CVEvulnerability
CVE-2021-20716
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-04-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.
Affected configurations
• buffalo bhr-4rv firmware (<= 2.55)
• buffalo fs-g54 firmware (<= 2.04)
• buffalo wbr2-b11 firmware (<= 2.32)
• buffalo wbr2-g54 firmware (<= 2.32)
• buffalo wbr2-g54-kd firmware (<= 2.32)
• buffalo wbr-b11 firmware (<= 2.23)
• buffalo wbr-g54 firmware (<= 2.23)
• buffalo wbr-g54l firmware (<= 2.20)
• buffalo whr2-a54g54 firmware (<= 2.25)
• buffalo whr2-g54 firmware (<= 2.23)
• buffalo whr2-g54v firmware (<= 2.55)
• buffalo whr3-ag54 firmware (<= 2.23)
• buffalo whr-g54 firmware (<= 2.16)
• buffalo whr-g54-nf firmware (<= 2.10)
• buffalo wla2-g54 firmware (<= 2.24)
• buffalo wla2-g54c firmware (<= 2.24)
• buffalo wla-b11 firmware (<= 2.20)
• buffalo wla-g54 firmware (<= 2.20)
• buffalo wla-g54c firmware (<= 2.20)
• buffalo wlah-a54g54 firmware (<= 2.54)
• buffalo wlah-am54g54 firmware (<= 2.54)
• buffalo wlah-g54 firmware (<= 2.54)
• buffalo wli2-tx1-ag54 firmware (<= 2.53)
• buffalo wli2-tx1-amg54 firmware (<= 2.53)
• buffalo wli2-tx1-g54 firmware (<= 2.20)
• buffalo wli3-tx1-amg54 firmware (<= 2.53)
• buffalo wli3-tx1-g54 firmware (<= 2.53)
• buffalo wli-t1-b11 firmware (<= 2.20)
• buffalo wli-tx1-g54 firmware (<= 2.20)
• buffalo wvr-g54-nf firmware (<= 2.02)
• buffalo wzr-g108 firmware (<= 2.41)
• buffalo wzr-g54 firmware (<= 2.41)
• buffalo wzr-hp-g54 firmware (<= 2.41)
• buffalo wzr-rs-g54 firmware (<= 2.55)
• buffalo wzr-rs-g54hp firmware (<= 2.55)
References
- https://jvn.jp/en/vu/JVNVU90274525/index.html Third Party Advisory
- https://www.buffalo.jp/news/detail/20210427-02.html Vendor Advisory
- https://jvn.jp/en/vu/JVNVU90274525/index.html Third Party Advisory
- https://www.buffalo.jp/news/detail/20210427-02.html Vendor Advisory