5.8

CVE-2011-1324

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Buffalotech ≫ Bbr-4hg Firmware Version 1.02
Buffalotech ≫ Bbr-4hg Firmware Version 1.04
Buffalotech ≫ Bbr-4hg Firmware Version 1.04 Update beta
Buffalotech ≫ Bbr-4hg Firmware Version 1.10
Buffalotech ≫ Bbr-4hg Firmware Version 1.10 Update beta
Buffalotech ≫ Bbr-4hg Firmware Version 1.11 Update beta
Buffalotech ≫ Bbr-4hg Firmware Version 1.12
Buffalotech ≫ Bbr-4hg Firmware Version 1.20
Buffalotech ≫ Bbr-4hg Firmware Version 1.20 Update beta
Buffalotech ≫ Bbr-4hg Firmware Version 1.30
Buffalotech ≫ Bbr-4hg Firmware Version 1.30 Update beta
Buffalotech ≫ Bbr-4hg Firmware Version 1.31
Buffalotech ≫ Bbr-4hg Firmware Version 1.32
Buffalotech ≫ Bbr-4hg Firmware Version 1.32 Update beta
Buffalotech ≫ Bbr-4hg Firmware Version 1.33 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.00
Buffalotech ≫ Bbr-4mg Firmware Version 1.01 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.03
Buffalotech ≫ Bbr-4mg Firmware Version 1.04
Buffalotech ≫ Bbr-4mg Firmware Version 1.04 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.10
Buffalotech ≫ Bbr-4mg Firmware Version 1.10 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.11 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.12
Buffalotech ≫ Bbr-4mg Firmware Version 1.20
Buffalotech ≫ Bbr-4mg Firmware Version 1.20 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.30
Buffalotech ≫ Bbr-4mg Firmware Version 1.30 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.31
Buffalotech ≫ Bbr-4mg Firmware Version 1.32
Buffalotech ≫ Bbr-4mg Firmware Version 1.32 Update beta
Buffalotech ≫ Bbr-4mg Firmware Version 1.33
Buffalotech ≫ Bbr-4mg Firmware Version 1.33 Update beta
Buffalotech ≫ Bhr-4rv Firmware Version 2.31
Buffalotech ≫ Bhr-4rv Firmware Version 2.32 Update prebeta
Buffalotech ≫ Bhr-4rv Firmware Version 2.33 Update prebeta
Buffalotech ≫ Bhr-4rv Firmware Version 2.42
Buffalotech ≫ Bhr-4rv Firmware Version 2.46
Buffalotech ≫ Bhr-4rv Firmware Version 2.48
Buffalotech ≫ Fs-g54 Firmware Version 2.07
Buffalotech ≫ Wer-a54g54 Firmware Version 1.00
Buffalotech ≫ Wer-a54g54 Firmware Version 1.01 Update beta
Buffalotech ≫ Wer-a54g54 Firmware Version 1.02
Buffalotech ≫ Wer-a54g54 Firmware Version 1.03
Buffalotech ≫ Wer-a54g54 Firmware Version 1.10
Buffalotech ≫ Wer-a54g54 Firmware Version 1.12
Buffalotech ≫ Wer-a54g54 Firmware Version 1.12 Update beta
Buffalotech ≫ Wer-a54g54 Firmware Version 1.13
Buffalotech ≫ Wer-ag54 Firmware Version 1.04
Buffalotech ≫ Wer-ag54 Firmware Version 1.12
Buffalotech ≫ Wer-ag54 Firmware Version 1.12 Update beta
Buffalotech ≫ Wer-am54g54 Firmware Version 1.12 Update beta
Buffalotech ≫ Wer-amg54 Firmware Version 1.11
Buffalotech ≫ Wer-amg54 Firmware Version 1.12
Buffalotech ≫ Wer-amg54 Firmware Version 1.14
Buffalotech ≫ Whr-amg54 Firmware Version 1.31
Buffalotech ≫ Whr-amg54 Firmware Version 1.38
Buffalotech ≫ Whr-amg54 Firmware Version 1.40
Buffalotech ≫ Whr-amg54 Firmware Version 1.42
Buffalotech ≫ Whr-ampg Firmware Version 1.46
Buffalotech ≫ Whr-g Firmware Version 1.46
Buffalotech ≫ Whr-g54s Firmware Version 1.20
Buffalotech ≫ Whr-g54s Firmware Version 1.21
Buffalotech ≫ Whr-g54s Firmware Version 1.23
Buffalotech ≫ Whr-g54s Firmware Version 1.38
Buffalotech ≫ Whr-g54s Firmware Version 1.40
Buffalotech ≫ Whr-g54s Firmware Version 1.42
Buffalotech ≫ Whr-hp-g Firmware Version 1.46
Buffalotech ≫ Whr-hp-g54 Firmware Version 1.20
Buffalotech ≫ Whr-hp-g54 Firmware Version 1.21
Buffalotech ≫ Whr-hp-g54 Firmware Version 1.23
Buffalotech ≫ Whr-hp-g54 Firmware Version 1.38
Buffalotech ≫ Whr-hp-g54 Firmware Version 1.40
Buffalotech ≫ Whr-hp-g54 Firmware Version 1.42
Buffalotech ≫ Wzr-ampg144nh Firmware Version 1.48 Update beta
Buffalotech ≫ Wzr-g144n Firmware Version 1.45
Buffalotech ≫ Wzr-g144n Firmware Version 1.46 Update beta
Buffalotech ≫ Wzr-g144n Firmware Version 1.47
Buffalotech ≫ Wzr-g144n Firmware Version 1.47 Update beta
Buffalotech ≫ Wzr-g144nh Firmware Version 1.45
Buffalotech ≫ Wzr-g144nh Firmware Version 1.47
Buffalotech ≫ Wzr-g144nh Firmware Version 1.47 Update beta
Buffalotech ≫ Wzr-g144nh Firmware Version 1.48
Buffalotech ≫ Wzr2-g300n Firmware Version 1.48
Buffalotech ≫ Wzr2-g300n Firmware Version 1.50 Update beta
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.373
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:N/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://buffalo.jp/support_s/20080808/csrf.html
http://jvn.jp/en/jp/JVN50505257/index.html