| Package | Affected versions | Patched versions |
|---|---|---|
| bbr-4hg firmware | = 1.02= 1.04= 1.10= 1.11= 1.12= 1.20= 1.30= 1.31= 1.32= 1.33 | |
| bbr-4mg firmware | = 1.00= 1.01= 1.03= 1.04= 1.10= 1.11= 1.12= 1.20= 1.30= 1.31= 1.32= 1.33 | |
| bhr-4rv firmware | = 2.31= 2.32= 2.33= 2.42= 2.46= 2.48 | |
| fs-g54 firmware | = 2.07 | |
| wer-a54g54 firmware | = 1.00= 1.01= 1.02= 1.03= 1.10= 1.12= 1.13 | |
| wer-ag54 firmware | = 1.04= 1.12 | |
| wer-am54g54 firmware | = 1.11= 1.12= 1.13= 1.14 | |
| wer-amg54 firmware | = 1.11= 1.12= 1.14 | |
| whr-am54g54 firmware | = 1.30= 1.38= 1.40= 1.42 | |
| whr-amg54 firmware | = 1.31= 1.38= 1.40= 1.42 | |
| whr-ampg firmware | = 1.46 | |
| whr-g54s firmware | = 1.20= 1.21= 1.23= 1.38= 1.40= 1.42 | |
| whr-g firmware | = 1.46 | |
| whr-hp-ampg firmware | = 1.32 | |
| whr-hp-g54 firmware | = 1.20= 1.21= 1.23= 1.38= 1.40= 1.42 | |
| whr-hp-g firmware | = 1.46 | |
| wzr-ampg144nh firmware | = 1.47= 1.48 | |
| wzr-ampg300nh firmware | = 1.48 | |
| wzr-g144n firmware | = 1.45= 1.46= 1.47 | |
| wzr-g144nh firmware | = 1.45= 1.47= 1.48 | |
| wzr2-g300n firmware | = 1.48= 1.50 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free