Lucene search

[email protected]CVE-2016-4816

HistoryJun 19, 2016 - 1:59 a.m.

CVE-2016-4816

2016-06-1901:59:00

CWE-200

[email protected]

web.nvd.nist.gov

buffalo

wzr-600dhp3

wzr-s600dhp

firmware

remote attack

credentials

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

67.6%

JSON

BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.

CPENameOperatorVersion
buffalo:wzr-600dhp3_firmwarebuffalo wzr-600dhp3 firmwarele2.16
buffalo:hw-450hp-zwe_firmwarebuffalo hw-450hp-zwe firmwarele1.91
buffalo:wzr-hp-g450h_firmwarebuffalo wzr-hp-g450h firmwarele1.87
buffalo:wzr-450hp_firmwarebuffalo wzr-450hp firmwarele1.97
buffalo:wzr-900dhp2_firmwarebuffalo wzr-900dhp2 firmwarele2.16
buffalo:wcr-300_firmwarebuffalo wcr-300 firmwarele1.86
buffalo:wzr-450hp-cwt_firmwarebuffalo wzr-450hp-cwt firmwarele1.92
buffalo:wzr-hp-g301nh_firmwarebuffalo wzr-hp-g301nh firmwarele1.81
buffalo:wxr-1750dhp_firmwarebuffalo wxr-1750dhp firmwarele2.42
buffalo:wzr-600dhp_firmwarebuffalo wzr-600dhp firmwareeq1.97

CPE	Name	Operator	Version
buffalo:wzr-600dhp3_firmware	buffalo wzr-600dhp3 firmware	le	2.16
buffalo:hw-450hp-zwe_firmware	buffalo hw-450hp-zwe firmware	le	1.91
buffalo:wzr-hp-g450h_firmware	buffalo wzr-hp-g450h firmware	le	1.87
buffalo:wzr-450hp_firmware	buffalo wzr-450hp firmware	le	1.97
buffalo:wzr-900dhp2_firmware	buffalo wzr-900dhp2 firmware	le	2.16
buffalo:wcr-300_firmware	buffalo wcr-300 firmware	le	1.86
buffalo:wzr-450hp-cwt_firmware	buffalo wzr-450hp-cwt firmware	le	1.92
buffalo:wzr-hp-g301nh_firmware	buffalo wzr-hp-g301nh firmware	le	1.81
buffalo:wxr-1750dhp_firmware	buffalo wxr-1750dhp firmware	le	2.42
buffalo:wzr-600dhp_firmware	buffalo wzr-600dhp firmware	eq	1.97

Rows per page:

1-10 of 351

References

buffalo.jp/support_s/s20160527a.html

jvn.jp/en/jp/JVN75813272/index.html

jvndb.jvn.jp/jvndb/JVNDB-2016-000087

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

67.6%

JSON

Related for CVE-2016-4816

jvn1 cvelist1 prion1