CVE-2021-20091

CVSS 3.1: 8.8 high
EPSS: 9%p95
Published: Apr 29, 2021 · Apr 29, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-20091 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.

Vendors: buffalo

Products: wsr-2533dhpl2-bk firmware, wsr-2533dhp3-bk firmware

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news

1 story

Routers and modems running Arcadyan firmware are under attack

The RecordJan 18, 00:00 UTC · Jan 18, 2023Exploit / PoCCVE-2021-20090 CVE-2021-200912