vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-20716

CRITICAL
9.8
CVSS Score
Published: April 28, 2021 at 12:45 AM UTC
Updated: June 17, 2026 at 03:34 AM UTC
70 products affected across 1 vendorWzr HP G54 FirmwareWzr Rs G54 FirmwareWli2-tx1-ag54 Firmware

Using Buffalo network devices by BUFFALO INC.?

Get instant alerts when new vulnerabilities affect Buffalo network devices - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.8
Exploit prediction
EPSS 3%

Description

Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Bhr 4RV Firmware· Buffalo
95%
v ≤ 2.55
buffalo-bhr-4rv (same device)
Fs G54 Firmware· Buffalo
95%
v ≤ 2.04
buffalo-fs-g54 (same device)
Wbr B11 Firmware· Buffalo
95%
v ≤ 2.23
buffalo-wbr-b11 (same device)
Wbr G54 Firmware· Buffalo
95%
v ≤ 2.23
buffalo-wbr-g54 (same device)
Wbr G54L Firmware· Buffalo
95%
v ≤ 2.20
buffalo-wbr-g54l (same device)
Wbr2-b11 Firmware· Buffalo
95%
v ≤ 2.32
buffalo-wbr2-b11 (same device)
Wbr2-g54 Firmware· Buffalo
95%
v ≤ 2.32
buffalo-wbr2-g54 (same device)
Wbr2-g54-kd Firmware· Buffalo
95%
v ≤ 2.32
buffalo-wbr2-g54-kd (same device)
Whr G54 Firmware· Buffalo
95%
v ≤ 2.16
buffalo-whr-g54 (same device)
Whr G54-nf Firmware· Buffalo
95%
v ≤ 2.10
buffalo-whr-g54-nf (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

x_refsource_MISCThird Party Advisory
Source: [email protected]
https://jvn.jp/en/vu/JVNVU90274525/index.html
x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.buffalo.jp/news/detail/20210427-02.html

CVSS

9.8CRITICAL[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card