CVE-2021-20716
Description
Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| buffalo bhr-4rv_firmware | v ≤ 2.55 | — |
| buffalo fs-g54_firmware | v ≤ 2.04 | — |
| buffalo wbr2-b11_firmware | v ≤ 2.32 | — |
| buffalo wbr2-g54_firmware | v ≤ 2.32 | — |
| buffalo wbr2-g54-kd_firmware | v ≤ 2.32 | — |
| buffalo wbr-b11_firmware | v ≤ 2.23 | — |
| buffalo wbr-g54_firmware | v ≤ 2.23 | — |
| buffalo wbr-g54l_firmware | v ≤ 2.20 | — |
| buffalo whr2-a54g54_firmware | v ≤ 2.25 | — |
| buffalo whr2-g54_firmware | v ≤ 2.23 | — |
| buffalo whr2-g54v_firmware | v ≤ 2.55 | — |
| buffalo whr3-ag54_firmware | v ≤ 2.23 | — |
| buffalo whr-g54_firmware | v ≤ 2.16 | — |
| buffalo whr-g54-nf_firmware | v ≤ 2.10 | — |
| buffalo wla2-g54_firmware | v ≤ 2.24 | — |
| buffalo wla2-g54c_firmware | v ≤ 2.24 | — |
| buffalo wla-b11_firmware | v ≤ 2.20 | — |
| buffalo wla-g54_firmware | v ≤ 2.20 | — |
| buffalo wla-g54c_firmware | v ≤ 2.20 | — |
| buffalo wlah-a54g54_firmware | v ≤ 2.54 | — |
| buffalo wlah-am54g54_firmware | v ≤ 2.54 | — |
| buffalo wlah-g54_firmware | v ≤ 2.54 | — |
| buffalo wli2-tx1-ag54_firmware | v ≤ 2.53 | — |
| buffalo wli2-tx1-amg54_firmware | v ≤ 2.53 | — |
| buffalo wli2-tx1-g54_firmware | v ≤ 2.20 | — |
| buffalo wli3-tx1-amg54_firmware | v ≤ 2.53 | — |
| buffalo wli3-tx1-g54_firmware | v ≤ 2.53 | — |
| buffalo wli-t1-b11_firmware | v ≤ 2.20 | — |
| buffalo wli-tx1-g54_firmware | v ≤ 2.20 | — |
| buffalo wvr-g54-nf_firmware | v ≤ 2.02 | — |
| buffalo wzr-g108_firmware | v ≤ 2.41 | — |
| buffalo wzr-g54_firmware | v ≤ 2.41 | — |
| buffalo wzr-hp-g54_firmware | v ≤ 2.41 | — |
| buffalo wzr-rs-g54_firmware | v ≤ 2.55 | — |
| buffalo wzr-rs-g54hp_firmware | v ≤ 2.55 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.