[Japanese]

JVNDB-2021-001575

Multiple vulnerabilities in Buffalo WSR-1166DHP3 and WSR-1166DHP4 routers

Overview

Buffalo WSR-1166DHP3 and WSR-1166DHP4 routers provided by Buffalo Inc. contain multiple vulnerabilities listed below.

* Improper access control (CWE-284) - CVE-2021-20730
* OS command injection (CWE-78) - CVE-2021-20731

Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC.
JPCERT/CC coordinated with the developer.
CVSS Severity (What is CVSS?)

CVSS V3 Severity:
Base Metrics 5.4 (Medium) [IPA Score]
  • Attack Vector: Adjacent Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: Low
  • Integrity Impact: None
  • Availability Impact: Low
CVSS V2 Severity:
Base Metrics 8.3 (High) [NVD Score]
  • Access Vector: Adjacent Network
  • Access Complexity: Low
  • Authentication: None
  • Confidentiality Impact: Complete
  • Integrity Impact: Complete
  • Availability Impact: Complete
The above CVSS base scores have been assigned for CVE-2021-20731

CVSS V3 Severity:
Base Metrics: 4.3 (Medium) [IPA Score]
  • Attack Vector: Adjacent
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: Low
  • Integrity Impact: None
  • Availability Impact: None
The above CVSS base scores have been assigned for CVE-2021-20730
Affected Products


BUFFALO INC.
  • WSR-1166DHP3 firmware Ver.1.16 and prior
  • WSR-1166DHP4 firmware Ver.1.02 and prior

Impact

* An unauthenticated network-adjacent attacker can obtain configuration information. - CVE-2021-20730
* An unauthenticated network-adjacent attacker can execute multiple OS commands with root privileges. - CVE-2021-20731
Solution

[Update firmware]
Apply the appropriate firimware update according to the information provided by the developer.
The developer has released fixed versions listed below.

* WSR-1166DHP3 firmware Ver.1.17
* WSR-1166DHP4 firmware Ver.1.03
Vendor Information

BUFFALO INC.
CWE (What is CWE?)

  1. Improper Access Control(CWE-284) [IPA Evaluation]
  2. OS Command Injection(CWE-78) [IPA Evaluation]
CVE (What is CVE?)

  1. CVE-2021-20730
  2. CVE-2021-20731
References

  1. JVN : JVNVU#92862829
  2. National Vulnerability Database (NVD) : CVE-2021-20730
  3. National Vulnerability Database (NVD) : CVE-2021-20731
Revision History

  • [2021/06/01]
      Web page was published

Date Public2021/05/31
Date First Published2021/06/01
Date Last Updated2021/06/01