High severity · published Apr 28, 2021
CVE-2021-3512
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99…
8.8
CVSS
0.9%
EPSS
No
On KEV
Description
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bhr-4grv Firmware · Buffalo
before 2.00 · source: NVD
DF
Dwr-hp-g300nh Firmware · Buffalo
before 1.84 · source: NVD
FF
Fs-600dhp Firmware · Buffalo
before 3.40 · source: NVD
FF
Fs-g300n Firmware · Buffalo
before 3.14 · source: NVD
FF
Fs-hp-g300n Firmware · Buffalo
before 3.33 · source: NVD
FF
Fs-r600dhp Firmware · Buffalo
before 3.40 · source: NVD
HF
Hw-450hp-zwe Firmware · Buffalo
before 2.00 · source: NVD
WF
Whr-300 Firmware · Buffalo
before 2.00 · source: NVD
WF
Whr-300hp Firmware · Buffalo
before 2.00 · source: NVD
WF
Whr-g301n Firmware · Buffalo
before 1.87 · source: NVD
WF
Whr-hp-g300n Firmware · Buffalo
before 2.00 · source: NVD
WF
Whr-hp-gn Firmware · Buffalo
before 1.87 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3512
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3512
Third Party Advisory
https://jvn.jp/en/vu/JVNVU99235714/index.html
Vendor Advisory
https://www.buffalo.jp/news/detail/20210427-01.html
More from Bhr-4grv Firmware
8.8
CVE-2022-40966
Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device
6.8
CVE-2022-39044
Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command
6.5
CVE-2016-4816
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified…
4.3
CVE-2021-3511
Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and…