CVE-2021-20731

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
VendorProductVersion
buffalowsr-1166dhp4_firmware
𝑥
≤ 1.02
buffalowsr-1166dhp3_firmware
𝑥
≤ 1.16
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/en/vu/JVNVU92862829/index.html
https://www.buffalo.jp/news/detail/20210531-01.html
https://jvn.jp/en/vu/JVNVU92862829/index.html
https://www.buffalo.jp/news/detail/20210531-01.html