CVE-2011-1324
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo...
CVE-2011-1324 is a medium vulnerability (CVSS 5.8) in Buffalotech As-100, published May 9, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. No source names a fixed version.
- Severity
- 5.8 MediumCVSS 2.0, NVD
- Exploit chance
- 0.47%EPSS, 41st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
Exploit likelihood
Affected products
- buffalotech as-100
- buffalotech bhr-4rv
- buffalotech fs-g54
- buffalotech bbr-4hg
- buffalotech bbr-4hg firmware
- buffalotech bbr-4mg
- buffalotech bbr-4mg firmware
- buffalotech bhr-4rv firmware
- buffalotech fs-g54 firmware
- buffalotech wer-a54g54
- buffalotech wer-a54g54 firmware
- buffalotech wer-ag54
Show 31 moreShow less
- buffalotech wer-ag54 firmware
- buffalotech wer-am54g54
- buffalotech wer-am54g54 firmware
- buffalotech wer-amg54
- buffalotech wer-amg54 firmware
- buffalotech whr-am54g54
- buffalotech whr-am54g54 firmware
- buffalotech whr-amg54
- buffalotech whr-amg54 firmware
- buffalotech whr-ampg
- buffalotech whr-ampg firmware
- buffalotech whr-g
- buffalotech whr-g54s
- buffalotech whr-g54s firmware
- buffalotech whr-g firmware
- buffalotech whr-hp-ampg
- buffalotech whr-hp-ampg firmware
- buffalotech whr-hp-g
- buffalotech whr-hp-g54
- buffalotech whr-hp-g54 firmware
- buffalotech whr-hp-g firmware
- buffalotech wzr-ampg144nh
- buffalotech wzr-ampg144nh firmware
- buffalotech wzr-ampg300nh
- buffalotech wzr-ampg300nh firmware
- buffalotech wzr-g144n
- buffalotech wzr-g144n firmware
- buffalotech wzr-g144nh
- buffalotech wzr-g144nh firmware
- buffalotech wzr2-g300n
- buffalotech wzr2-g300n firmware
What each source reports
NVD Score used
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
- Record
CVE-2011-1324- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE ListNo score
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
- Record
CVE-2011-1324- Updated
- 2026-11-02
EUVDEUVD-2011-1332No score
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
- Record
EUVD-2011-1332- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4p8v-crr9-c3h6No score
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo...
Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.
- Record
GHSA-4p8v-crr9-c3h6- Weakness
- CWE-352
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.