CVE-2016-7826

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests...

CVE-2016-7821

Buffalo WNC01WH network cameras with firmware ≤ 1.0.0.8 are affected by CVE-2016-7821, a Denial-of-Service against the management screen via unspecified attack vectors. The vulnerability is documented across multiple sources with DoS impact when a user views a malicious page while logged in, pote...

CVE-2016-7825

CVE-2016-7825 describes a directory-traversal vulnerability in Buffalo WNC01WH network cameras, affecting firmware version 1.0.0.8 and earlier. The issue arises in the processing of commands, enabling an authenticated attacker to read arbitrary files on the device. The NVD/JVN entries consistentl...

CVE-2016-7822

Cross-site request forgery CSRF vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors...

CVE-2016-7823

Buffalo WNC01WH network camera is vulnerable to a stored cross-site scripting (XSS) flaw (CVE-2016-7823) present in firmware version 1.0.0.8 and earlier. The issue allows an authenticated attacker to inject arbitrary web script or HTML via unspecified vectors, potentially impacting the logged-in ...

CVE-2016-7826

Buffalo WNC01WH network camera (firmware 1.0.0.8 and earlier) is affected by CVE-2016-7826, a directory traversal vulnerability due to an issue in processing POST requests. An authenticated attacker could read arbitrary files on the device. Root cause described as directory traversal in POST requ...

CVE-2016-7825

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands...

CVE-2016-7821

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors...

CVE-2016-7823

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7822

CVE-2016-7822 affects Buffalo WNC01WH network cameras with firmware version 1.0.0.8 and earlier. The flaw is a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to hijack the authentication of a logged-in user to perform unintended operations via unspecified vectors. A...

CVE-2017-2152

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-2152

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-2152

The CVE-2017-2152 issue affects Buffalo WNC01WH network cameras (firmware 1.0.0.9 and earlier). The vulnerability is an OS command injection (CWE-78) that allows an authenticated attacker to execute arbitrary commands, via unspecified vectors. Impact is execution with the attacker’s privileges; f...

CVE-2017-2152

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

Buffalo WNC01WH Command Injection Vulnerability

Buffalo WNC01WH is a network camera from the Buffalo Group of Japan. A command injection vulnerability exists in the Buffalo WNC01WH. This allows a locally authenticated attacker to perform a command injection attack...

JVN#48790793: WNC01WH vulnerable to OS command injection

WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed by an authenticated attacker. Solution Update the Firmware Update to the latest version of firmware according to the information...

Buffalo WNC01WH Denial of Service Vulnerability

Buffalo WNC01WH is a network camera from the Buffalo Group of Japan. A denial of service vulnerability exists in Buffalo WNC01WH cameras using firmware version 1.0.0.8 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

WNC01WH vulnerable to directory traversal due to an issue in processing commands

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a directory traversal vulnerability due to an issue in processing commands. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer und...

WNC01WH vulnerable to enabling debug option

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains an enabling debug option vulnerability. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...