PT-2025-9993 · Buffalo · Buffalo Ls520D

Published 2025-03-06 · Updated 2025-03-07 · CVE-2025-26167

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Buffalo LS520D version 4.53

Description The issue allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.

Recommendations For Buffalo LS520D version 4.53, update to a newer version that contains a fix for this issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-26167

Affected Products

Buffalo Ls520D

References · 4

• 🔥 https://github.com/SpikeReply/advisories/blob/0f15f5aefb959fbaff049da7cc3e36733e25b580/cve/buffalo/cve-2025-26167.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-26167 · Security Note
• https://twitter.com/CVEnew/status/1897912325216383191 · Twitter Post
• https://t.me/cvenotify/113915 · Telegram Post