JVN#48823557: Multiple Buffalo wireless LAN access point devices do not properly perform authentication

WAPM-1166D and WAPM-APG600H provided by BUFFALO INC. are wireless LAN access point devices. WAPM-1166D and WAPM-APG600H do not properly perform authentication (CWE-287).

Impact

An attacker who can access the device may log in via telnet without authentication and access the configuration interface of the device.

Solution

Update the Firmware
Apply the appropriate firmware update according to the information provided by the developer.

Products Affected

• WAPM-1166D firmware Ver.1.2.7 and earlier
• WAPM-APG600H firmware Ver.1.16.1 and earlier