Buffalo Wsr-2533dhpl2-Bk Firmware vulnerabilities

3 CVEs affecting Buffalo Wsr-2533dhpl2-Bk Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20092, published 2021-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20090: Arcadyan Buffalo Firmware Path Traversal Vulnerability, published 2021-04-29. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 100% chance of exploitation in the next 30 days. A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass…
CVE-2021-20091, published 2021-04-29. High severity, CVSS 8.8. EPSS: 8.5% chance of exploitation in the next 30 days. The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage…
CVE-2021-20092, published 2021-04-29. High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days. The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor.