CVE-2021-20091

Name of the Vulnerable Software and Affected Versions: Buffalo WSR-2533DHPL2 versions 1.02 and earlier Buffalo WSR-2533DHP3 versions 1.24 and earlier

Description: The issue arises from improper sanitization of user input in the web interfaces. This could allow an authenticated remote attacker to modify device configuration and potentially achieve remote code execution.

Recommendations: For Buffalo WSR-2533DHPL2 versions 1.02 and earlier, update to a version later than 1.02 to resolve the issue. For Buffalo WSR-2533DHP3 versions 1.24 and earlier, update to a version later than 1.24 to resolve the issue.