References https://nvd.nist.gov/vuln/detail/CVE-2021-20090 https://www.tenable.com/security/research/tra-2021-13 https://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2 https://www.cnvd.org.cn/flaw/show/CNVD-2021-56801 https://cloud.tencent.com/developer/article/1890116 https://www.kb.cert.org/vuls/id/914124 https://www.sonicwall.com/blog/buffalo-routers-path-traversal-vulnerability https://www.tenable.com/plugins/nessus/154981 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20090.yaml https://www.rapid7.com/db/vulnerabilities/buffalo-cve-2021-20090/
Related Vulnerabilities华天动力OA /OAapp/bfapp/buffalo/renameService SQL 注入漏洞PoCCVE-2021-20090: Buffalo WSR-2533DHPL2 - Path TraversalPoCCVE-2021-20091: Buffalo WSR-2533DHPL2 - Configuration File InjectionPoCCVE-2021-20092: Buffalo WSR-2533DHPL2 - Improper Access Control华天动力-OA /OAapp/bfapp/buffalo/hrApplicationFormService 信息泄露漏洞Buffalo WSR-2533DHPL2 目录遍历漏洞buffalo基于Arcadyan固件的image路径遍历漏洞(CVE-2021-20090)