Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for FS-R600DHP firmware by BUFFALO INC.

    JVNDB-2022-002444

    Vulnerability from jvndb - Published: 2022-10-05 17:44 - Updated:2022-10-13 16:28
    Severity
    Summary
    Multiple vulnerabilities in Buffalo network devices
    Details
    Multiple network devices provided by Buffalo Inc. contain multiple vulnerabilities listed below. * Hidden Functionality (CWE-912) - CVE-2022-39044 * Use of Hard-coded Credentials (CWE-798) - CVE-2022-34840 * Authentication Bypass (CWE-288) - CVE-2022-4096 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.
    Impacted products
    BUFFALO INC. BHR-4GRV firmware
    BUFFALO INC. BHR-4GRV firmware
    BUFFALO INC. DWR-HP-G300NH firmware
    BUFFALO INC. DWR-PG firmware
    BUFFALO INC. FS-600DHP firmware
    BUFFALO INC. FS-600DHP firmware
    BUFFALO INC. FS-G300N firmware
    BUFFALO INC. FS-G300N firmware
    BUFFALO INC. FS-HP-G300N firmware
    BUFFALO INC. FS-HP-G300N firmware
    BUFFALO INC. FS-R600DHP firmware
    BUFFALO INC. FS-R600DHP firmware
    BUFFALO INC. HW-450HP-ZWE firmware
    BUFFALO INC. WCR-300 firmware
    BUFFALO INC. WEM-1266WP firmware
    BUFFALO INC. WEM-1266 firmware
    BUFFALO INC. WER-A54G54 firmware
    BUFFALO INC. WER-AG54 firmware
    BUFFALO INC. WER-AM54G54 firmware
    BUFFALO INC. WER-AMG54 firmware
    BUFFALO INC. WHR-300HP firmware
    BUFFALO INC. WHR-300 firmware
    BUFFALO INC. WHR-AM54G54 firmware
    BUFFALO INC. WHR-AMG54 firmware
    BUFFALO INC. WHR-AMPG firmware
    BUFFALO INC. WHR-G301N firmware
    BUFFALO INC. WHR-G301N firmware
    BUFFALO INC. WHR-G54S-NI firmware
    BUFFALO INC. WHR-G54S firmware
    BUFFALO INC. WHR-G firmware
    BUFFALO INC. WHR-HP-AMPG firmware
    BUFFALO INC. WHR-HP-G300N firmware
    BUFFALO INC. WHR-HP-G54 firmware
    BUFFALO INC. WHR-HP-GN firmware
    BUFFALO INC. WHR-HP-G firmware
    BUFFALO INC. WLAE-AG300N firmware
    BUFFALO INC. WLAE-AG300N firmware
    BUFFALO INC. WLI-H4-D600 firmware
    BUFFALO INC. WLI-TX4-AG300N firmware
    BUFFALO INC. WPL-05G300 firmware
    BUFFALO INC. WRM-D2133HP firmware
    BUFFALO INC. WRM-D2133HS firmware
    BUFFALO INC. WS024BF-NW firmware
    BUFFALO INC. WS024BF firmware
    BUFFALO INC. WTR-M2133HP firmware
    BUFFALO INC. WTR-M2133HS firmware
    BUFFALO INC. WXR-1750DHP2 firmware
    BUFFALO INC. WXR-1750DHP firmware
    BUFFALO INC. WXR-1900DHP2 firmware
    BUFFALO INC. WXR-1900DHP3 firmware
    BUFFALO INC. WXR-1900DHP firmware
    BUFFALO INC. WXR-5950AX12 firmware
    BUFFALO INC. WXR-6000AX12B firmware
    BUFFALO INC. WXR-6000AX12S firmware
    BUFFALO INC. WZR-1166DHP2 firmware
    BUFFALO INC. WZR-1166DHP firmware
    BUFFALO INC. WZR-1750DHP2 firmware
    BUFFALO INC. WZR-1750DHP firmware
    BUFFALO INC. WZR-300HP firmware
    BUFFALO INC. WZR-300HP firmware
    BUFFALO INC. WZR-450HP-CWT firmware
    BUFFALO INC. WZR-450HP-UB firmware
    BUFFALO INC. WZR-450HP firmware
    BUFFALO INC. WZR-450HP firmware
    BUFFALO INC. WZR-600DHP2 firmware
    BUFFALO INC. WZR-600DHP3 firmware
    BUFFALO INC. WZR-600DHP firmware
    BUFFALO INC. WZR-600DHP firmware
    BUFFALO INC. WZR-900DHP2 firmware
    BUFFALO INC. WZR-900DHP firmware
    BUFFALO INC. WZR-900DHP firmware
    BUFFALO INC. WZR-AGL300NH firmware
    BUFFALO INC. WZR-AMPG144NH firmware
    BUFFALO INC. WZR-AMPG300NH firmware
    BUFFALO INC. WZR-D1100H firmware
    BUFFALO INC. WZR-G144NH firmware
    BUFFALO INC. WZR-G144N firmware
    BUFFALO INC. WZR-HP-AG300H firmware
    BUFFALO INC. WZR-HP-AG300H firmware
    BUFFALO INC. WZR-HP-G300NH firmware
    BUFFALO INC. WZR-HP-G301NH firmware
    BUFFALO INC. WZR-HP-G302H firmware
    BUFFALO INC. WZR-HP-G302H firmware
    BUFFALO INC. WZR-HP-G450H firmware
    BUFFALO INC. WZR-S1750DHP firmware
    BUFFALO INC. WZR-S600DHP firmware
    BUFFALO INC. WZR-S900DHP firmware
    BUFFALO INC. WZR2-G108 firmware
    BUFFALO INC. WZR2-G300N firmware
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-002444.html",
      "dc:date": "2022-10-13T16:28+09:00",
      "dcterms:issued": "2022-10-05T17:44+09:00",
      "dcterms:modified": "2022-10-13T16:28+09:00",
      "description": "Multiple network devices provided by Buffalo Inc. contain multiple vulnerabilities listed below.\r\n\r\n* Hidden Functionality (CWE-912) - CVE-2022-39044\r\n* Use of Hard-coded Credentials (CWE-798) - CVE-2022-34840\r\n* Authentication Bypass (CWE-288) - CVE-2022-4096\r\n\r\nChuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
      "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-002444.html",
      "sec:cpe": [
        {
          "#text": "cpe:/o:buffalo_inc:bhr-4grv_firmware",
          "@product": "BHR-4GRV firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:bhr-4grv_firmware",
          "@product": "BHR-4GRV firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:dwr-hp-g300nh_firmware",
          "@product": "DWR-HP-G300NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:dwr-pg_firmware",
          "@product": "DWR-PG firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-600dhp_firmware",
          "@product": "FS-600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-600dhp_firmware",
          "@product": "FS-600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-g300n_firmware",
          "@product": "FS-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-g300n_firmware",
          "@product": "FS-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-hp-g300n_firmware",
          "@product": "FS-HP-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-hp-g300n_firmware",
          "@product": "FS-HP-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-r600dhp_firmware",
          "@product": "FS-R600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-r600dhp_firmware",
          "@product": "FS-R600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:hw-450hp-zwe_firmware",
          "@product": "HW-450HP-ZWE firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wcr-300_firmware",
          "@product": "WCR-300 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wem-1266_firmware",
          "@product": "WEM-1266WP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wem-1266_firmwpware",
          "@product": "WEM-1266 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wer-a54g54_firmware",
          "@product": "WER-A54G54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wer-ag54_firmware",
          "@product": "WER-AG54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wer-am54g54_firmware",
          "@product": "WER-AM54G54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wer-amg54_firmware",
          "@product": "WER-AMG54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-300hp_firmware",
          "@product": "WHR-300HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-300_firmware",
          "@product": "WHR-300 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-am54g54_firmware",
          "@product": "WHR-AM54G54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-amg54_firmware",
          "@product": "WHR-AMG54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-ampg_firmware",
          "@product": "WHR-AMPG firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-g300n_firmware",
          "@product": "WHR-G301N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-g301n_firmware",
          "@product": "WHR-G301N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-g54s-ni_firmware",
          "@product": "WHR-G54S-NI firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-g54s_firmware",
          "@product": "WHR-G54S firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-g_firmware",
          "@product": "WHR-G firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-ampg_firmware",
          "@product": "WHR-HP-AMPG firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-g300n_firmware",
          "@product": "WHR-HP-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-g54_firmware",
          "@product": "WHR-HP-G54 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-gn_firmware",
          "@product": "WHR-HP-GN firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-g_firmware",
          "@product": "WHR-HP-G firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wlae-ag300n_firmware",
          "@product": "WLAE-AG300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wlae-ag300n_firmware",
          "@product": "WLAE-AG300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wli-h4-d600_firmware",
          "@product": "WLI-H4-D600 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wli-tx4-ag300n_firmware",
          "@product": "WLI-TX4-AG300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wpl-05g300_firmware",
          "@product": "WPL-05G300 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wrm-d2133hp_firmware",
          "@product": "WRM-D2133HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wrm-d2133hs_firmware",
          "@product": "WRM-D2133HS firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:ws024bf-nw_firmware",
          "@product": "WS024BF-NW firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:ws024bf_firmware",
          "@product": "WS024BF firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wtr-m2133hp_firmware",
          "@product": "WTR-M2133HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wtr-m2133hs_firmware",
          "@product": "WTR-M2133HS firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-1750dhp2_firmware",
          "@product": "WXR-1750DHP2 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-1750dhp_firmware",
          "@product": "WXR-1750DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-1900dhp2_firmware",
          "@product": "WXR-1900DHP2 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-1900dhp3_firmware",
          "@product": "WXR-1900DHP3 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-1900dhp_firmware",
          "@product": "WXR-1900DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-5950ax12_firmware",
          "@product": "WXR-5950AX12 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-6000ax12b_firmware",
          "@product": "WXR-6000AX12B firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wxr-6000ax12s_firmware",
          "@product": "WXR-6000AX12S firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-1166dhp2_firmware",
          "@product": "WZR-1166DHP2 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-1166dhp_firmware",
          "@product": "WZR-1166DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-1750dhp2_firmware",
          "@product": "WZR-1750DHP2 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-1750dhp_firmware",
          "@product": "WZR-1750DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-300hp_firmware",
          "@product": "WZR-300HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-300hp_firmware",
          "@product": "WZR-300HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp-cwt_firmware",
          "@product": "WZR-450HP-CWT firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp-ub_firmware",
          "@product": "WZR-450HP-UB firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp_firmware",
          "@product": "WZR-450HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp_firmware",
          "@product": "WZR-450HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-600dhp2_firmware",
          "@product": "WZR-600DHP2 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-600dhp3_firmware",
          "@product": "WZR-600DHP3 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-600dhp_firmware",
          "@product": "WZR-600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-600dhp_firmware",
          "@product": "WZR-600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-900dhp2_firmware",
          "@product": "WZR-900DHP2 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-900dhp_firmware",
          "@product": "WZR-900DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-900dhp_firmware",
          "@product": "WZR-900DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-agl300nh_firmware",
          "@product": "WZR-AGL300NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-ampg144nh_firmware",
          "@product": "WZR-AMPG144NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-ampg300nh_firmware",
          "@product": "WZR-AMPG300NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-d1100h_firmware",
          "@product": "WZR-D1100H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-g144nh_firmware",
          "@product": "WZR-G144NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-g144n_firmware",
          "@product": "WZR-G144N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-ag300h_firmware",
          "@product": "WZR-HP-AG300H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-ag300h_firmware",
          "@product": "WZR-HP-AG300H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g300nh_firmware",
          "@product": "WZR-HP-G300NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g301nh_firmware",
          "@product": "WZR-HP-G301NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g302h_firmware",
          "@product": "WZR-HP-G302H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g302h_firmware",
          "@product": "WZR-HP-G302H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g450h_firmware",
          "@product": "WZR-HP-G450H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-s1750dhp_firmware",
          "@product": "WZR-S1750DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-s600dhp_firmware",
          "@product": "WZR-S600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-s900dhp_firmware",
          "@product": "WZR-S900DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr2-g108_firmware",
          "@product": "WZR2-G108 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr2-g300n_firmware",
          "@product": "WZR2-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        }
      ],
      "sec:cvss": {
        "@score": "8.8",
        "@severity": "High",
        "@type": "Base",
        "@vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "@version": "3.0"
      },
      "sec:identifier": "JVNDB-2022-002444",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/vu/JVNVU92805279/index.html",
          "@id": "JVNVU#92805279",
          "@source": "JVN"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2022-39044",
          "@id": "CVE-2022-39044",
          "@source": "CVE"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2022-34840",
          "@id": "CVE-2022-34840",
          "@source": "CVE"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2022-40966",
          "@id": "CVE-2022-40966",
          "@source": "CVE"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-34840",
          "@id": "CVE-2022-34840",
          "@source": "NVD"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-39044",
          "@id": "CVE-2022-39044",
          "@source": "NVD"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-40966",
          "@id": "CVE-2022-40966",
          "@source": "NVD"
        },
        {
          "#text": "https://cwe.mitre.org/data/definitions/288.html",
          "@id": "CWE-288",
          "@title": "Authentication Bypass Using an Alternate Path or Channel(CWE-288)"
        },
        {
          "#text": "https://cwe.mitre.org/data/definitions/798.html",
          "@id": "CWE-798",
          "@title": "Use of Hard-coded Credentials(CWE-798)"
        },
        {
          "#text": "https://cwe.mitre.org/data/definitions/912.html",
          "@id": "CWE-912",
          "@title": "Hidden Functionality(CWE-912)"
        }
      ],
      "title": "Multiple vulnerabilities in Buffalo network devices"
    }

    JVNDB-2021-001381

    Vulnerability from jvndb - Published: 2021-04-28 16:14 - Updated:2021-05-07 16:28
    Severity
    Summary
    Multiple vulnerabilities in Buffalo broadband routers
    Details
    Multiple broadband routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. * Disclosure of sensitive information to an unauthorized user (CWE-200) - CVE-2021-3511 * Improper access control (CWE-284) - CVE-2021-3512 Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001381.html",
      "dc:date": "2021-05-07T16:28+09:00",
      "dcterms:issued": "2021-04-28T16:14+09:00",
      "dcterms:modified": "2021-05-07T16:28+09:00",
      "description": "Multiple broadband routers provided by BUFFALO INC. contain multiple vulnerabilities listed below.\r\n\r\n* Disclosure of sensitive information to an unauthorized user (CWE-200) - CVE-2021-3511\r\n* Improper access control (CWE-284) - CVE-2021-3512\r\n\r\nChuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
      "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001381.html",
      "sec:cpe": [
        {
          "#text": "cpe:/o:buffalo_inc:bhr-4grv_firmware",
          "@product": "BHR-4GRV firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:dwr-hp-g300nh_firmware",
          "@product": "DWR-HP-G300NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-600dhp_firmware",
          "@product": "FS-600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-g300n_firmware",
          "@product": "FS-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-hp-g300n_firmware",
          "@product": "FS-HP-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:fs-r600dhp_firmware",
          "@product": "FS-R600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:hw-450hp-zwe_firmware",
          "@product": "HW-450HP-ZWE firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-300hp_firmware",
          "@product": "WHR-300HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-300_firmware",
          "@product": "WHR-300 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-g301n_firmware",
          "@product": "WHR-G301N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-g300n_firmware",
          "@product": "WHR-HP-G300N firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:whr-hp-gn_firmware",
          "@product": "WHR-HP-GN firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wpl-05g300_firmware",
          "@product": "WPL-05G300 firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-300hp_firmware",
          "@product": "WZR-300HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp-cwt_firmware",
          "@product": "WZR-450HP-CWT firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp-ub_firmware",
          "@product": "WZR-450HP-UB firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-450hp_firmware",
          "@product": "WZR-450HP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-600dhp_firmware",
          "@product": "WZR-600DHP firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-d1100h_firmware",
          "@product": "WZR-D1100H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-ag300h_firmware",
          "@product": "WZR-HP-AG300H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g300nh_firmware",
          "@product": "WZR-HP-G300NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g301nh_firmware",
          "@product": "WZR-HP-G301NH firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g302h_firmware",
          "@product": "WZR-HP-G302H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:buffalo_inc:wzr-hp-g450h_firmware",
          "@product": "WZR-HP-G450H firmware",
          "@vendor": "BUFFALO INC.",
          "@version": "2.2"
        }
      ],
      "sec:cvss": {
        "@score": "4.3",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
        "@version": "3.0"
      },
      "sec:identifier": "JVNDB-2021-001381",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/vu/JVNVU99235714/index.html",
          "@id": "JVNVU#99235714",
          "@source": "JVN"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3511",
          "@id": "CVE-2021-3511",
          "@source": "CVE"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3512",
          "@id": "CVE-2021-3512",
          "@source": "CVE"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-3511",
          "@id": "CVE-2021-3511",
          "@source": "NVD"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-3512",
          "@id": "CVE-2021-3512",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-200",
          "@title": "Information Exposure(CWE-200)"
        },
        {
          "#text": "https://cwe.mitre.org/data/definitions/284.html",
          "@id": "CWE-284",
          "@title": "Improper Access Control(CWE-284)"
        }
      ],
      "title": "Multiple vulnerabilities in Buffalo broadband routers"
    }