CVE-2025-61941 HIGH

CVE-2025-61941

Vendor Buffalo Inc.
Product WXR9300BE6P series
Weakness CWE-22 · Path traversal
Published October 15, 2025
Last update October 15, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration.

Key dates

02Disclosure timeline

October 15, 2025 CVE published
October 15, 2025 Record updated