Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: Buffalotech Clear all filters
TI-2016-06578 CVE-2016-7826 · GHSA-8h44-wj4c-mp46

Path traversal in BUFFALO INC. WNC01WH

Priority LOW 33

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02219 Published 2017-06-09 No fix listed CWE-22
TI-2016-06577 CVE-2016-7825 · GHSA-8h98-vm58-gmvr

Path traversal in BUFFALO INC. WNC01WH

Priority LOW 33

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02219 Published 2017-06-09 No fix listed CWE-22
TI-2016-06576 CVE-2016-7824 · GHSA-rpjg-xjwq-x9h7

Improper access control in BUFFALO INC. WNC01WH

Priority MEDIUM 41

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01578 Published 2017-06-09 No fix listed CWE-284
TI-2016-06575 CVE-2016-7823 · GHSA-j8gg-3mj2-c9jw

Cross-site scripting in BUFFALO INC. WNC01WH

Priority LOW 21

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 4.3 Adjacent network High privileges User interaction EPSS 0.0048 Published 2017-06-09 No fix listed CWE-79
TI-2016-06574 CVE-2016-7822 · GHSA-h9gv-6f9x-4xg5

Cross-site request forgery in BUFFALO INC. WNC01WH

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operatio…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00977 Published 2017-06-09 No fix listed CWE-352
TI-2016-06573 CVE-2016-7821 · GHSA-93h9-hmfg-qcx2

Improper input validation in BUFFALO INC. WNC01WH

Priority LOW 32

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0175 Published 2017-06-09 No fix listed CWE-20
TI-2016-01041 CVE-2016-1135 · GHSA-7w22-q86c-6j6q

Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04…

Priority LOW 29

Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00765 Published 2016-01-22 No fix listed CWE-79
TI-2016-01040 CVE-2016-1134 · GHSA-55q7-vv45-8qx5

Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with…

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00541 Published 2016-01-22 No fix listed CWE-352
TI-2014-07539 CVE-2014-9284 · GHSA-v57x-vgfj-8gmx

The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and…

Priority LOW 36

The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers al…

CVSS 2.0HIGH 7.7 Adjacent network Low privileges Interaction — EPSS 0.01062 Published 2015-06-09 No fix listed CWE-78