The vulnerability is a code injection flaw (CWE‑94) that allows an attacker to execute arbitrary code on BUFFALO Wi‑Fi router products. Because the code runs with the privileges of the device, an attacker could compromise the router’s network connectivity, intercept traffic, or use the router as a foothold to reach other systems. This represents a serious breach of confidentiality, integrity, and availability for the affected network.

The affected products are BUFFALO Wi‑Fi routers manufactured by BUFFALO INC. No specific firmware or device versions are listed, so any model that incorporates the vulnerable component is potentially at risk.

With a CVSS score of 8.7 the vulnerability is considered high severity. Exploitation is feasible over the internet, likely through the router’s web management interface, and does not require special conditions beyond reaching the interface. Although EPSS data is unavailable and the issue is not listed in KEV, the remote code execution nature warrants high attention and an urgent response.