CVE-2011-1324

Published May 9, 2011 CVSS 2.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-1332 Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Sep 17, 2024, 3:22 AM
Reserved
Mar 9, 2011, 12:00 AM
Status
Modified
Published
May 9, 2011, 7:55 PM
Modified
Jun 16, 2026, 11:29 PM