CVE-2021-3512

🗓️ 28 Apr 2021 01:15:17Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 8 Views

Improper access control vulnerability in multiple Buffalo broadband routers, allowing remote attackers to bypass access restriction and execute arbitrary OS commands with root privileges

Reporter	Title	Published	Views	Family All 8
CNNVD	Buffalo broadband routers 安全漏洞	27 Apr 202100:00	–	cnnvd
CVE	CVE-2021-3512	28 Apr 202100:45	–	cve
Cvelist	CVE-2021-3512	28 Apr 202100:45	–	cvelist
EUVD	EUVD-2021-26831	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Buffalo broadband routers	28 Apr 202107:14	–	jvn
OSV	CVE-2021-3512	28 Apr 202101:15	–	osv
Prion	Improper access control	28 Apr 202101:15	–	prion
RedhatCVE	CVE-2021-3512	22 May 202521:28	–	redhatcve

NVD

Node

buffalo bhr-4grv_firmwareRange<2.00

AND

buffalo bhr-4grvMatch-

Node

buffalo dwr-hp-g300nh_firmwareRange<1.84

AND

buffalo dwr-hp-g300nhMatch-

Node

buffalo hw-450hp-zwe_firmwareRange<2.00

AND

buffalo hw-450hp-zweMatch-

Node

buffalo whr-300hp_firmwareRange<2.00

AND

buffalo whr-300hpMatch-

Node

buffalo whr-300_firmwareRange<2.00

AND

buffalo whr-300Match-

Node

buffalo whr-g301n_firmwareRange<1.87

AND

buffalo whr-g301nMatch-

Node

buffalo whr-hp-g300n_firmwareRange<2.00

AND

buffalo whr-hp-g300nMatch-

Node

buffalo whr-hp-gn_firmwareRange<1.87

AND

buffalo whr-hp-gnMatch-

Node

buffalo wpl-05g300_firmwareRange<1.88

AND

buffalo wpl-05g300Match-

Node

buffalo wzr-450hp-cwt_firmwareRange<2.00

AND

buffalo wzr-450hp-cwtMatch-

Node

buffalo wzr-450hp-ub_firmwareRange<2.00

AND

buffalo wzr-450hp-ubMatch-

Node

buffalo wzr-hp-ag300h_firmwareRange<1.76

AND

buffalo wzr-hp-ag300hMatch-

Node

buffalo wzr-hp-g300nh_firmwareRange<1.84

AND

buffalo wzr-hp-g300nhMatch-

Node

buffalo wzr-hp-g301nh_firmwareRange<1.84

AND

buffalo wzr-hp-g301nhMatch-

Node

buffalo wzr-hp-g302h_firmwareRange<1.86

AND

buffalo wzr-hp-g302hMatch-

Node

buffalo wzr-hp-g450h_firmwareRange<1.90

AND

buffalo wzr-hp-g450hMatch-

Node

buffalo wzr-300hp_firmwareRange<2.00

AND

buffalo wzr-300hpMatch-

Node

buffalo wzr-450hp_firmwareRange<2.00

AND

buffalo wzr-450hpMatch-

Node

buffalo wzr-600dhp_firmwareRange<2.00

AND

buffalo wzr-600dhpMatch-

Node

buffalo wzr-d1100h_firmwareRange<2.00

AND

buffalo wzr-d1100hMatch-

Node

buffalo fs-hp-g300n_firmwareRange<3.33

AND

buffalo fs-hp-g300nMatch-

Node

buffalo fs-600dhp_firmwareRange<3.40

AND

buffalo fs-600dhpMatch-

Node

buffalo fs-r600dhp_firmwareRange<3.40

AND

buffalo fs-r600dhpMatch-

Node

buffalo fs-g300n_firmwareRange<3.14

AND

buffalo fs-g300nMatch-

Source	Link
buffalo	www.buffalo.jp/news/detail/20210427-01.html
jvn	www.jvn.jp/en/vu/JVNVU99235714/index.html

21 Nov 2024 06:21Current

CVSS 28.3

CVSS 3.18.8

EPSS0.00857

access control buffalo routers remote attackers arbitrary os commands root privileges cve-2021-3512