CVE-2016-4816
Medium
Description
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
SeverityMedium
CVSS6.5
Exploit probability—
ProductBuffalo Wzr-600dhp3 Firmware
PublishedJun 19, 2016
First seenJun 19, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| buffalo wzr-600dhp3_firmware | v ≤ 2.16 | — |
| buffalo hw-450hp-zwe_firmware | v ≤ 1.91 | — |
| buffalo wzr-hp-g450h_firmware | v ≤ 1.87 | — |
| buffalo wzr-450hp_firmware | v ≤ 1.97 | — |
| buffalo wzr-900dhp2_firmware | v ≤ 2.16, v ≤ 1.13 | — |
| buffalo wcr-300_firmware | v ≤ 1.86 | — |
| buffalo wzr-450hp-cwt_firmware | v ≤ 1.92 | — |
| buffalo wzr-hp-g301nh_firmware | v ≤ 1.81 | — |
| buffalo wxr-1750dhp_firmware | v ≤ 2.42 | — |
| buffalo wzr-600dhp_firmware | 1.97 | — |
| buffalo wzr-1750dhp_firmware | v ≤ 2.28 | — |
| buffalo wzr-s1750dhp_firmware | v ≤ 2.28 | — |
| buffalo whr-300_firmware | v ≤ 1.96 | — |
| buffalo wzr-s600dhp_firmware | v ≤ 2.16 | — |
| buffalo wzr-hp-g302h_firmware | v ≤ 1.83 | — |
| buffalo wapm-ag300n_firmware | v ≤ 2.62 | — |
| buffalo wzr-hp-ag300h_firmware | v ≤ 1.73 | — |
| buffalo wzr-d1100h_firmware | v ≤ 1.96 | — |
| buffalo wpl-05g300_firmware | v ≤ 1.86 | — |
| buffalo wzr-s900dhp_firmware | v ≤ 2.16 | — |
| buffalo dwr-hp-g300nh_firmware | v ≤ 1.81 | — |
| buffalo whr-300hp_firmware | v ≤ 1.96 | — |
| buffalo wzr-1750dhp2_firmware | v ≤ 2.28 | — |
| buffalo wzr-1166dhp2_firmware | v ≤ 2.13 | — |
| buffalo wzr-300hp_firmware | v ≤ 1.96 | — |
| buffalo wapm-apg300n_firmware | v ≤ 2.62 | — |
| buffalo wxr-1900dhp_firmware | v ≤ 2.34 | — |
| buffalo wzr-900dhp_firmware | v ≤ 1.11 | — |
| buffalo wzr-1166dhp_firmware | v ≤ 2.13 | — |
| buffalo whr-hp-g300n_firmware | v ≤ 1.96 | — |
| buffalo bhr-4grv_firmware | v ≤ 1.96 | — |
| buffalo wzr-450hp-ub_firmware | v ≤ 1.96 | — |
| buffalo wzr-hp-g300nh_firmware | v ≤ 1.81 | — |
| buffalo fs-600dhp_firmware | v ≤ 3.34 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.