CVE-2021-20730 Information disclosure in WSR-1166DHP3 and WSR-1166DHP4
An attacker can obtain configuration information from Buffalo WSR-1166DHP3 and WSR-1166DHP4 routers due to improper access control.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20730?
CVE-2021-20730 is a medium-severity vulnerability in BUFFALO INC. WSR-1166DHP3 and WSR-1166DHP4, published on 9 Jun 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors.
Which versions are affected by CVE-2021-20730?
It affects 2 products.
Products include Buffalo Wsr-1166dhp3 Firmware, Buffalo Wsr-1166dhp4 Firmware.
How do I fix CVE-2021-20730?
No fix has been published for CVE-2021-20730 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-20730 being exploited?
There is no known exploitation of CVE-2021-20730 in the wild and no public exploit code.
Other vulnerabilities in BUFFALO INC. WSR-1166DHP3 and WSR-1166DHP4
Sources
Also known as GHSA-g265-pf9w-jhwr.