CVE-2011-1324
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to…
Does this matter?
Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
- EPSS
- 0.47% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- buffalotech/bbr-4hg firmware · buffalotech/bbr-4mg firmware · buffalotech/bhr-4rv firmware · buffalotech/fs-g54 firmware · buffalotech/wer-a54g54 firmware · buffalotech/wer-ag54 firmware · buffalotech/wer-am54g54 firmware · buffalotech/wer-amg54 firmware · buffalotech/whr-am54g54 firmware · buffalotech/whr-amg54 firmware · buffalotech/whr-ampg firmware · buffalotech/whr-g firmware · buffalotech/whr-g54s firmware · buffalotech/whr-hp-ampg firmware · buffalotech/whr-hp-g firmware · buffalotech/whr-hp-g54 firmware · buffalotech/wzr-ampg144nh firmware · buffalotech/wzr-ampg300nh firmware · buffalotech/wzr-g144n firmware · buffalotech/wzr-g144nh firmware · +23 more
- Source
- vultures@jpcert.or.jp
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.