Firetruck

CVE-2021-20090

KEV

Arcadyan Buffalo Firmware Path Traversal Vulnerability

View CVE record →
Vendor / Project
Arcadyan
Product
Buffalo Firmware
Date added
Nov 3, 2021
Due date
Nov 17, 2021
Known ransomware use
Unknown
CWEs
CWE-22

Description

Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors.

Required action

Apply updates per vendor instructions.

Notes