CVE-2021-3511

MEDIUM

4.3

CVSS Score

Published: April 28, 2021 at 12:45 AM UTC

Updated: June 17, 2026 at 04:05 AM UTC

48 products affected across 1 vendorWzr 600DHP FirmwareWzr 300HP FirmwareHw 450HP Zwe Firmware

Using Buffalo broadband routers by BUFFALO INC.?

Get instant alerts when new vulnerabilities affect Buffalo broadband routers - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.3

Exploit prediction

EPSS 0.5%

Description

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Bhr 4GRV Firmware · Buffalo

95%

v < 2.00

Affected range stops below 2.00, so it looks safe — our inference, not a vendor statement

buffalo-bhr-4grv (same device)

Dwr HP G300NH Firmware · Buffalo

95%

v < 1.84

Affected range stops below 1.84, so it looks safe — our inference, not a vendor statement

buffalo-dwr-hp-g300nh (same device)

Fs 600DHP Firmware · Buffalo

95%

v < 3.40

Affected range stops below 3.40, so it looks safe — our inference, not a vendor statement

buffalo-fs-600dhp (same device)

Fs G300N Firmware · Buffalo

95%

v < 3.14

Affected range stops below 3.14, so it looks safe — our inference, not a vendor statement

buffalo-fs-g300n (same device)

Fs HP G300N Firmware · Buffalo

95%

v < 3.33

Affected range stops below 3.33, so it looks safe — our inference, not a vendor statement

buffalo-fs-hp-g300n (same device)

Fs R600DHP Firmware · Buffalo

95%

v < 3.40

Affected range stops below 3.40, so it looks safe — our inference, not a vendor statement

buffalo-fs-r600dhp (same device)

Hw 450HP Zwe Firmware · Buffalo

95%

v < 2.00

Affected range stops below 2.00, so it looks safe — our inference, not a vendor statement

buffalo-hw-450hp-zwe (same device)

Whr 300 Firmware · Buffalo

95%

v < 2.00

Affected range stops below 2.00, so it looks safe — our inference, not a vendor statement

buffalo-whr-300 (same device)

Whr 300HP Firmware · Buffalo

95%

v < 2.00

Affected range stops below 2.00, so it looks safe — our inference, not a vendor statement

buffalo-whr-300hp (same device)

Whr G301N Firmware · Buffalo

95%

v < 1.87

Affected range stops below 1.87, so it looks safe — our inference, not a vendor statement

buffalo-whr-g301n (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.buffalo.jp/news/detail/20210427-01.html

References (2)

x_refsource_MISCThird Party Advisory

Source: [email protected]

https://jvn.jp/en/vu/JVNVU99235714/index.html

x_refsource_MISCVendor Advisory

Source: [email protected]

https://www.buffalo.jp/news/detail/20210427-01.html

CVSS

4.3MEDIUM[email protected]

Attack Vector: ADJACENT_NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: LOW
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card