CVE-2021-20091

—

CVSS 3.1

8.8 high

EPSS

9%p95

Published

Apr 29, 2021 (Apr 29, 2021)

Modified

Jun 17, 2026

Description

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.

Vendors: buffalo
Products: wsr-2533dhpl2-bk firmware, wsr-2533dhp3-bk firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news1 stories

Routers and modems running Arcadyan firmware are under attack

The RecordJan 18, 00:00 UTC · Jan 18, 2023Exploit / PoC CVE-2021-20090 CVE-2021-20091