---
id: CVE-2025-61941
title: >-
  A path traversal issue exists in WXR9300BE6P series firmware versions prior to
  Ver.1.10
summary: >-
  A path traversal issue exists in WXR9300BE6P series firmware versions prior to
  Ver.1.10. Arbitrary file may be altered by an administrative user who logs in
  to the affected product. Moreover, arbitrary OS command may be executed via
  some…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-22
published: '2025-10-15'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T12:10:00.217'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-61941'
references:
  - url: 'https://jvn.jp/en/vu/JVNVU96471278/'
    label: vultures@jpcert.or.jp
  - url: 'https://www.buffalo.jp/news/detail/20251014-01.html'
    label: vultures@jpcert.or.jp
tags:
  - nvd
epss: 0.00526
epssPercentile: 0.42756
ingestedAt: '2026-10-08T11:31:27.417Z'
---

## Overview

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.