#VU52638 Improper access control in WSR-2533DHPL2 and WSR-2533DHP3 - CVE-2021-20092

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU52638

#VU52638 Improper access control in WSR-2533DHPL2 and WSR-2533DHP3 - CVE-2021-20092

Published: April 27, 2021


Vulnerability identifier: #VU52638
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-20092
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
WSR-2533DHPL2
WSR-2533DHP3
Software vendor:
BUFFALO INC.

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the web interfaces. A remote attacker can bypass implemented security restrictions and gain unauthorized access to sensitive information on the system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links