CVE-2021-3511

Buffalo broadband routers are affected by CVE-2021-3511, a vulnerability that allows remote unauthenticated attackers to obtain information such as configuration data. The issue, categorized as a Disclosure of sensitive information (CWE-200), affects multiple Buffalo models and firmware versions ...

CVE-2021-20716

Hidden functionality in multiple Buffalo network devices BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54...

CVE-2021-20716

CVE-2021-20716 corresponds to hidden functionality in Buffalo network devices that enables a remote attacker to turn on the debug option, then execute arbitrary code or OS commands, change configuration, and cause a DoS. Affected products and firmware ranges include multiple Buffalo models (e.g.,...

CVE-2021-3512: Undefined Security Weakness

Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to path traversal

The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 suffer from a path traversal vulnerability, which stems from an input validation error when the web interface handles directory traversal sequences, and can be exploited by attacke...

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Code Injection Vulnerability

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to code injection, which can be exploited by attackers to remotely execute code...

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Access Control Error Vulnerability

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to an access control error that could be exploited by an attacker to gain access to unauthorized content...

PT-2021-14175

Name of the Vulnerable Software and Affected Versions: BHR-4RV firmware Ver.2.55 and prior FS-G54 firmware Ver.2.04 and prior WBR2-B11 firmware Ver.2.32 and prior WBR2-G54 firmware Ver.2.32 and prior WBR2-G54-KD firmware Ver.2.32 and prior WBR-B11 firmware Ver.2.23 and prior WBR-G54 firmware...

CVE-2021-20716: Undefined Security Weakness

Hidden functionality in multiple Buffalo network devices BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54...

CVE-2021-3511: Undefined Security Weakness

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and...

PT-2021-20826

Name of the Vulnerable Software and Affected Versions: Buffalo broadband routers versions 1.99 and prior Buffalo DWR-HP-G300NH firmware versions 1.83 and prior Buffalo HW-450HP-ZWE firmware versions 1.99 and prior Buffalo WHR-300HP firmware versions 1.99 and prior Buffalo WHR-300 firmware version...

PT-2021-20827

Name of the Vulnerable Software and Affected Versions: Buffalo broadband routers versions 1.99 and prior Buffalo DWR-HP-G300NH firmware versions 1.83 and prior Buffalo HW-450HP-ZWE firmware versions 1.99 and prior Buffalo WHR-300HP firmware versions 1.99 and prior Buffalo WHR-300 firmware version...

Buffalo network devices 安全漏洞

Buffalo firmware is a network device from Buffalo Japan. A security vulnerability exists in Buffalo network devices that could allow a remote attacker to open debugging options and execute arbitrary code or operating system commands to alter the configuration and cause a denial-of-service DoS...

Buffalo WSR-2533DHPL2 路径遍历漏洞

The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 suffer from a path traversal vulnerability, which stems from an input validation error when the web interface handles directory traversal sequences, and can be exploited by attacke...

Buffalo WSR-2533DHPL2 代码注入漏洞

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to code injection, which can be exploited by attackers to remotely execute code...

Buffalo WSR-2533DHPL2 授权问题漏洞

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to an access control error that could be exploited by an attacker to gain access to unauthorized content...

Buffalo broadband routers 安全漏洞

Buffalo Firmware is a networking device from Buffalo Japan. A security vulnerability exists in Buffalo broadband routers that originates from allowing an unauthenticated, remote attacker to gain access to information, such as configurations, via unspecified vectors. The following products and...

Buffalo broadband routers 安全漏洞

Buffalo Firmware is a networking device from Buffalo Japan. A security vulnerability exists in Buffalo broadband routers that stems from improper access control. The following products and versions are affected: BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior,...

PT-2021-3736

Name of the Vulnerable Software and Affected Versions Buffalo WSR-2533DHPL2 firmware version = 1.02 Buffalo WSR-2533DHP3 firmware version = 1.24 Description A path traversal vulnerability in the web interfaces of Buffalo routers could allow unauthenticated remote attackers to bypass authenticatio...

Multiple vulnerabilities in Buffalo AirStation WHR-G54S

Overview Buffalo AirStation WHR-G54S contains multiple vulnerabilities listed below. Directory Traversal - CVE-2020-5605 Cross-site Scripting - CVE-2020-5606 RyotaK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...