Approved changes feed: RSS · Atom

cpe:2.3:a:buffalo:terastation_nas_ts5400r:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBuffalo (ae033968-4286-5bf6-8bbd-eb847d0b0a12)
ProductTerastation Nas Ts5400R (e5b0434b-9611-58fb-b598-c31505f88691)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-29516 vulnerable 2026-06-08 07:55:16.243538 Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
MEDIUM (4.9)
Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions on /etc/shadow to retrieve hashed passwords for all configured accounts including root.
Published: 2026-03-16T19:07:52.684Z
Updated: 2026-05-11T23:11:43.348Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.