Buffalo Wsr-1166dhp4 Firmware vulnerabilities

2 CVEs affecting Buffalo Wsr-1166dhp4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20731, published 2021-06-09.

More from Buffalo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-20731, published 2021-06-09. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.
• CVE-2021-20730, published 2021-06-09. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified…