Arcadyan · Buffalo Firmware
The Buffalo firmware from Arcadyan contains a path traversal flaw in the web interfaces of the WSR-2533DHPL2 and WSR-2533DHP3 routers, where improper limitation of a pathname to a restricted directory exists. An unauthenticated remote attacker with network access can exploit this to bypass authentication, requiring no privileges, no user interaction, and no particular non-default configuration.
A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.
First seen exploited 3 months after disclosure.
CISA KEV listing is when exploitation was confirmed, not necessarily the first attack.
Authentication bypass yields valid-access equivalent
could allow unauthenticated remote attackers to bypass authentication
Exploits exposed web interface via path traversal; keyword query KW:T1190:1
path traversal vulnerability in the web interfaces
Exploit Public-Facing Application: Exploits vulnerabilities in IoT devices, routers, and servers such as HugeGraph (CVE-2024-27348) and Arcadyan firmware (CVE-2021-20090).
These detect the technique in general, not this specific vulnerability.
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
Reports are matched by finding the exact id CVE-2021-20090 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.
Router Vulnerabilities: Attacks on routers, including ZTE and GPON models, exploit vulnerabilities such as CVE-2017-18368, a command injection flaw, and CVE-2021-20090, which affects various devices running Arcadyan firmware.
2 passages name itOriginal (opens in a new tab) ↗
Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.