CVE-2021-20730

low-risk

Published 2021-06-09

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors.

Do I need to act?

0.07% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (2)

Wsr-1166Dhp4 Firmware

Wsr-1166Dhp3 Firmware

Affected Vendors

Buffalo

References (4)

Third Party Advisory https://jvn.jp/en/vu/JVNVU92862829/index.html

Vendor Advisory https://www.buffalo.jp/news/detail/20210531-01.html

Third Party Advisory https://jvn.jp/en/vu/JVNVU92862829/index.html

Vendor Advisory https://www.buffalo.jp/news/detail/20210531-01.html

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 7/34 · Low