JVN#50505257: Multiple Buffalo routers vulnerable to cross-site request forgery

Multiple routers provided by Buffalo have a management screen that allows users to modify settings. These routers contain a cross-site request forgery vulnerability due to an issue in the management screen.

Impact

If a user views a malicious page while logged into the management screen, settings such as the login password may be altered.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

A wide range of products are affected. For more information, refer to the developer’s website.