A missing authentication check in a critical reboot function of Buffalo Wi‑Fi routers allows an attacker to force a reboot without credentials. The flaw can disrupt network connectivity by causing the router to restart abruptly, potentially impacting all connected devices and services. This weakness exemplifies insufficient authentication leading to denial of service, and is classified as CWE‑306.

The vulnerability affects all BUFFALO Wi‑Fi router products, as identified by the vendor. Specific model or firmware versions are not disclosed in the available information, so any device running the affected firmware is potentially at risk.

Based on the description, it is inferred that the attacker can trigger the reboot by sending the privileged command over the network, requiring only remote access to the router. The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. With remote network exposure, the likelihood of exploitation is relatively high, as the attack does not require privileges beyond network connectivity.