CyberSec.Space Logo
Back to CVE Browser

CVE-2021-20091

HIGH
8.8
CVSS Severity Score
EPSS Score0.0530%
EPSS Percentile10.85th
PublishedApr 29, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.

Affected Platforms (CPE)

💻
Buffalo

Wsr 2533dhpl2 Bk Firmware

<= 1.02
💻
Buffalo

Wsr 2533dhp3 Bk Firmware

<= 1.24

References & Advisories

🔗 https://www.tenable.com/security/research/tra-2021-13
🔗 https://www.tenable.com/security/research/tra-2021-13

Related Vulnerabilities

CVE-2021-200909.8

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware v...

CVE-2021-200927.5

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly res...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...