CVE-2011-1324

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

Vulnerable Software	Affected Versions
Buffalotech As 100	All versions
Buffalotech Bbr 4hg	All versions
Buffalotech Bbr 4hg Firmware	Version 1.02
Buffalotech Bbr 4hg Firmware	Version 1.04
Buffalotech Bbr 4hg Firmware	Version 1.04 beta
Buffalotech Bbr 4hg Firmware	Version 1.10
Buffalotech Bbr 4hg Firmware	Version 1.10 beta
Buffalotech Bbr 4hg Firmware	Version 1.11 beta
Buffalotech Bbr 4hg Firmware	Version 1.12
Buffalotech Bbr 4hg Firmware	Version 1.20
Buffalotech Bbr 4hg Firmware	Version 1.20 beta
Buffalotech Bbr 4hg Firmware	Version 1.30
Buffalotech Bbr 4hg Firmware	Version 1.30 beta
Buffalotech Bbr 4hg Firmware	Version 1.31
Buffalotech Bbr 4hg Firmware	Version 1.32
Buffalotech Bbr 4hg Firmware	Version 1.32 beta
Buffalotech Bbr 4hg Firmware	Version 1.33 beta
Buffalotech Bbr 4mg	All versions
Buffalotech Bbr 4mg Firmware	Version 1.00
Buffalotech Bbr 4mg Firmware	Version 1.01 beta
Buffalotech Bbr 4mg Firmware	Version 1.03
Buffalotech Bbr 4mg Firmware	Version 1.04
Buffalotech Bbr 4mg Firmware	Version 1.04 beta
Buffalotech Bbr 4mg Firmware	Version 1.10
Buffalotech Bbr 4mg Firmware	Version 1.10 beta
Buffalotech Bbr 4mg Firmware	Version 1.11 beta
Buffalotech Bbr 4mg Firmware	Version 1.12
Buffalotech Bbr 4mg Firmware	Version 1.20
Buffalotech Bbr 4mg Firmware	Version 1.20 beta
Buffalotech Bbr 4mg Firmware	Version 1.30
Buffalotech Bbr 4mg Firmware	Version 1.30 beta
Buffalotech Bbr 4mg Firmware	Version 1.31
Buffalotech Bbr 4mg Firmware	Version 1.32
Buffalotech Bbr 4mg Firmware	Version 1.32 beta
Buffalotech Bbr 4mg Firmware	Version 1.33
Buffalotech Bbr 4mg Firmware	Version 1.33 beta
Buffalotech Bhr 4rv	All versions
Buffalotech Bhr 4rv Firmware	Version 2.31
Buffalotech Bhr 4rv Firmware	Version 2.32 prebeta
Buffalotech Bhr 4rv Firmware	Version 2.33 prebeta
Buffalotech Bhr 4rv Firmware	Version 2.42
Buffalotech Bhr 4rv Firmware	Version 2.46
Buffalotech Bhr 4rv Firmware	Version 2.48
Buffalotech Fs G54	All versions
Buffalotech Fs G54 Firmware	Version 2.07
Buffalotech Wer A54g54	All versions
Buffalotech Wer A54g54 Firmware	Version 1.00
Buffalotech Wer A54g54 Firmware	Version 1.01 beta
Buffalotech Wer A54g54 Firmware	Version 1.02
Buffalotech Wer A54g54 Firmware	Version 1.03
Buffalotech Wer A54g54 Firmware	Version 1.10
Buffalotech Wer A54g54 Firmware	Version 1.12
Buffalotech Wer A54g54 Firmware	Version 1.12 beta
Buffalotech Wer A54g54 Firmware	Version 1.13
Buffalotech Wer Ag54	All versions
Buffalotech Wer Ag54 Firmware	Version 1.04
Buffalotech Wer Ag54 Firmware	Version 1.12
Buffalotech Wer Ag54 Firmware	Version 1.12 beta
Buffalotech Wer Am54g54	All versions
Buffalotech Wer Am54g54 Firmware	Version 1.11
Buffalotech Wer Am54g54 Firmware	Version 1.12
Buffalotech Wer Am54g54 Firmware	Version 1.12 beta
Buffalotech Wer Am54g54 Firmware	Version 1.13
Buffalotech Wer Am54g54 Firmware	Version 1.14
Buffalotech Wer Amg54	All versions
Buffalotech Wer Amg54 Firmware	Version 1.11
Buffalotech Wer Amg54 Firmware	Version 1.12
Buffalotech Wer Amg54 Firmware	Version 1.14
Buffalotech Whr Am54g54	All versions
Buffalotech Whr Am54g54 Firmware	Version 1.30
Buffalotech Whr Am54g54 Firmware	Version 1.38
Buffalotech Whr Am54g54 Firmware	Version 1.40
Buffalotech Whr Am54g54 Firmware	Version 1.42
Buffalotech Whr Amg54	All versions
Buffalotech Whr Amg54 Firmware	Version 1.31
Buffalotech Whr Amg54 Firmware	Version 1.38
Buffalotech Whr Amg54 Firmware	Version 1.40
Buffalotech Whr Amg54 Firmware	Version 1.42
Buffalotech Whr Ampg	All versions
Buffalotech Whr Ampg Firmware	Version 1.46
Buffalotech Whr G	All versions
Buffalotech Whr G54s	All versions
Buffalotech Whr G54s Firmware	Version 1.20
Buffalotech Whr G54s Firmware	Version 1.21
Buffalotech Whr G54s Firmware	Version 1.23
Buffalotech Whr G54s Firmware	Version 1.38
Buffalotech Whr G54s Firmware	Version 1.40
Buffalotech Whr G54s Firmware	Version 1.42
Buffalotech Whr G Firmware	Version 1.46
Buffalotech Whr Hp Ampg	All versions
Buffalotech Whr Hp Ampg Firmware	Version 1.32
Buffalotech Whr Hp G	All versions
Buffalotech Whr Hp G54	All versions
Buffalotech Whr Hp G54 Firmware	Version 1.20
Buffalotech Whr Hp G54 Firmware	Version 1.21
Buffalotech Whr Hp G54 Firmware	Version 1.23
Buffalotech Whr Hp G54 Firmware	Version 1.38
Buffalotech Whr Hp G54 Firmware	Version 1.40
Buffalotech Whr Hp G54 Firmware	Version 1.42
Buffalotech Whr Hp G Firmware	Version 1.46
Buffalotech Wzr Ampg144nh	All versions
Buffalotech Wzr Ampg144nh Firmware	Version 1.47
Buffalotech Wzr Ampg144nh Firmware	Version 1.48 beta
Buffalotech Wzr Ampg300nh	All versions
Buffalotech Wzr Ampg300nh Firmware	Version 1.48
Buffalotech Wzr G144n	All versions
Buffalotech Wzr G144n Firmware	Version 1.45
Buffalotech Wzr G144n Firmware	Version 1.46 beta
Buffalotech Wzr G144n Firmware	Version 1.47
Buffalotech Wzr G144n Firmware	Version 1.47 beta
Buffalotech Wzr G144nh	All versions
Buffalotech Wzr G144nh Firmware	Version 1.45
Buffalotech Wzr G144nh Firmware	Version 1.47
Buffalotech Wzr G144nh Firmware	Version 1.47 beta
Buffalotech Wzr G144nh Firmware	Version 1.48
Buffalotech Wzr2 G300n	All versions
Buffalotech Wzr2 G300n Firmware	Version 1.48
Buffalotech Wzr2 G300n Firmware	Version 1.50 beta

Description

Affected (118)

Related CWEs

References (4)

Timeline