Directory traversal

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests...

Directory traversal

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands...

CVE-2016-7823

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors...

CVE-2016-7825

CVE-2016-7825 describes a directory-traversal vulnerability in Buffalo WNC01WH network cameras, affecting firmware version 1.0.0.8 and earlier. The issue arises in the processing of commands, enabling an authenticated attacker to read arbitrary files on the device. The NVD/JVN entries consistentl...

CVE-2016-7824

CVE-2016-7824 affects Buffalo NC01WH (WNC01WH) devices with firmware 1.0.0.8 and earlier. The issue allows an authenticated attacker to bypass access restrictions to enable the debug option via unspecified vectors. Related sources in the set confirm multiple vulnerabilities in the same device fam...

CVE-2016-7821

Buffalo WNC01WH network cameras with firmware ≤ 1.0.0.8 are affected by CVE-2016-7821, a Denial-of-Service against the management screen via unspecified attack vectors. The vulnerability is documented across multiple sources with DoS impact when a user views a malicious page while logged in, pote...

CVE-2016-7823

Buffalo WNC01WH network camera is vulnerable to a stored cross-site scripting (XSS) flaw (CVE-2016-7823) present in firmware version 1.0.0.8 and earlier. The issue allows an authenticated attacker to inject arbitrary web script or HTML via unspecified vectors, potentially impacting the logged-in ...

CVE-2016-7824

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...

CVE-2016-7822

CVE-2016-7822 affects Buffalo WNC01WH network cameras with firmware version 1.0.0.8 and earlier. The flaw is a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to hijack the authentication of a logged-in user to perform unintended operations via unspecified vectors. A...

CVE-2016-7826

Buffalo WNC01WH network camera (firmware 1.0.0.8 and earlier) is affected by CVE-2016-7826, a directory traversal vulnerability due to an issue in processing POST requests. An authenticated attacker could read arbitrary files on the device. Root cause described as directory traversal in POST requ...

CVE-2016-7822

Cross-site request forgery CSRF vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors...

CVE-2016-7823

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7825

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands...

CVE-2016-7826

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests...

CVE-2016-7821

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors...

Buffalo WNC01WH Command Injection Vulnerability

Buffalo WNC01WH is a network camera from the Buffalo Group of Japan. A command injection vulnerability exists in the Buffalo WNC01WH. This allows a locally authenticated attacker to perform a command injection attack...

Buffalo routing product suffers from a generic cookie spoofing login vulnerability

Buffalo is a router manufactured by an American company. A generic cookie forgery login vulnerability exists in Buffalo routing products, which can be exploited by an attacker to modify cookie information, bypass login authentication to log in to the WEB console, and gain control of the router...

Buffalo WNC01WH Denial of Service Vulnerability

Buffalo WNC01WH is a network camera from the Buffalo Group of Japan. A denial of service vulnerability exists in Buffalo WNC01WH cameras using firmware version 1.0.0.8 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

JVN#40613060: Multiple vulnerabilities in WNC01WH

WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains multiple vulnerabilities listed below. Denial-of-service DoS - CVE-2016-7821 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H| Base Score: 6.5 CVSS v2| AV:N/AC:H/Au:N/C:N/I:N/A:C| Base...