BUFFALO WSR-1800AX4 Series Wi-Fi Router Password Hash Vulnerability

A vulnerability exists in the BUFFALO Wi-Fi router WSR-1800AX4 series, specifically in models WSR-1800AX4, WSR-1800AX4S, WSR-1800AX4B, and WSR-1800AX4-KH, all running firmware versions prior to the latest updates. This vulnerability involves the use of password hashes that lack sufficient computational effort, potentially allowing an attacker to obtain the WPS PIN code and Wi-Fi password when WPS is enabled.

Impact

Exploitation of this vulnerability could lead to the unauthorized retrieval of the WPS PIN code and Wi-Fi connection information, including the encryption key.

Remediation

Users are advised to update their router's firmware to the latest version. Firmware updates are available for download on the BUFFALO support website.