JVN#81698369: Multiple Buffalo wireless LAN routers vulnerable to directory traversal

2016-05-27T00:00:00
ID JVN:81698369
Type jvn
Reporter Japan Vulnerability Notes
Modified 2016-05-27T00:00:00

Description

## Description

Multiple wireless LAN routers provided by BUFFALO INC. contain a directory traversal vulnerability (CWE-22).

## Impact

Arbitrary files on the server may be viewed by an attacker who can access the product.

## Solution

Update the Firmware
Apply the appropriate firmware update provided by the developer.

## Products Affected

  • WZR-S600DHP firmware Ver.2.16 and earlier
  • WZR-600DHP3 firmware Ver.2.16 and earlier