Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| BUFFALO INC. | Buffalo network devices | all versions | — | No fix listed | CNA |
- Buffalo network devices VendorBUFFALO INC. Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 70
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:buffalo:bhr-4rv_firmware:*:*:*:*:*:*:*:* | up to 2.55 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:bhr-4rv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:fs-g54_firmware:*:*:*:*:*:*:*:* | up to 2.04 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:fs-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wbr2-b11_firmware:*:*:*:*:*:*:*:* | up to 2.32 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wbr2-b11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wbr2-g54_firmware:*:*:*:*:*:*:*:* | up to 2.32 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wbr2-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wbr2-g54-kd_firmware:*:*:*:*:*:*:*:* | up to 2.32 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wbr2-g54-kd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
- cpe:2.3:o:buffalo:bhr-4rv_firmware:*:*:*:*:*:*:*:* Versions up to 2.55 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:bhr-4rv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:fs-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.04 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:fs-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wbr2-b11_firmware:*:*:*:*:*:*:*:* Versions up to 2.32 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wbr2-b11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wbr2-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.32 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wbr2-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wbr2-g54-kd_firmware:*:*:*:*:*:*:*:* Versions up to 2.32 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wbr2-g54-kd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Show 60 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:buffalo:wbr-b11_firmware:*:*:*:*:*:*:*:* | up to 2.23 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wbr-b11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wbr-g54_firmware:*:*:*:*:*:*:*:* | up to 2.23 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wbr-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wbr-g54l_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wbr-g54l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr2-a54g54_firmware:*:*:*:*:*:*:*:* | up to 2.25 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr2-a54g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr2-g54_firmware:*:*:*:*:*:*:*:* | up to 2.23 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr2-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr2-g54v_firmware:*:*:*:*:*:*:*:* | up to 2.55 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr2-g54v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr3-ag54_firmware:*:*:*:*:*:*:*:* | up to 2.23 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr3-ag54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g54_firmware:*:*:*:*:*:*:*:* | up to 2.16 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:whr-g54-nf_firmware:*:*:*:*:*:*:*:* | up to 2.10 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:whr-g54-nf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wla2-g54_firmware:*:*:*:*:*:*:*:* | up to 2.24 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wla2-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wla2-g54c_firmware:*:*:*:*:*:*:*:* | up to 2.24 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wla2-g54c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wla-b11_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wla-b11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wla-g54_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wla-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wla-g54c_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wla-g54c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wlah-a54g54_firmware:*:*:*:*:*:*:*:* | up to 2.54 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wlah-a54g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wlah-am54g54_firmware:*:*:*:*:*:*:*:* | up to 2.54 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wlah-am54g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wlah-g54_firmware:*:*:*:*:*:*:*:* | up to 2.54 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wlah-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli2-tx1-ag54_firmware:*:*:*:*:*:*:*:* | up to 2.53 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli2-tx1-ag54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli2-tx1-amg54_firmware:*:*:*:*:*:*:*:* | up to 2.53 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli2-tx1-amg54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli2-tx1-g54_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli2-tx1-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli3-tx1-amg54_firmware:*:*:*:*:*:*:*:* | up to 2.53 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli3-tx1-amg54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli3-tx1-g54_firmware:*:*:*:*:*:*:*:* | up to 2.53 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli3-tx1-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli-t1-b11_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli-t1-b11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wli-tx1-g54_firmware:*:*:*:*:*:*:*:* | up to 2.20 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wli-tx1-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wvr-g54-nf_firmware:*:*:*:*:*:*:*:* | up to 2.02 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wvr-g54-nf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-g108_firmware:*:*:*:*:*:*:*:* | up to 2.41 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-g108:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-g54_firmware:*:*:*:*:*:*:*:* | up to 2.41 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-hp-g54_firmware:*:*:*:*:*:*:*:* | up to 2.41 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-hp-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-rs-g54_firmware:*:*:*:*:*:*:*:* | up to 2.55 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-rs-g54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
| cpe:2.3:o:buffalo:wzr-rs-g54hp_firmware:*:*:*:*:*:*:*:* | up to 2.55 | Vulnerable | BUFFALO INC. |
| cpe:2.3:h:buffalo:wzr-rs-g54hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | BUFFALO INC. |
- cpe:2.3:o:buffalo:wbr-b11_firmware:*:*:*:*:*:*:*:* Versions up to 2.23 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wbr-b11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wbr-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.23 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wbr-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wbr-g54l_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wbr-g54l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr2-a54g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.25 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr2-a54g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr2-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.23 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr2-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr2-g54v_firmware:*:*:*:*:*:*:*:* Versions up to 2.55 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr2-g54v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr3-ag54_firmware:*:*:*:*:*:*:*:* Versions up to 2.23 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr3-ag54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.16 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:whr-g54-nf_firmware:*:*:*:*:*:*:*:* Versions up to 2.10 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:whr-g54-nf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wla2-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.24 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wla2-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wla2-g54c_firmware:*:*:*:*:*:*:*:* Versions up to 2.24 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wla2-g54c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wla-b11_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wla-b11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wla-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wla-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wla-g54c_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wla-g54c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wlah-a54g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.54 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wlah-a54g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wlah-am54g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.54 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wlah-am54g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wlah-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.54 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wlah-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli2-tx1-ag54_firmware:*:*:*:*:*:*:*:* Versions up to 2.53 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli2-tx1-ag54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli2-tx1-amg54_firmware:*:*:*:*:*:*:*:* Versions up to 2.53 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli2-tx1-amg54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli2-tx1-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli2-tx1-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli3-tx1-amg54_firmware:*:*:*:*:*:*:*:* Versions up to 2.53 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli3-tx1-amg54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli3-tx1-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.53 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli3-tx1-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli-t1-b11_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli-t1-b11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wli-tx1-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.20 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wli-tx1-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wvr-g54-nf_firmware:*:*:*:*:*:*:*:* Versions up to 2.02 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wvr-g54-nf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-g108_firmware:*:*:*:*:*:*:*:* Versions up to 2.41 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-g108:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.41 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-hp-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.41 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-hp-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-rs-g54_firmware:*:*:*:*:*:*:*:* Versions up to 2.55 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-rs-g54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
- cpe:2.3:o:buffalo:wzr-rs-g54hp_firmware:*:*:*:*:*:*:*:* Versions up to 2.55 Vulnerable ·BUFFALO INC.
- cpe:2.3:h:buffalo:wzr-rs-g54hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-20716
- 2026-10-03 Alias added: GHSA-76mj-jfgj-cfq9
References
Sources
- CVE-2021-20716 · CVE Program
- CVE-2021-20716 · NVD
- FIRST EPSS
- GHSA-76mj-jfgj-cfq9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences