CVE-2021-3512 json
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 a…
published 2021-04-28 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-26831
- cvss
- 8.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 58%
- public exploits
- 0
- none known
Summary
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors.
Patch / fix
- buffalo bhr-4grv_firmware 2.00
- buffalo dwr-hp-g300nh_firmware 1.84
- buffalo hw-450hp-zwe_firmware 2.00
- buffalo whr-300hp_firmware 2.00
- buffalo whr-300_firmware 2.00
- buffalo whr-g301n_firmware 1.87
- buffalo whr-hp-g300n_firmware 2.00
- buffalo whr-hp-gn_firmware 1.87
- buffalo wpl-05g300_firmware 1.88
- buffalo wzr-450hp-cwt_firmware 2.00
- buffalo wzr-450hp-ub_firmware 2.00
- buffalo wzr-hp-ag300h_firmware 1.76
- buffalo wzr-hp-g300nh_firmware 1.84
- buffalo wzr-hp-g301nh_firmware 1.84
- buffalo wzr-hp-g302h_firmware 1.86
- buffalo wzr-hp-g450h_firmware 1.90
- buffalo wzr-300hp_firmware 2.00
- buffalo wzr-450hp_firmware 2.00
- buffalo wzr-600dhp_firmware 2.00
- buffalo wzr-d1100h_firmware 2.00
Exploit prediction
0.86% chance of exploitation in the next 30 days, higher than 58% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 8.3 | AV:A/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- BUFFALO INC. Buffalo broadband routers
References
-
buffalo.jp
/news/detail/20210427-01.html
vendor-advisory
-
jvn.jp
/en/vu/JVNVU99235714/index.html
third-party-advisory
Sources
- CVE List CVE-2021-3512
- NVD CVE-2021-3512
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.