CVE-2021-3511
Last modified
CVE-2021-3511 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors.. EPSS estimates a 0.51% chance of exploitation in the next 30 days.
Description
Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Buffalo | Bhr-4grv Firmware | < 2.00 |
| Buffalo | Dwr-Hp-G300nh Firmware | < 1.84 |
| Buffalo | Hw-450hp-Zwe Firmware | < 2.00 |
| Buffalo | Whr-300hp Firmware | < 2.00 |
| Buffalo | Whr-300 Firmware | < 2.00 |
| Buffalo | Whr-G301n Firmware | < 1.87 |
| Buffalo | Whr-Hp-G300n Firmware | < 2.00 |
| Buffalo | Whr-Hp-Gn Firmware | < 1.87 |
| Buffalo | Wpl-05g300 Firmware | < 1.88 |
| Buffalo | Wzr-450hp-Cwt Firmware | < 2.00 |
| Buffalo | Wzr-450hp-Ub Firmware | < 2.00 |
| Buffalo | Wzr-Hp-Ag300h Firmware | < 1.76 |
| Buffalo | Wzr-Hp-G300nh Firmware | < 1.84 |
| Buffalo | Wzr-Hp-G301nh Firmware | < 1.84 |
| Buffalo | Wzr-Hp-G302h Firmware | < 1.86 |
| Buffalo | Wzr-Hp-G450h Firmware | < 1.90 |
| Buffalo | Wzr-300hp Firmware | < 2.00 |
| Buffalo | Wzr-450hp Firmware | < 2.00 |
| Buffalo | Wzr-600dhp Firmware | < 2.00 |
| Buffalo | Wzr-D1100h Firmware | < 2.00 |
| Buffalo | Fs-Hp-G300n Firmware | < 3.33 |
| Buffalo | Fs-600dhp Firmware | < 3.40 |
| Buffalo | Fs-R600dhp Firmware | < 3.40 |
| Buffalo | Fs-G300n Firmware | < 3.14 |
References
- https://jvn.jp/en/vu/JVNVU99235714/index.htmlThird Party Advisory
- https://www.buffalo.jp/news/detail/20210427-01.htmlVendor Advisory
- https://jvn.jp/en/vu/JVNVU99235714/index.htmlThird Party Advisory
- https://www.buffalo.jp/news/detail/20210427-01.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-3511?
How severe is CVE-2021-3511?
How do I fix CVE-2021-3511?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-35103Possible out of bound write due to improper validation of nu…7.8
- CVE-2021-35104Possible buffer overflow due to improper parsing of headers …9.8
- CVE-2021-35105Possible out of bounds access due to improper input validati…7.8
- CVE-2021-35106Possible out of bound read due to improper length calculatio…7.8
- CVE-2021-35108Improper checking of AP-S lock bit while verifying the secur…6.8
- CVE-2021-35109Possible address manipulation from APP-NS while APP-S is con…6.8
- CVE-2021-35110Possible buffer overflow to improper validation of hash segm…8.8
- CVE-2021-35111Improper validation of tag id while RRC sending tag id to MA…5.9
- CVE-2021-35112A user with user level permission can access graphics protec…7.8
- CVE-2021-35113Possible authentication bypass due to improper order of sign…6.8
- CVE-2021-35114Improper buffer initialization on the backend driver can lea…7.8
- CVE-2021-35115Improper handling of multiple session supported by PVM backe…7.8
Are you affected by CVE-2021-3511?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST