CVE-2021-3512 - Vulnerability Details

Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00245.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

BUFFALO INC.

Buffalo broadband routers

affected

Version	Status	Constraints
BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:bhr-4grv:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:dwr-hp-g300nh:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:hw-450hp-zwe:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:whr-300hp:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:whr-300:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:buffalo:whr-g301n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:whr-g301n:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:whr-hp-g300n:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:buffalo:whr-hp-gn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:whr-hp-gn:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wpl-05g300:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-450hp-cwt:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-450hp-ub:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-hp-ag300h:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-hp-g300nh:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-hp-g301nh:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-hp-g302h:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-hp-g450h:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-300hp:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-450hp:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:buffalo:wzr-600dhp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:wzr-d1100h:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:buffalo:fs-hp-g300n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:fs-hp-g300n:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:fs-600dhp:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:buffalo:fs-r600dhp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:fs-r600dhp:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:buffalo:fs-g300n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:buffalo:fs-g300n:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Buffalo Subscribe	Bhr-4grv Subscribe Bhr-4grv Firmware Subscribe Dwr-hp-g300nh Subscribe Dwr-hp-g300nh Firmware Subscribe Fs-600dhp Subscribe Fs-600dhp Firmware Subscribe Fs-g300n Subscribe Fs-g300n Firmware Subscribe Fs-hp-g300n Subscribe Fs-hp-g300n Firmware Subscribe Fs-r600dhp Subscribe Fs-r600dhp Firmware Subscribe Hw-450hp-zwe Subscribe Hw-450hp-zwe Firmware Subscribe Whr-300 Subscribe Whr-300 Firmware Subscribe Whr-300hp Subscribe Whr-300hp Firmware Subscribe Whr-g301n Subscribe Whr-g301n Firmware Subscribe Whr-hp-g300n Subscribe Whr-hp-g300n Firmware Subscribe Whr-hp-gn Subscribe Whr-hp-gn Firmware Subscribe Wpl-05g300 Subscribe Wpl-05g300 Firmware Subscribe Wzr-300hp Subscribe Wzr-300hp Firmware Subscribe Wzr-450hp Subscribe Wzr-450hp-cwt Subscribe Wzr-450hp-cwt Firmware Subscribe Wzr-450hp-ub Subscribe Wzr-450hp-ub Firmware Subscribe Wzr-450hp Firmware Subscribe Wzr-600dhp Subscribe Wzr-600dhp Firmware Subscribe Wzr-d1100h Subscribe Wzr-d1100h Firmware Subscribe Wzr-hp-ag300h Subscribe Wzr-hp-ag300h Firmware Subscribe Wzr-hp-g300nh Subscribe Wzr-hp-g300nh Firmware Subscribe Wzr-hp-g301nh Subscribe Wzr-hp-g301nh Firmware Subscribe Wzr-hp-g302h Subscribe Wzr-hp-g302h Firmware Subscribe Wzr-hp-g450h Subscribe Wzr-hp-g450h Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2021-26831	Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU99235714/index.html
https://www.buffalo.jp/news/detail/20210427-01.html

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2021-04-28T00:45:27

Updated: 2024-08-03T16:53:17.975Z

Reserved: 2021-04-22T00:00:00

Link: CVE-2021-3512

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-04-28T01:15:17.187

Modified: 2024-11-21T06:21:43.343

Link: CVE-2021-3512

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-Other

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object