Deviceways

Router

Buffalo WSR-2533DHPL2

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

Release listed · 25.12.6

Get OpenWrt firmwarefirmware-selector.openwrt.org
Original project github.com
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Availability recorded by source
Available 2024

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 9.8 (v3.1)

Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote…

CVE-2021-20090

Affected firmware
WSR-2533DHPL2 <=1.02, WSR-2533DHP3 <= 1.24
Fix
Fix details in the linked record
Read tenable CVE record
Details and sources
CVE updated

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.

Security advisory tra 2021 13 — Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 (tenable.com) ↗VU#914124 — Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 (kb.cert.org) ↗
CVE published

Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an…

CVE-2021-20092

Affected firmware
WSR-2533DHPL2 <=1.02, WSR-2533DHP3 <= 1.24
Fix
Fix details in the linked record
Read tenable CVE record
Details and sources
CVE updated

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor.

Security advisory tra 2021 13 — Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 (tenable.com) ↗
CVE published

Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input

CVE-2021-20091

Affected firmware
WSR-2533DHPL2 <=1.02, WSR-2533DHP3 <= 1.24
Fix
Fix details in the linked record
Read tenable CVE record
Details and sources
CVE updated

The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.

Security advisory tra 2021 13 — Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 (tenable.com) ↗
Check more security advisories for this device · CVE.org