CVE-2014-9284: The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP...

Security readout for executives and security teams

This CVE affects several Buffalo router models. A logged-in remote user can run operating-system commands on the device through unspecified vectors. That could let someone with valid router credentials take over routing behavior, change settings, or use the device as a foothold. The provided sources do not confirm public exploitation or a specific patch. Exposure is likely limited to organizations still operating the named Buffalo routers on affected firmware, especially where remote management is reachable by users with credentials. Prioritize remediation where affected routers protect sensitive networks or expose management remotely. The issue enables command execution after authentication, but the bundle lacks evidence of active exploitation. Mitigation focus: Inventory the named Buffalo router models and firmware versions.; Check Buffalo or JVN guidance for fixed firmware or replacement advice.; Disable remote administration where it is not required..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.