CVE-2011-1324

Current Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

Basic Data

PublishedMay 09, 2011
Last ModifiedMay 27, 2011
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeCWE-352
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:N/AC:M/Au:N/C:N/I:P/A:P
CVSS 2 - Access VectorNETWORK
CVSS 2 - Access ComplexityMEDIUM
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactNONE
CVSS 2 - Availability ImpactPARTIAL
CVSS 2 - Base Score5.8
SeverityMEDIUM
Exploitability Score8.6
Impact Score4.9
Obtain All Privilegefalse
Obtain User Privilegefalse
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3ApplicationBuffalotechBbr-4hg Firmware1.02*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.04*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.04beta******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.10*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.10beta******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.11beta******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.12*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.20*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.20beta******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.30*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.30beta******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.31*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.32*******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.32beta******
    2.3ApplicationBuffalotechBbr-4hg Firmware1.33beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.00*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.01beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.03*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.04*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.04beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.10*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.10beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.11beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.12*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.20*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.20beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.30*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.30beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.31*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.32*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.32beta******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.33*******
    2.3ApplicationBuffalotechBbr-4mg Firmware1.33beta******
    2.3ApplicationBuffalotechBhr-4rv Firmware2.31*******
    2.3ApplicationBuffalotechBhr-4rv Firmware2.32prebeta******
    2.3ApplicationBuffalotechBhr-4rv Firmware2.33prebeta******
    2.3ApplicationBuffalotechBhr-4rv Firmware2.42*******
    2.3ApplicationBuffalotechBhr-4rv Firmware2.46*******
    2.3ApplicationBuffalotechBhr-4rv Firmware2.48*******
    2.3ApplicationBuffalotechFs-g54 Firmware2.07*******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.00*******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.01beta******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.02*******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.03*******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.10*******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.12*******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.12beta******
    2.3ApplicationBuffalotechWer-a54g54 Firmware1.13*******
    2.3ApplicationBuffalotechWer-ag54 Firmware1.04*******
    2.3ApplicationBuffalotechWer-ag54 Firmware1.12*******
    2.3ApplicationBuffalotechWer-ag54 Firmware1.12beta******
    2.3ApplicationBuffalotechWer-am54g54 Firmware1.11*******
    2.3ApplicationBuffalotechWer-am54g54 Firmware1.12*******
    2.3ApplicationBuffalotechWer-am54g54 Firmware1.12beta******
    2.3ApplicationBuffalotechWer-am54g54 Firmware1.13*******
    2.3ApplicationBuffalotechWer-am54g54 Firmware1.14*******
    2.3ApplicationBuffalotechWer-amg54 Firmware1.11*******
    2.3ApplicationBuffalotechWer-amg54 Firmware1.12*******
    2.3ApplicationBuffalotechWer-amg54 Firmware1.14*******
    2.3ApplicationBuffalotechWhr-am54g54 Firmware1.30*******
    2.3ApplicationBuffalotechWhr-am54g54 Firmware1.38*******
    2.3ApplicationBuffalotechWhr-am54g54 Firmware1.40*******
    2.3ApplicationBuffalotechWhr-am54g54 Firmware1.42*******
    2.3ApplicationBuffalotechWhr-amg54 Firmware1.31*******
    2.3ApplicationBuffalotechWhr-amg54 Firmware1.38*******
    2.3ApplicationBuffalotechWhr-amg54 Firmware1.40*******
    2.3ApplicationBuffalotechWhr-amg54 Firmware1.42*******
    2.3ApplicationBuffalotechWhr-ampg Firmware1.46*******
    2.3ApplicationBuffalotechWhr-g54s Firmware1.20*******
    2.3ApplicationBuffalotechWhr-g54s Firmware1.21*******
    2.3ApplicationBuffalotechWhr-g54s Firmware1.23*******
    2.3ApplicationBuffalotechWhr-g54s Firmware1.38*******
    2.3ApplicationBuffalotechWhr-g54s Firmware1.40*******
    2.3ApplicationBuffalotechWhr-g54s Firmware1.42*******
    2.3ApplicationBuffalotechWhr-g Firmware1.46*******
    2.3ApplicationBuffalotechWhr-hp-ampg Firmware1.32*******
    2.3ApplicationBuffalotechWhr-hp-g54 Firmware1.20*******
    2.3ApplicationBuffalotechWhr-hp-g54 Firmware1.21*******
    2.3ApplicationBuffalotechWhr-hp-g54 Firmware1.23*******
    2.3ApplicationBuffalotechWhr-hp-g54 Firmware1.38*******
    2.3ApplicationBuffalotechWhr-hp-g54 Firmware1.40*******
    2.3ApplicationBuffalotechWhr-hp-g54 Firmware1.42*******
    2.3ApplicationBuffalotechWhr-hp-g Firmware1.46*******
    2.3ApplicationBuffalotechWzr-ampg144nh Firmware1.47*******
    2.3ApplicationBuffalotechWzr-ampg144nh Firmware1.48beta******
    2.3ApplicationBuffalotechWzr-ampg300nh Firmware1.48*******
    2.3ApplicationBuffalotechWzr-g144n Firmware1.45*******
    2.3ApplicationBuffalotechWzr-g144n Firmware1.46beta******
    2.3ApplicationBuffalotechWzr-g144n Firmware1.47*******
    2.3ApplicationBuffalotechWzr-g144n Firmware1.47beta******
    2.3ApplicationBuffalotechWzr-g144nh Firmware1.45*******
    2.3ApplicationBuffalotechWzr-g144nh Firmware1.47*******
    2.3ApplicationBuffalotechWzr-g144nh Firmware1.47beta******
    2.3ApplicationBuffalotechWzr-g144nh Firmware1.48*******
    2.3ApplicationBuffalotechWzr2-g300n Firmware1.48*******
    2.3ApplicationBuffalotechWzr2-g300n Firmware1.50beta******
    2.3HardwareBuffalotechAs-100********
    2.3HardwareBuffalotechBbr-4hg********
    2.3HardwareBuffalotechBbr-4mg********
    2.3HardwareBuffalotechBhr-4rv********
    2.3HardwareBuffalotechFs-g54********
    2.3HardwareBuffalotechWer-a54g54********
    2.3HardwareBuffalotechWer-ag54********
    2.3HardwareBuffalotechWer-am54g54********
    2.3HardwareBuffalotechWer-amg54********
    2.3HardwareBuffalotechWhr-am54g54********
    2.3HardwareBuffalotechWhr-amg54********
    2.3HardwareBuffalotechWhr-ampg********
    2.3HardwareBuffalotechWhr-g********
    2.3HardwareBuffalotechWhr-g54s********
    2.3HardwareBuffalotechWhr-hp-ampg********
    2.3HardwareBuffalotechWhr-hp-g********
    2.3HardwareBuffalotechWhr-hp-g54********
    2.3HardwareBuffalotechWzr-ampg144nh********
    2.3HardwareBuffalotechWzr-ampg300nh********
    2.3HardwareBuffalotechWzr-g144n********
    2.3HardwareBuffalotechWzr-g144nh********
    2.3HardwareBuffalotechWzr2-g300n********

Vulnerable Software List

VendorProductVersions
Buffalotech Wzr-ampg144nh Firmware 1.47, 1.48
Buffalotech Wzr-ampg300nh Firmware 1.48
Buffalotech Wzr-g144n Firmware 1.45, 1.46, 1.47
Buffalotech Wzr-g144nh Firmware 1.45, 1.47, 1.48
Buffalotech Wzr2-g300n Firmware 1.48, 1.50
Buffalotech As-100 *
Buffalotech Bbr-4hg *
Buffalotech Bbr-4mg *
Buffalotech Bhr-4rv *
Buffalotech Fs-g54 *
Buffalotech Wer-a54g54 *
Buffalotech Wer-ag54 *
Buffalotech Wer-am54g54 *
Buffalotech Wer-amg54 *
Buffalotech Whr-am54g54 *
Buffalotech Whr-amg54 *
Buffalotech Whr-ampg *
Buffalotech Whr-g *
Buffalotech Whr-g54s *
Buffalotech Whr-hp-ampg *
Buffalotech Whr-hp-g *
Buffalotech Whr-hp-g54 *
Buffalotech Wzr-ampg144nh *
Buffalotech Wzr-ampg300nh *
Buffalotech Wzr-g144n *
Buffalotech Wzr-g144nh *
Buffalotech Wzr2-g300n *
Buffalotech Bbr-4hg Firmware 1.02, 1.04, 1.10, 1.11, 1.12, 1.20, 1.30, 1.31, 1.32, 1.33
Buffalotech Bbr-4mg Firmware 1.00, 1.01, 1.03, 1.04, 1.10, 1.11, 1.12, 1.20, 1.30, 1.31, 1.32, 1.33
Buffalotech Bhr-4rv Firmware 2.31, 2.32, 2.33, 2.42, 2.46, 2.48
Buffalotech Fs-g54 Firmware 2.07
Buffalotech Wer-a54g54 Firmware 1.00, 1.01, 1.02, 1.03, 1.10, 1.12, 1.13
Buffalotech Wer-ag54 Firmware 1.04, 1.12
Buffalotech Wer-am54g54 Firmware 1.11, 1.12, 1.13, 1.14
Buffalotech Wer-amg54 Firmware 1.11, 1.12, 1.14
Buffalotech Whr-am54g54 Firmware 1.30, 1.38, 1.40, 1.42
Buffalotech Whr-amg54 Firmware 1.31, 1.38, 1.40, 1.42
Buffalotech Whr-ampg Firmware 1.46
Buffalotech Whr-g54s Firmware 1.20, 1.21, 1.23, 1.38, 1.40, 1.42
Buffalotech Whr-g Firmware 1.46
Buffalotech Whr-hp-ampg Firmware 1.32
Buffalotech Whr-hp-g54 Firmware 1.20, 1.21, 1.23, 1.38, 1.40, 1.42
Buffalotech Whr-hp-g Firmware 1.46

References

NameSourceURLTags
http://buffalo.jp/support_s/20080808/csrf.htmlhttp://buffalo.jp/support_s/20080808/csrf.htmlCONFIRM
JVN#50505257http://jvn.jp/en/jp/JVN50505257/index.htmlJVN