CVE-2011-1324: Buffalotech As-100

Medium severity, CVSS 5.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

Affected products

  • Buffalotech As-100: any version
  • Buffalotech Bbr-4hg: any version
  • Buffalotech Bbr-4hg Firmware: version 1.02 only; version 1.04 only; version 1.10 only; version 1.11 only; version 1.12 only; version 1.20 only; …
  • Buffalotech Bbr-4mg: any version
  • Buffalotech Bbr-4mg Firmware: version 1.00 only; version 1.01 only; version 1.03 only; version 1.04 only; version 1.10 only; version 1.11 only; …
  • Buffalotech Bhr-4rv: any version
  • Buffalotech Bhr-4rv Firmware: version 2.31 only; version 2.32 only; version 2.33 only; version 2.42 only; version 2.46 only; version 2.48 only
  • Buffalotech Fs-g54: any version
  • Buffalotech Fs-g54 Firmware: version 2.07 only
  • Buffalotech Wer-a54g54: any version
  • Buffalotech Wer-a54g54 Firmware: version 1.00 only; version 1.01 only; version 1.02 only; version 1.03 only; version 1.10 only; version 1.12 only; …
  • Buffalotech Wer-AG54: any version
  • Buffalotech Wer-AG54 Firmware: version 1.04 only; version 1.12 only
  • Buffalotech Wer-AM54G54: any version
  • Buffalotech Wer-AM54G54 Firmware: version 1.11 only; version 1.12 only; version 1.13 only; version 1.14 only
  • Buffalotech Wer-AMG54: any version
  • Buffalotech Wer-AMG54 Firmware: version 1.11 only; version 1.12 only; version 1.14 only
  • Buffalotech Whr-AM54G54: any version
  • Buffalotech Whr-AM54G54 Firmware: version 1.30 only; version 1.38 only; version 1.40 only; version 1.42 only
  • Buffalotech Whr-AMG54: any version
  • Buffalotech Whr-AMG54 Firmware: version 1.31 only; version 1.38 only; version 1.40 only; version 1.42 only
  • Buffalotech Whr-Ampg: any version
  • Buffalotech Whr-Ampg Firmware: version 1.46 only
  • Buffalotech Whr-G: any version
  • Buffalotech Whr-g54s: any version
  • and 18 more

Published 2011-05-09. Last modified 2026-06-16.