date:

2026-03-27T06:16:38.997