CVE-2011-1324
Medium
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
SeverityMedium
CVSS5.8
Exploit probability—
ProductBuffalotech Bhr-4rv Firmware
PublishedMay 9, 2011
First seenMay 9, 2011
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| buffalotech bhr-4rv_firmware | 2.31, 2.32, 2.33, 2.42, 2.46, 2.48 | — |
| buffalotech bbr-4hg_firmware | 1.02, 1.04, 1.10, 1.11, 1.12, 1.20, 1.30, 1.31, 1.32, 1.33 | — |
| buffalotech bbr-4mg_firmware | 1.00, 1.01, 1.03, 1.04, 1.10, 1.11, 1.12, 1.20, 1.30, 1.31, 1.32, 1.33 | — |
| buffalotech fs-g54_firmware | 2.07 | — |
| buffalotech wer-a54g54_firmware | 1.00, 1.01, 1.02, 1.03, 1.10, 1.12, 1.13 | — |
| buffalotech wer-ag54_firmware | 1.04, 1.12 | — |
| buffalotech wer-am54g54_firmware | 1.11, 1.12, 1.13, 1.14 | — |
| buffalotech wer-amg54_firmware | 1.11, 1.12, 1.14 | — |
| buffalotech whr-am54g54_firmware | 1.30, 1.38, 1.40, 1.42 | — |
| buffalotech whr-amg54_firmware | 1.31, 1.38, 1.40, 1.42 | — |
| buffalotech whr-ampg_firmware | 1.46 | — |
| buffalotech whr-g_firmware | 1.46 | — |
| buffalotech whr-g54s_firmware | 1.20, 1.21, 1.23, 1.38, 1.40, 1.42 | — |
| buffalotech whr-hp-ampg_firmware | 1.32 | — |
| buffalotech whr-hp-g_firmware | 1.46 | — |
| buffalotech whr-hp-g54_firmware | 1.20, 1.21, 1.23, 1.38, 1.40, 1.42 | — |
| buffalotech wzr-ampg144nh_firmware | 1.47, 1.48 | — |
| buffalotech wzr-ampg300nh_firmware | 1.48 | — |
| buffalotech wzr-g144n_firmware | 1.45, 1.46, 1.47 | — |
| buffalotech wzr-g144nh_firmware | 1.45, 1.47, 1.48 | — |
| buffalotech wzr2-g300n_firmware | 1.48, 1.50 | — |
| buffalotech as-100 | No range specified | — |
| buffalotech bbr-4hg | No range specified | — |
| buffalotech bbr-4mg | No range specified | — |
| buffalotech bhr-4rv | No range specified | — |
| buffalotech fs-g54 | No range specified | — |
| buffalotech wer-a54g54 | No range specified | — |
| buffalotech wer-ag54 | No range specified | — |
| buffalotech wer-am54g54 | No range specified | — |
| buffalotech wer-amg54 | No range specified | — |
| buffalotech whr-am54g54 | No range specified | — |
| buffalotech whr-amg54 | No range specified | — |
| buffalotech whr-ampg | No range specified | — |
| buffalotech whr-g | No range specified | — |
| buffalotech whr-g54s | No range specified | — |
| buffalotech whr-hp-ampg | No range specified | — |
| buffalotech whr-hp-g | No range specified | — |
| buffalotech whr-hp-g54 | No range specified | — |
| buffalotech wzr-ampg144nh | No range specified | — |
| buffalotech wzr-ampg300nh | No range specified | — |
| buffalotech wzr-g144n | No range specified | — |
| buffalotech wzr-g144nh | No range specified | — |
| buffalotech wzr2-g300n | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.