CVE:CVE-2021-3511
CNNVD:CNNVD-202104-1998
Buffalo 固件是日本Buffalo公司的一个网络设备。
Buffalo broadband routers 存在安全漏洞，该漏洞源于允许未经身份验证的远程攻击者通过未指定的媒介获取信息，例如配置。以下产品及版本受到影响：BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior。
solution:Upgrade buffalo bhr-4grv_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo dwr-hp-g300nh_firmware to a higher version than 1.84,and avoid the version (,1.84); Upgrade buffalo hw-450hp-zwe_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo whr-300hp_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo whr-300_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo whr-g301n_firmware to a higher version than 1.87,and avoid the version (,1.87); Upgrade buffalo whr-hp-g300n_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo whr-hp-gn_firmware to a higher version than 1.87,and avoid the version (,1.87); Upgrade buffalo wpl-05g300_firmware to a higher version than 1.88,and avoid the version (,1.88); Upgrade buffalo wzr-450hp-cwt_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo wzr-450hp-ub_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo wzr-hp-ag300h_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade buffalo wzr-hp-g300nh_firmware to a higher version than 1.84,and avoid the version (,1.84); Upgrade buffalo wzr-hp-g301nh_firmware to a higher version than 1.84,and avoid the version (,1.84); Upgrade buffalo wzr-hp-g302h_firmware to a higher version than 1.86,and avoid the version (,1.86); Upgrade buffalo wzr-hp-g450h_firmware to a higher version than 1.90,and avoid the version (,1.90); Upgrade buffalo wzr-300hp_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo wzr-450hp_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo wzr-600dhp_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo wzr-d1100h_firmware to a higher version than 2.00,and avoid the version (,2.00); Upgrade buffalo fs-hp-g300n_firmware to a higher version than 3.33,and avoid the version (,3.33); Upgrade buffalo fs-600dhp_firmware to a higher version than 3.40,and avoid the version (,3.40); Upgrade buffalo fs-r600dhp_firmware to a higher version than 3.40,and avoid the version (,3.40); Upgrade buffalo fs-g300n_firmware to a higher version than 3.14,and avoid the version (,3.14)