CVE:CVE-2021-20090
CNNVD:CNNVD-202104-2010
Buffalo WSR-2533DHPL2是日本Buffalo公司的一个路由器。
Buffalo WSR-2533DHPL2 1.02存在路径遍历漏洞，该漏洞源于web界面处理目录遍历序列时出现输入验证错误。
solution:Upgrade buffalo wsr-2533dhpl2-bk_firmware to a higher version than 1.02,and avoid the version (,1.02]; Upgrade buffalo wsr-2533dhp3-bk_firmware to a higher version than 1.24,and avoid the version (,1.24]