Vulnerabilidades de Buffaloamericas
CVEs publicadas que afetam produtos de Buffaloamericas: 1 registro(s), com severidade, exploração e correções.
CVE-2026-29516
Média · 4.9
CWE-732 16/03/2026
Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root.