What’s Vulnerable › Vulnerabilities

CVE-2011-1324

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-05-09 · updated 2026-06-16
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

Affected products

• Buffalotech As-100: all versions
• Buffalotech Bbr-4Hg: all versions
• Buffalotech Bbr-4Hg Firmware: 1.02, 1.04, 1.04-beta, 1.10, 1.10-beta, 1.11-beta (+9)
• Buffalotech Bbr-4Mg: all versions
• Buffalotech Bbr-4Mg Firmware: 1.00, 1.01-beta, 1.03, 1.04, 1.04-beta, 1.10 (+12)
• Buffalotech Bhr-4Rv: all versions
• Buffalotech Bhr-4Rv Firmware: 2.31, 2.32-prebeta, 2.33-prebeta, 2.42, 2.46, 2.48
• Buffalotech Fs-G54: all versions
• Buffalotech Fs-G54 Firmware: 2.07
• Buffalotech Wer-A54G54: all versions
• Buffalotech Wer-A54G54 Firmware: 1.00, 1.01-beta, 1.02, 1.03, 1.10, 1.12 (+2)
• Buffalotech Wer-Ag54: all versions
• Buffalotech Wer-Ag54 Firmware: 1.04, 1.12, 1.12-beta
• Buffalotech Wer-Am54G54: all versions
• Buffalotech Wer-Am54G54 Firmware: 1.11, 1.12, 1.12-beta, 1.13, 1.14
• Buffalotech Wer-Amg54: all versions
• Buffalotech Wer-Amg54 Firmware: 1.11, 1.12, 1.14
• Buffalotech Whr-Am54G54: all versions
• Buffalotech Whr-Am54G54 Firmware: 1.30, 1.38, 1.40, 1.42
• Buffalotech Whr-Amg54: all versions
• Buffalotech Whr-Amg54 Firmware: 1.31, 1.38, 1.40, 1.42
• Buffalotech Whr-Ampg: all versions
• Buffalotech Whr-Ampg Firmware: 1.46
• Buffalotech Whr-G: all versions
• Buffalotech Whr-G54S: all versions
• Buffalotech Whr-G54S Firmware: 1.20, 1.21, 1.23, 1.38, 1.40, 1.42
• Buffalotech Whr-G Firmware: 1.46
• Buffalotech Whr-Hp-Ampg: all versions
• Buffalotech Whr-Hp-Ampg Firmware: 1.32
• Buffalotech Whr-Hp-G: all versions

References

• http://buffalo.jp/support_s/20080808/csrf.html
• http://jvn.jp/en/jp/JVN50505257/index.html
• http://buffalo.jp/support_s/20080808/csrf.html
• http://jvn.jp/en/jp/JVN50505257/index.html

Get alerted when CVE-2011-1324 or the next vulnerability affects your stack