medium5.8
CVE-2011-1324
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; B…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Buffalotech | Bbr-4hg Firmware | Versions 1.02, 1.04, 1.10, 1.11, 1.12, 1.20 |
| Buffalotech | Bbr-4mg Firmware | Versions 1.00, 1.01, 1.03, 1.04, 1.10, 1.11 |
| Buffalotech | Bhr-4rv Firmware | Versions 2.31, 2.32, 2.33, 2.42, 2.46, 2.48 |
| Buffalotech | Fs-G54 Firmware | Version 2.07 |
| Buffalotech | Wer-A54g54 Firmware | Versions 1.00, 1.01, 1.02, 1.03, 1.10, 1.12 |
| Buffalotech | Wer-Ag54 Firmware | Versions 1.04, 1.12 |
| Buffalotech | Wer-Am54g54 Firmware | Versions 1.11, 1.12, 1.13, 1.14 |
| Buffalotech | Wer-Amg54 Firmware | Versions 1.11, 1.12, 1.14 |
| Buffalotech | Whr-Am54g54 Firmware | Versions 1.30, 1.38, 1.40, 1.42 |
| Buffalotech | Whr-Amg54 Firmware | Versions 1.31, 1.38, 1.40, 1.42 |
| Buffalotech | Whr-Ampg Firmware | Version 1.46 |
| Buffalotech | Whr-G Firmware | Version 1.46 |