Lucene search
China National Vulnerability DatabaseCNVD-2021-56801HistoryApr 28, 2021 - 12:00 a.m.
Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to path traversal
2021-04-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
0.975 High
EPSS
Percentile
100.0%
The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 suffer from a path traversal vulnerability, which stems from an input validation error when the web interface handles directory traversal sequences, and can be exploited by attackers to bypass authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| buffalo buffalo wsr-2533dhpl2 | le | 1.02 | |
| buffalo buffalo wsr-2533dhp3 | le | 1.24 |
Related
cisa_kev
cisa_kev
Arcadyan Buffalo Firmware Path Traversal Vulnerability
2021-11-03 00:00:00
attackerkb
attackerkb
prion
prion
Path traversal
2021-04-29 15:15:00
Command injection
2021-10-11 17:15:00
Design/Logic Flaw
2021-09-01 12:15:00
nuclei
nuclei
Buffalo WSR-2533DHPL2 - Path Traversal
2021-08-10 16:51:46
Buffalo WSR-2533DHPL2 - Configuration File Injection
2021-08-11 12:28:20
Buffalo WSR-2533DHPL2 - Improper Access Control
2021-08-11 12:58:37
nvd
nvd
openvas
openvas
Arcadyan Directory Traversal Vulnerability (Apr 2021) - Active Check
2021-08-10 00:00:00
nessus
nessus
Buffalo Router Path Traversal (CVE-2021-20090)
2021-11-09 00:00:00
Buffalo Routers Multiple Vulnerabilities (TRA-2021-13)
2021-08-04 00:00:00
cvelist
cvelist
cve
cve
checkpoint_advisories
checkpoint_advisories
Buffalo Routers Directory Traversal (CVE-2021-20090; CVE-2021-20091)
2021-08-23 00:00:00
cert
cert
Arcadyan-based routers and modems vulnerable to authentication bypass
2021-07-20 00:00:00
malwarebytes
malwarebytes
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
seebug
seebug
Buffalo和Arcadyan多款路由器认证绕过RCE等多个漏洞
2021-08-11 00:00:00
thn
thn
threatpost
threatpost
Auth Bypass Bug Exploited, Millions of Routers Affected
2021-08-09 19:41:30
qualysblog
qualysblog
avleonov
avleonov
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
ics
ics