CVE-2021-20730: Medium severity buffalo wsr-1166dhp4 vulnerability

Q: What is CVE-2021-20730?

CVE-2021-20730 is an improper access control vulnerability in the WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior, which allows an attacker to obtain configuration information.

Q: What is the severity of CVE-2021-20730?

The severity of CVE-2021-20730 is medium with a CVSS score of 4.3.

Q: How does CVE-2021-20730 affect Buffalo WSR-1166DHP3?

CVE-2021-20730 affects Buffalo WSR-1166DHP3 firmware versions up to and including 1.16.

Q: How does CVE-2021-20730 affect Buffalo WSR-1166DHP4?

CVE-2021-20730 affects Buffalo WSR-1166DHP4 firmware versions up to and including 1.02.

Q: How can I fix CVE-2021-20730?

To fix CVE-2021-20730, you should update the firmware of your Buffalo WSR-1166DHP3 or WSR-1166DHP4 router to a version that is not vulnerable.

Published Jun 9, 2021

Updated

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors.

Affected Software

4 affected components

Buffalo Wsr-1166dhp4 Firmware<=1.02

Buffalo Wsr-1166dhp4

Buffalo Wsr-1166dhp3 Firmware<=1.16

Buffalo Wsr-1166dhp3

Event History

Jun 9, 2021

CVE Published

via MITRE·01:05 AM

Data Sourced

via MITRE·01:05 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2021-20730?

CVE-2021-20730 is an improper access control vulnerability in the WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior, which allows an attacker to obtain configuration information.

What is the severity of CVE-2021-20730?

The severity of CVE-2021-20730 is medium with a CVSS score of 4.3.

How does CVE-2021-20730 affect Buffalo WSR-1166DHP3?