BUFFALO Wi-Fi Routers Missing Authentication Vulnerability Allowing Unauthorized Reboots

A vulnerability exists in multiple BUFFALO Wi-Fi router products, allowing an attacker to forcibly reboot the device without authentication. This issue arises from a missing authentication for critical functions, potentially enabling unauthorized users to disrupt the router's operation by forcing a reboot.

Impact

Exploitation of this vulnerability allows for unauthorized reboots of the affected router, disrupting its operation and potentially causing temporary loss of network connectivity.

Remediation

Users can update the router's firmware to the latest version available on the BUFFALO support website. For models WZR-600DHP, WZR-600DHP2, WZR-600DHP3, and WZR-900DHP, the firmware update is available through the BUFFALO Update Service. For other models, the firmware can be downloaded from the BUFFALO support website.