Vulnerability Description
Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Related Weaknesses (CWE)
References
- https://github.com/SpikeReply/advisories/blob/0f15f5aefb959fbaff049da7cc3e36733e
- https://github.com/SpikeReply/advisories/blob/0f15f5aefb959fbaff049da7cc3e36733e
FAQ
What is CVE-2025-26167?
CVE-2025-26167 is a vulnerability with a CVSS score of 7.5 (HIGH). Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.
How severe is CVE-2025-26167?
CVE-2025-26167 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-26167?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.