返回 CVE 浏览器

CVE-2021-20090

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score34.4260%

EPSS Percentile96.30th

Published2021-04-29

Last Modified2025-11-03

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.

Affected Platforms (CPE)

💻

Buffalo

Wsr 2533dhpl2 Bk Firmware

<= 1.02

💻

Buffalo

Wsr 2533dhp3 Bk Firmware

<= 1.24

References & Advisories

🔗 https://www.kb.cert.org/vuls/id/914124

🔗 https://www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/

🔗 https://www.tenable.com/security/research/tra-2021-13

🔗 https://www.kb.cert.org/vuls/id/914124

🔗 https://www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/

🔗 https://www.tenable.com/security/research/tra-2021-13

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20090

相关漏洞威胁

CVE-2026-167718.8

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-b...

CVE-2026-120015.2

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6...

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...