PT-2025-9993 · Buffalo · Buffalo Ls520D

Publicado 2025-03-06 · Atualizado 2025-03-07 · CVE-2025-26167

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Buffalo LS520D version 4.53

Description The issue allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.

Recommendations For Buffalo LS520D version 4.53, update to a newer version that contains a fix for this issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2025-26167

Produtos afetados

Buffalo Ls520D

Referências · 4

• 🔥 https://github.com/SpikeReply/advisories/blob/0f15f5aefb959fbaff049da7cc3e36733e25b580/cve/buffalo/cve-2025-26167.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-26167 · Nota de Segurança
• https://twitter.com/CVEnew/status/1897912325216383191 · Publicação no Twitter
• https://t.me/cvenotify/113915 · Publicação no Telegram