CVE-2021-20091

🗓️ 29 Apr 2021 14:29:09Reported by tenableType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 90 Views

Buffalo WSR-2533DHPL2/WRS-2533DHP3 firmware <=1.02/1.24 allow authenticated remote code executio

Reporter	Title	Published	Views	Family All 15
Tenable Nessus	Buffalo Routers Multiple Vulnerabilities (TRA-2021-13)	4 Aug 202100:00	–	nessus
Circl	CVE-2021-20091	27 Apr 202309:58	–	circl
CNNVD	Buffalo WSR-2533DHPL2 代码注入漏洞	27 Apr 202100:00	–	cnnvd
CNVD	Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Code Injection Vulnerability	28 Apr 202100:00	–	cnvd
Check Point Advisories	Buffalo Routers Directory Traversal (CVE-2021-20090; CVE-2021-20091)	23 Aug 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-20091	29 Apr 202114:29	–	cvelist
Nuclei	Buffalo WSR-2533DHPL2 - Configuration File Injection	10 Jun 202605:11	–	nuclei
Nuclei	Buffalo WSR-2533DHPL2 - Improper Access Control	4 Jun 202603:48	–	nuclei
NVD	CVE-2021-20091	29 Apr 202115:15	–	nvd
OSV	CVE-2021-20091	29 Apr 202115:15	–	osv

NVD

Node

buffalo wsr-2533dhpl2-bk_firmwareRange≤1.02

AND

buffalo wsr-2533dhpl2-bkMatch-

Node

buffalo wsr-2533dhp3-bk_firmwareRange≤1.24

AND

buffalo wsr-2533dhp3-bkMatch-

[
  {
    "product": "Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "WSR-2533DHPL2 <=1.02, WSR-2533DHP3 <= 1.24"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2021-13

21 Nov 2024 05:45Current

9.3High risk

Vulners AI Score9.3

CVSS 26.5

CVSS 3.18.8

EPSS0.84696