CVE-2022-34840
Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, and WZR-D1100H firmware Ver. 2.00 and earlier.
Published:Dec 7, 2022
Last Modified:Apr 23, 2025
EPS:Dec 7, 2022
EPSS Score:0.00064
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Buffalo
Product
Hw-450hp-zwe
Buffalo
Hw-450hp-zwe
Vendor
Buffalo
Product
Hw-450hp-zwe Firmware
Buffalo
Hw-450hp-zwe Firmware
Vendor
Buffalo
Product
Wzr-300hp
Buffalo
Wzr-300hp
Vendor
Buffalo
Product
Wzr-300hp Firmware
Buffalo
Wzr-300hp Firmware
Vendor
Buffalo
Product
Wzr-450hp
Buffalo
Wzr-450hp
Vendor
Buffalo
Product
Wzr-450hp-cwt
Buffalo
Wzr-450hp-cwt
Vendor
Buffalo
Product
Wzr-450hp-cwt Firmware
Buffalo
Wzr-450hp-cwt Firmware
Vendor
Buffalo
Product
Wzr-450hp-ub
Buffalo
Wzr-450hp-ub
Vendor
Buffalo
Product
Wzr-450hp-ub Firmware
Buffalo
Wzr-450hp-ub Firmware
Vendor
Buffalo
Product
Wzr-450hp Firmware
Buffalo
Wzr-450hp Firmware
Vendor
Buffalo
Product
Wzr-600dhp
Buffalo
Wzr-600dhp
Vendor
Buffalo
Product
Wzr-600dhp2
Buffalo
Wzr-600dhp2
Vendor
Buffalo
Product
Wzr-600dhp2 Firmware
Buffalo
Wzr-600dhp2 Firmware
Vendor
Buffalo
Product
Wzr-600dhp Firmware
Buffalo
Wzr-600dhp Firmware
Vendor
Buffalo
Product
Wzr-900dhp
Buffalo
Wzr-900dhp
Vendor
Buffalo
Product
Wzr-900dhp Firmware
Buffalo
Wzr-900dhp Firmware
Vendor
Buffalo
Product
Wzr-d1100h
Buffalo
Wzr-d1100h
Vendor
Buffalo
Product
Wzr-d1100h Firmware
Buffalo
Wzr-d1100h Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
