CVE-2011-1324 Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2...
MediumCVSS 5.8
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| buffalotech bbr-4hg firmware | = 1.02 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.04 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.04-beta | No fix listed |
| buffalotech bbr-4hg firmware | = 1.10 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.10-beta | No fix listed |
| buffalotech bbr-4hg firmware | = 1.11-beta | No fix listed |
| buffalotech bbr-4hg firmware | = 1.12 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.20 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.20-beta | No fix listed |
| buffalotech bbr-4hg firmware | = 1.30 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.30-beta | No fix listed |
| buffalotech bbr-4hg firmware | = 1.31 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.32 | No fix listed |
| buffalotech bbr-4hg firmware | = 1.32-beta | No fix listed |
| buffalotech bbr-4hg firmware | = 1.33-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.00 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.01-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.03 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.04 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.04-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.10 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.10-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.11-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.12 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.20 | No fix listed |
Show 93 more
| Product | Affected versions | Fixed in |
|---|---|---|
| buffalotech bbr-4mg firmware | = 1.20-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.30 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.30-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.31 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.32 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.32-beta | No fix listed |
| buffalotech bbr-4mg firmware | = 1.33 | No fix listed |
| buffalotech bbr-4mg firmware | = 1.33-beta | No fix listed |
| buffalotech bhr-4rv firmware | = 2.31 | No fix listed |
| buffalotech bhr-4rv firmware | = 2.32-prebeta | No fix listed |
| buffalotech bhr-4rv firmware | = 2.33-prebeta | No fix listed |
| buffalotech bhr-4rv firmware | = 2.42 | No fix listed |
| buffalotech bhr-4rv firmware | = 2.46 | No fix listed |
| buffalotech bhr-4rv firmware | = 2.48 | No fix listed |
| buffalotech fs-g54 firmware | = 2.07 | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.00 | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.01-beta | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.02 | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.03 | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.10 | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.12 | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.12-beta | No fix listed |
| buffalotech wer-a54g54 firmware | = 1.13 | No fix listed |
| buffalotech wer-ag54 firmware | = 1.04 | No fix listed |
| buffalotech wer-ag54 firmware | = 1.12 | No fix listed |
| buffalotech wer-ag54 firmware | = 1.12-beta | No fix listed |
| buffalotech wer-am54g54 firmware | = 1.11 | No fix listed |
| buffalotech wer-am54g54 firmware | = 1.12 | No fix listed |
| buffalotech wer-am54g54 firmware | = 1.12-beta | No fix listed |
| buffalotech wer-am54g54 firmware | = 1.13 | No fix listed |
| buffalotech wer-am54g54 firmware | = 1.14 | No fix listed |
| buffalotech wer-amg54 firmware | = 1.11 | No fix listed |
| buffalotech wer-amg54 firmware | = 1.12 | No fix listed |
| buffalotech wer-amg54 firmware | = 1.14 | No fix listed |
| buffalotech whr-am54g54 firmware | = 1.30 | No fix listed |
| buffalotech whr-am54g54 firmware | = 1.38 | No fix listed |
| buffalotech whr-am54g54 firmware | = 1.40 | No fix listed |
| buffalotech whr-am54g54 firmware | = 1.42 | No fix listed |
| buffalotech whr-amg54 firmware | = 1.31 | No fix listed |
| buffalotech whr-amg54 firmware | = 1.38 | No fix listed |
| buffalotech whr-amg54 firmware | = 1.40 | No fix listed |
| buffalotech whr-amg54 firmware | = 1.42 | No fix listed |
| buffalotech whr-ampg firmware | = 1.46 | No fix listed |
| buffalotech whr-g firmware | = 1.46 | No fix listed |
| buffalotech whr-g54s firmware | = 1.20 | No fix listed |
| buffalotech whr-g54s firmware | = 1.21 | No fix listed |
| buffalotech whr-g54s firmware | = 1.23 | No fix listed |
| buffalotech whr-g54s firmware | = 1.38 | No fix listed |
| buffalotech whr-g54s firmware | = 1.40 | No fix listed |
| buffalotech whr-g54s firmware | = 1.42 | No fix listed |
| buffalotech whr-hp-ampg firmware | = 1.32 | No fix listed |
| buffalotech whr-hp-g firmware | = 1.46 | No fix listed |
| buffalotech whr-hp-g54 firmware | = 1.20 | No fix listed |
| buffalotech whr-hp-g54 firmware | = 1.21 | No fix listed |
| buffalotech whr-hp-g54 firmware | = 1.23 | No fix listed |
| buffalotech whr-hp-g54 firmware | = 1.38 | No fix listed |
| buffalotech whr-hp-g54 firmware | = 1.40 | No fix listed |
| buffalotech whr-hp-g54 firmware | = 1.42 | No fix listed |
| buffalotech wzr-ampg144nh firmware | = 1.47 | No fix listed |
| buffalotech wzr-ampg144nh firmware | = 1.48-beta | No fix listed |
| buffalotech wzr-ampg300nh firmware | = 1.48 | No fix listed |
| buffalotech wzr-g144n firmware | = 1.45 | No fix listed |
| buffalotech wzr-g144n firmware | = 1.46-beta | No fix listed |
| buffalotech wzr-g144n firmware | = 1.47 | No fix listed |
| buffalotech wzr-g144n firmware | = 1.47-beta | No fix listed |
| buffalotech wzr-g144nh firmware | = 1.45 | No fix listed |
| buffalotech wzr-g144nh firmware | = 1.47 | No fix listed |
| buffalotech wzr-g144nh firmware | = 1.47-beta | No fix listed |
| buffalotech wzr-g144nh firmware | = 1.48 | No fix listed |
| buffalotech wzr2-g300n firmware | = 1.48 | No fix listed |
| buffalotech wzr2-g300n firmware | = 1.50-beta | No fix listed |
| buffalotech as-100 | All versions | No fix listed |
| buffalotech bbr-4hg | All versions | No fix listed |
| buffalotech bbr-4mg | All versions | No fix listed |
| buffalotech bhr-4rv | All versions | No fix listed |
| buffalotech fs-g54 | All versions | No fix listed |
| buffalotech wer-a54g54 | All versions | No fix listed |
| buffalotech wer-ag54 | All versions | No fix listed |
| buffalotech wer-am54g54 | All versions | No fix listed |
| buffalotech wer-amg54 | All versions | No fix listed |
| buffalotech whr-am54g54 | All versions | No fix listed |
| buffalotech whr-amg54 | All versions | No fix listed |
| buffalotech whr-ampg | All versions | No fix listed |
| buffalotech whr-g | All versions | No fix listed |
| buffalotech whr-g54s | All versions | No fix listed |
| buffalotech whr-hp-ampg | All versions | No fix listed |
| buffalotech whr-hp-g | All versions | No fix listed |
| buffalotech whr-hp-g54 | All versions | No fix listed |
| buffalotech wzr-ampg144nh | All versions | No fix listed |
| buffalotech wzr-ampg300nh | All versions | No fix listed |
| buffalotech wzr-g144n | All versions | No fix listed |
| buffalotech wzr-g144nh | All versions | No fix listed |
| buffalotech wzr2-g300n | All versions | No fix listed |
References
- buffalo.jp
- JVN#50505257 third-party-advisory