Skip to content
Fencer Vulns
medium 4.3

CVE-2021-3511 json

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prio…

published 2021-04-28 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-26830

cvss
4.3
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 43%
public exploits
0
none known

Summary

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors.

Patch / fix

  • buffalo bhr-4grv_firmware 2.00
  • buffalo dwr-hp-g300nh_firmware 1.84
  • buffalo hw-450hp-zwe_firmware 2.00
  • buffalo whr-300hp_firmware 2.00
  • buffalo whr-300_firmware 2.00
  • buffalo whr-g301n_firmware 1.87
  • buffalo whr-hp-g300n_firmware 2.00
  • buffalo whr-hp-gn_firmware 1.87
  • buffalo wpl-05g300_firmware 1.88
  • buffalo wzr-450hp-cwt_firmware 2.00
  • buffalo wzr-450hp-ub_firmware 2.00
  • buffalo wzr-hp-ag300h_firmware 1.76
  • buffalo wzr-hp-g300nh_firmware 1.84
  • buffalo wzr-hp-g301nh_firmware 1.84
  • buffalo wzr-hp-g302h_firmware 1.86
  • buffalo wzr-hp-g450h_firmware 1.90
  • buffalo wzr-300hp_firmware 2.00
  • buffalo wzr-450hp_firmware 2.00
  • buffalo wzr-600dhp_firmware 2.00
  • buffalo wzr-d1100h_firmware 2.00

Exploit prediction

0.51% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 3.3 AV:A/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • BUFFALO INC. Buffalo broadband routers

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.