CVE-2021-20731

Description

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.

Affected products

• BUFFALO INC. / WSR-1166DHP3 and WSR-1166DHP4WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior – WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior

References

• MISChttps://www.buffalo.jp/news/detail/20210531-01.html
• MISChttps://jvn.jp/en/vu/JVNVU92862829/index.html