CVE Feed

    Dashboard / CVE / CVE-2011-1324

    CVE-2011-1324

    Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

    Published:May 9, 2011
    Last Modified:Apr 11, 2025
    EPS:May 9, 2011
    EPSS Score:0.00116
    CVSS Score:5.8

    Affected Products

    Vendor
    Buffalotech
    Product
    As-100
    Vendor
    Buffalotech
    Product
    Bbr-4hg
    Vendor
    Buffalotech
    Product
    Bbr-4hg Firmware
    Vendor
    Buffalotech
    Product
    Bbr-4mg
    Vendor
    Buffalotech
    Product
    Bbr-4mg Firmware
    Vendor
    Buffalotech
    Product
    Bhr-4rv
    Vendor
    Buffalotech
    Product
    Bhr-4rv Firmware
    Vendor
    Buffalotech
    Product
    Fs-g54
    Vendor
    Buffalotech
    Product
    Fs-g54 Firmware
    Vendor
    Buffalotech
    Product
    Wer-a54g54
    Vendor
    Buffalotech
    Product
    Wer-a54g54 Firmware
    Vendor
    Buffalotech
    Product
    Wer-ag54
    Vendor
    Buffalotech
    Product
    Wer-ag54 Firmware
    Vendor
    Buffalotech
    Product
    Wer-am54g54
    Vendor
    Buffalotech
    Product
    Wer-am54g54 Firmware
    Vendor
    Buffalotech
    Product
    Wer-amg54
    Vendor
    Buffalotech
    Product
    Wer-amg54 Firmware
    Vendor
    Buffalotech
    Product
    Whr-am54g54
    Vendor
    Buffalotech
    Product
    Whr-am54g54 Firmware
    Vendor
    Buffalotech
    Product
    Whr-amg54
    Vendor
    Buffalotech
    Product
    Whr-amg54 Firmware
    Vendor
    Buffalotech
    Product
    Whr-ampg
    Vendor
    Buffalotech
    Product
    Whr-ampg Firmware
    Vendor
    Buffalotech
    Product
    Whr-g
    Vendor
    Buffalotech
    Product
    Whr-g54s
    Vendor
    Buffalotech
    Product
    Whr-g54s Firmware
    Vendor
    Buffalotech
    Product
    Whr-g Firmware
    Vendor
    Buffalotech
    Product
    Whr-hp-ampg
    Vendor
    Buffalotech
    Product
    Whr-hp-ampg Firmware
    Vendor
    Buffalotech
    Product
    Whr-hp-g
    Vendor
    Buffalotech
    Product
    Whr-hp-g54
    Vendor
    Buffalotech
    Product
    Whr-hp-g54 Firmware
    Vendor
    Buffalotech
    Product
    Whr-hp-g Firmware
    Vendor
    Buffalotech
    Product
    Wzr-ampg144nh
    Vendor
    Buffalotech
    Product
    Wzr-ampg144nh Firmware
    Vendor
    Buffalotech
    Product
    Wzr-ampg300nh
    Vendor
    Buffalotech
    Product
    Wzr-ampg300nh Firmware
    Vendor
    Buffalotech
    Product
    Wzr-g144n
    Vendor
    Buffalotech
    Product
    Wzr-g144n Firmware
    Vendor
    Buffalotech
    Product
    Wzr-g144nh
    Vendor
    Buffalotech
    Product
    Wzr-g144nh Firmware
    Vendor
    Buffalotech
    Product
    Wzr2-g300n
    Vendor
    Buffalotech
    Product
    Wzr2-g300n Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High