Critical severity9.8CISA KEVNVD Advisory· Published Apr 29, 2021· Updated Jun 17, 2026
CVE-2021-20090
CVE-2021-20090
Description
A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:o:buffalo:wsr-2533dhp3-bk_firmware:*:*:*:*:*:*:*:*Range: <=1.24
- cpe:2.3:o:buffalo:wsr-2533dhpl2-bk_firmware:*:*:*:*:*:*:*:*Range: <=1.02
- Buffalo/WSR-2533DHPL2 firmwaredescription
- Range: <=1.02
- Range: <=1.24
Patches
Vulnerability mechanics
References
4- www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/nvdExploitThird Party Advisory
- www.tenable.com/security/research/tra-2021-13nvdExploitThird Party Advisory
- www.kb.cert.org/vuls/id/914124nvdThird Party AdvisoryUS Government Resource
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.