VulnerabilityModified
CVE-2016-4816
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
MEDIUM 6.5EPSS 1.43%
Does this matter?
Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own.
Description
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 1.43% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- buffalo/wzr-600dhp3 firmware · buffalo/hw-450hp-zwe firmware · buffalo/wzr-hp-g450h firmware · buffalo/wzr-450hp firmware · buffalo/wzr-900dhp2 firmware · buffalo/wcr-300 firmware · buffalo/wzr-450hp-cwt firmware · buffalo/wzr-hp-g301nh firmware · buffalo/wxr-1750dhp firmware · buffalo/wzr-600dhp firmware · buffalo/wzr-1750dhp firmware · buffalo/wzr-s1750dhp firmware · buffalo/whr-300 firmware · buffalo/wzr-s600dhp firmware · buffalo/wzr-hp-g302h firmware · buffalo/wapm-ag300n firmware · buffalo/wzr-hp-ag300h firmware · buffalo/wzr-d1100h firmware · buffalo/wpl-05g300 firmware · buffalo/wzr-s900dhp firmware · +14 more
- Source
- vultures@jpcert.or.jp
References
- http://buffalo.jp/support_s/s20160527a.htmlPatch, Vendor Advisory
- http://jvn.jp/en/jp/JVN75813272/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087Vendor Advisory
- http://buffalo.jp/support_s/s20160527a.htmlPatch, Vendor Advisory
- http://jvn.jp/en/jp/JVN75813272/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.