Is CVE-2021-3511 actively exploited?

CVE-2021-3511 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2021-3511?

CVE-2021-3511 has a CVSS score of 4.3 (MEDIUM severity). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

How do I patch CVE-2021-3511?

Patch guidance is available from buffalo security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2021-3511.

CVE-2021-3511 - remediation guidance & executive summary

Q: Which products are affected by CVE-2021-3511?

24 products: buffalo bhr-4grv firmware, buffalo dwr-hp-g300nh firmware, buffalo hw-450hp-zwe firmware, buffalo whr-300hp firmware, buffalo whr-300 firmware, and 19 more.

Description

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors.

CVSS Metrics

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector: adjacent network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
Weaknesses: NVD-CWE-Other

Metadata

Primary Vendor: BUFFALO
Published: 4/28/2021
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

buffalo : bhr-4grv_firmwarebuffalo : dwr-hp-g300nh_firmwarebuffalo : hw-450hp-zwe_firmwarebuffalo : whr-300hp_firmwarebuffalo : whr-300_firmwarebuffalo : whr-g301n_firmwarebuffalo : whr-hp-g300n_firmwarebuffalo : whr-hp-gn_firmwarebuffalo : wpl-05g300_firmwarebuffalo : wzr-450hp-cwt_firmwarebuffalo : wzr-450hp-ub_firmwarebuffalo : wzr-hp-ag300h_firmwarebuffalo : wzr-hp-g300nh_firmwarebuffalo : wzr-hp-g301nh_firmwarebuffalo : wzr-hp-g302h_firmwarebuffalo : wzr-hp-g450h_firmwarebuffalo : wzr-300hp_firmwarebuffalo : wzr-450hp_firmwarebuffalo : wzr-600dhp_firmwarebuffalo : wzr-d1100h_firmwarebuffalo : fs-hp-g300n_firmwarebuffalo : fs-600dhp_firmwarebuffalo : fs-r600dhp_firmwarebuffalo : fs-g300n_firmware

Remediation Guidance

Executive Summary

View on NIST NVD