1. Home
  2. CVE Database
  3. CVE-2021-20716
CRITICAL · 9.8

CVE-2021-20716

Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and ...

Vulnerability Description

Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BuffaloBhr-4Rv Firmware<= 2.55
BuffaloBhr-4Rv-
BuffaloFs-G54 Firmware<= 2.04
BuffaloFs-G54-
BuffaloWbr2-B11 Firmware<= 2.32
BuffaloWbr2-B11-
BuffaloWbr2-G54 Firmware<= 2.32
BuffaloWbr2-G54-
BuffaloWbr2-G54-Kd Firmware<= 2.32
BuffaloWbr2-G54-Kd-
BuffaloWbr-B11 Firmware<= 2.23
BuffaloWbr-B11-
BuffaloWbr-G54 Firmware<= 2.23
BuffaloWbr-G54-
BuffaloWbr-G54L Firmware<= 2.20
BuffaloWbr-G54L-
BuffaloWhr2-A54G54 Firmware<= 2.25
BuffaloWhr2-A54G54-
BuffaloWhr2-G54 Firmware<= 2.23
BuffaloWhr2-G54-

References

FAQ

What is CVE-2021-20716?

CVE-2021-20716 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and ...

How severe is CVE-2021-20716?

CVE-2021-20716 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-20716?

Check the references section above for vendor advisories and patch information. Affected products include: Buffalo Bhr-4Rv Firmware, Buffalo Bhr-4Rv, Buffalo Fs-G54 Firmware, Buffalo Fs-G54, Buffalo Wbr2-B11 Firmware.