CVE-2025-46413: WSR-1800AX4 prior to Ver.1.09; +3 more affected products

CVE-2025-46413. EPSS 0.0013 (percentile 0.02306), scored 17-Oct-2026.

Affected technology

WSR-1800AX4 · prior to Ver.1.09
BUFFALO INC.

WSR-1800AX4S · prior to Ver.1.11
BUFFALO INC.

WSR-1800AX4B · prior to Ver.1.11
BUFFALO INC.

WSR-1800AX4-KH · prior to Ver.1.19
BUFFALO INC.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality impact as low; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 18-Oct-2026 22:53 UTC

CWE: CWE-916
CCR priority: 0.0 /100 (P5)
EPSS: 0.0013 · percentile 0.02306 · 2026-10-17
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 22:50:08.248207+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-46413.html