https://www.tenable.com/security/research/tra-2021-13

Nessus was able to determine that the remote Buffalo device is affected by multiple vulnerabilities:
  - A path traversal vulnerability in the web interfaces of certain Buffalo router models could     allow unauthenticated remote attackers to bypass authentication. (CVE-2021-20090)

  - The web interfaces of certain Buffalo router models do not properly sanitize user input. An     authenticated remote attacker could leverage this vulnerability to alter device configuration,     potentially gaining remote code execution. (CVE-2021-20091)

  - The web interfaces of certain Buffalo router models do not properly restrict access to     sensitive information from an unauthorized actor. (CVE-2021-20092)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2021-20092

high

Tenable Plugins

critical