CVE Intelligence

Buffaloamericas Terastation Nas Ts5400r Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Buffaloamericas Terastation Nas Ts5400r Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:buffaloamericas:terastation_nas_ts5400r_firmware

CVE-2026-29516 Medium · 4.9 CWE-732 Mar 16, 2026
Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root.