CVE-2021-3512

Published: Apr 28, 2021Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors.

Affected (24)

Products: Buffalo: Bhr 4grv Firmware, Dwr Hp G300nh Firmware, Hw 450hp Zwe Firmware, Whr 300hp Firmware, Whr 300 Firmware, Whr G301n Firmware, Whr Hp G300n Firmware, Whr Hp Gn Firmware, Wpl 05g300 Firmware, Wzr 450hp Cwt Firmware, Wzr 450hp Ub Firmware, Wzr Hp Ag300h Firmware, Wzr Hp G300nh Firmware, Wzr Hp G301nh Firmware, Wzr Hp G302h Firmware, Wzr Hp G450h Firmware, Wzr 300hp Firmware, Wzr 450hp Firmware, Wzr 600dhp Firmware, Wzr D1100h Firmware, Fs Hp G300n Firmware, Fs 600dhp Firmware, Fs R600dhp Firmware, Fs G300n Firmware

Buffalo

24 products

Bhr 4grv Firmware

Dwr Hp G300nh Firmware

Hw 450hp Zwe Firmware

Whr 300hp Firmware

Whr 300 Firmware

Whr G301n Firmware

Whr Hp G300n Firmware

Whr Hp Gn Firmware

Wpl 05g300 Firmware

Wzr 450hp Cwt Firmware

Wzr 450hp Ub Firmware

Wzr Hp Ag300h Firmware

Wzr Hp G300nh Firmware

Wzr Hp G301nh Firmware

Wzr Hp G302h Firmware

Wzr Hp G450h Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bhr 4grv Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Bhr 4grv	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Dwr Hp G300nh Firmware	Before 1.84

Running on/with	Platform Versions
Buffalo Dwr Hp G300nh	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Hw 450hp Zwe Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Hw 450hp Zwe	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Whr 300hp Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Whr 300hp	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Whr 300 Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Whr 300	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Whr G301n Firmware	Before 1.87

Running on/with	Platform Versions
Buffalo Whr G301n	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Whr Hp G300n Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Whr Hp G300n	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Whr Hp Gn Firmware	Before 1.87

Running on/with	Platform Versions
Buffalo Whr Hp Gn	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wpl 05g300 Firmware	Before 1.88

Running on/with	Platform Versions
Buffalo Wpl 05g300	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 450hp Cwt Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Wzr 450hp Cwt	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 450hp Ub Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Wzr 450hp Ub	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr Hp Ag300h Firmware	Before 1.76

Running on/with	Platform Versions
Buffalo Wzr Hp Ag300h	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr Hp G300nh Firmware	Before 1.84

Running on/with	Platform Versions
Buffalo Wzr Hp G300nh	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr Hp G301nh Firmware	Before 1.84

Running on/with	Platform Versions
Buffalo Wzr Hp G301nh	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr Hp G302h Firmware	Before 1.86

Running on/with	Platform Versions
Buffalo Wzr Hp G302h	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr Hp G450h Firmware	Before 1.90

Running on/with	Platform Versions
Buffalo Wzr Hp G450h	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 300hp Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Wzr 300hp	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 450hp Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Wzr 450hp	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr 600dhp Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Wzr 600dhp	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Wzr D1100h Firmware	Before 2.00

Running on/with	Platform Versions
Buffalo Wzr D1100h	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Fs Hp G300n Firmware	Before 3.33

Running on/with	Platform Versions
Buffalo Fs Hp G300n	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Fs 600dhp Firmware	Before 3.40

Running on/with	Platform Versions
Buffalo Fs 600dhp	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Fs R600dhp Firmware	Before 3.40

Running on/with	Platform Versions
Buffalo Fs R600dhp	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Fs G300n Firmware	Before 3.14

Running on/with	Platform Versions
Buffalo Fs G300n	All versions

References (4)

https://jvn.jp/en/vu/JVNVU99235714/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.buffalo.jp/news/detail/20210427-01.html

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/vu/JVNVU99235714/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.buffalo.jp/news/detail/20210427-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.