Read the docs

Buffalotech

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Buffalotech records in CISA KEV

No Buffalotech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wnc01wh Firmware 6 records MEDIUM Bhr-4grv2 Firmware 3 records LOW Wex-300 Firmware 3 records LOW Whr-1166dhp Firmware 3 records LOW Whr-300hp2 Firmware 3 records LOW Whr-600d Firmware 3 records LOW Wmr-300 Firmware 3 records LOW Wmr-433 Firmware 2 records LOW

Records

6 records in Wnc01wh Firmware · all components

TI-2016-06576 CVE-2016-7824 · GHSA-rpjg-xjwq-x9h7

Improper access control in BUFFALO INC. WNC01WH

Priority MEDIUM 41

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01578 Published 2017-06-09 No fix listed CWE-284
TI-2016-06574 CVE-2016-7822 · GHSA-h9gv-6f9x-4xg5

Cross-site request forgery in BUFFALO INC. WNC01WH

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operatio…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00977 Published 2017-06-09 No fix listed CWE-352
TI-2016-06578 CVE-2016-7826 · GHSA-8h44-wj4c-mp46

Path traversal in BUFFALO INC. WNC01WH

Priority LOW 33

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02219 Published 2017-06-09 No fix listed CWE-22
TI-2016-06577 CVE-2016-7825 · GHSA-8h98-vm58-gmvr

Path traversal in BUFFALO INC. WNC01WH

Priority LOW 33

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02219 Published 2017-06-09 No fix listed CWE-22
TI-2016-06573 CVE-2016-7821 · GHSA-93h9-hmfg-qcx2

Improper input validation in BUFFALO INC. WNC01WH

Priority LOW 32

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0175 Published 2017-06-09 No fix listed CWE-20
TI-2016-06575 CVE-2016-7823 · GHSA-j8gg-3mj2-c9jw

Cross-site scripting in BUFFALO INC. WNC01WH

Priority LOW 21

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 4.3 Adjacent network High privileges User interaction EPSS 0.0048 Published 2017-06-09 No fix listed CWE-79
Open these records in search →