CVE-2021-20090

🗓️ 29 Apr 2021 00:00:00Reported by tenableType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1288 Views🌐 WEB

A path traversal vulnerability in Buffalo WSR-2533DHPL2 and WSR-2533DHP3 firmware versions <= 1.02 and <= 1.24 allows remote attackers to bypass authentication

Reporter	Title	Published	Views	Family All 44
0day.today	HughesNet HT2000W Satellite Modem - Password Reset Exploit	27 Aug 202400:00	–	zdt
ICS	Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors	6 Oct 202212:00	–	ics
ATTACKERKB	CVE-2021-20090	29 Apr 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-22506	26 Mar 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-38703	1 Sep 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-1497	5 May 202100:00	–	attackerkb
ATTACKERKB	CVE-2020-29557	29 Jan 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-1498	5 May 202100:00	–	attackerkb
Information Security Automation	Joint Advisory AA22-279A and Vulristics	21 Oct 202220:10	–	avleonov
BDU FSTEC	The vulnerability of the web interface of the Microprogramming Software-based Arcadyan Routers allows a hacker to bypass the authentication process.	10 Aug 202100:00	–	bdu_fstec

NVD

Node

buffalo wsr-2533dhpl2-bk_firmwareRange≤1.02

AND

buffalo wsr-2533dhpl2-bkMatch-

Node

buffalo wsr-2533dhp3-bk_firmwareRange≤1.24

AND

buffalo wsr-2533dhp3-bkMatch-

[
  {
    "vendor": "n/a",
    "product": "Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3",
    "versions": [
      {
        "version": "WSR-2533DHPL2 <=1.02, WSR-2533DHP3 <= 1.24",
        "status": "affected"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2021-13
kb	www.kb.cert.org/vuls/id/914124
secpod	www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
ARC_SYS_Password	path	images/..%2fapply_abstract.cgi	POST to apply_abstract.cgi with crafted payload to reset administrator password using httoken and encoded password	CWE-22
submit_button	path	images/..%2fapply_abstract.cgi	POST to apply_abstract.cgi with crafted payload to reset administrator password using httoken and encoded password	CWE-22
action	path	images/..%2fapply_abstract.cgi	POST to apply_abstract.cgi with crafted payload to reset administrator password using httoken and encoded password	CWE-22
httoken	path	images/..%2fapply_abstract.cgi	POST to apply_abstract.cgi with crafted payload to reset administrator password using httoken and encoded password	CWE-22
_tn	query param	images/..%2fcgi/cgi_sys_p.js	Password hash verification via cgi_sys_p.js using httoken in query string	CWE-22

17 Jun 2026 03:33Current

8.1High risk

Vulners AI Score8.1

CVSS 27.5

CVSS 3.19.8

EPSS0.99983

SSVC