CVEvulnerability
CVE-2011-1324
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Affected configurations
• buffalotech bbr-4hg firmware 1.02
• buffalotech bbr-4hg firmware 1.04
• buffalotech bbr-4hg firmware 1.10
• buffalotech bbr-4hg firmware 1.11
• buffalotech bbr-4hg firmware 1.12
• buffalotech bbr-4hg firmware 1.20
• buffalotech bbr-4hg firmware 1.30
• buffalotech bbr-4hg firmware 1.31
• buffalotech bbr-4hg firmware 1.32
• buffalotech bbr-4hg firmware 1.33
• buffalotech bbr-4mg firmware 1.00
• buffalotech bbr-4mg firmware 1.01
• buffalotech bbr-4mg firmware 1.03
• buffalotech bbr-4mg firmware 1.04
• buffalotech bbr-4mg firmware 1.10
• buffalotech bbr-4mg firmware 1.11
• buffalotech bbr-4mg firmware 1.12
• buffalotech bbr-4mg firmware 1.20
• buffalotech bbr-4mg firmware 1.30
• buffalotech bbr-4mg firmware 1.31
• buffalotech bbr-4mg firmware 1.32
• buffalotech bbr-4mg firmware 1.33
• buffalotech bhr-4rv firmware 2.31
• buffalotech bhr-4rv firmware 2.32
• buffalotech bhr-4rv firmware 2.33
• buffalotech bhr-4rv firmware 2.42
• buffalotech bhr-4rv firmware 2.46
• buffalotech bhr-4rv firmware 2.48
• buffalotech fs-g54 firmware 2.07
• buffalotech wer-a54g54 firmware 1.00
• buffalotech wer-a54g54 firmware 1.01
• buffalotech wer-a54g54 firmware 1.02
• buffalotech wer-a54g54 firmware 1.03
• buffalotech wer-a54g54 firmware 1.10
• buffalotech wer-a54g54 firmware 1.12
• buffalotech wer-a54g54 firmware 1.13
• buffalotech wer-ag54 firmware 1.04
• buffalotech wer-ag54 firmware 1.12
• buffalotech wer-am54g54 firmware 1.11
• buffalotech wer-am54g54 firmware 1.12
• buffalotech wer-am54g54 firmware 1.13
• buffalotech wer-am54g54 firmware 1.14
• buffalotech wer-amg54 firmware 1.11
• buffalotech wer-amg54 firmware 1.12
• buffalotech wer-amg54 firmware 1.14
• buffalotech whr-am54g54 firmware 1.30
• buffalotech whr-am54g54 firmware 1.38
• buffalotech whr-am54g54 firmware 1.40
• buffalotech whr-am54g54 firmware 1.42
• buffalotech whr-amg54 firmware 1.31
• buffalotech whr-amg54 firmware 1.38
• buffalotech whr-amg54 firmware 1.40
• buffalotech whr-amg54 firmware 1.42
• buffalotech whr-ampg firmware 1.46
• buffalotech whr-g firmware 1.46
• buffalotech whr-g54s firmware 1.20
• buffalotech whr-g54s firmware 1.21
• buffalotech whr-g54s firmware 1.23
• buffalotech whr-g54s firmware 1.38
• buffalotech whr-g54s firmware 1.40
… and 42 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness