Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Buffalotech Component: Wnc01wh Firmware Clear all filters
TI-2016-06578 CVE-2016-7826 · GHSA-8h44-wj4c-mp46

Path traversal in BUFFALO INC. WNC01WH

Priority LOW 33

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02219 Published 2017-06-09 No fix listed CWE-22
TI-2016-06577 CVE-2016-7825 · GHSA-8h98-vm58-gmvr

Path traversal in BUFFALO INC. WNC01WH

Priority LOW 33

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02219 Published 2017-06-09 No fix listed CWE-22
TI-2016-06576 CVE-2016-7824 · GHSA-rpjg-xjwq-x9h7

Improper access control in BUFFALO INC. WNC01WH

Priority MEDIUM 41

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01578 Published 2017-06-09 No fix listed CWE-284
TI-2016-06575 CVE-2016-7823 · GHSA-j8gg-3mj2-c9jw

Cross-site scripting in BUFFALO INC. WNC01WH

Priority LOW 21

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 4.3 Adjacent network High privileges User interaction EPSS 0.0048 Published 2017-06-09 No fix listed CWE-79
TI-2016-06574 CVE-2016-7822 · GHSA-h9gv-6f9x-4xg5

Cross-site request forgery in BUFFALO INC. WNC01WH

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operatio…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00977 Published 2017-06-09 No fix listed CWE-352
TI-2016-06573 CVE-2016-7821 · GHSA-93h9-hmfg-qcx2

Improper input validation in BUFFALO INC. WNC01WH

Priority LOW 32

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0175 Published 2017-06-09 No fix listed CWE-20