Buffaloamericas vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Buffaloamericas products: 1 record(s), with severity, exploitation and fixes.

Terastation Nas Ts5400r Firmware 1

Exploited only (KEV) →

CVE-2026-29516 Medium · 4.9 CWE-732 Mar 16, 2026

Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root.