Medium severity · published Jun 19, 2016
CVE-2016-4816
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified…
6.5
CVSS
1.4%
EPSS
No
On KEV
Description
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bhr-4grv Firmware · Buffalo
through 1.96 · source: NVD
DF
Dwr-hp-g300nh Firmware · Buffalo
through 1.81 · source: NVD
FF
Fs-600dhp Firmware · Buffalo
through 3.34 · source: NVD
HF
Hw-450hp-zwe Firmware · Buffalo
through 1.91 · source: NVD
WF
Wapm-ag300n Firmware · Buffalo
through 2.62 · source: NVD
WF
Wapm-apg300n Firmware · Buffalo
through 2.62 · source: NVD
WF
Wcr-300 Firmware · Buffalo
through 1.86 · source: NVD
WF
Whr-300 Firmware · Buffalo
through 1.96 · source: NVD
WF
Whr-300hp Firmware · Buffalo
through 1.96 · source: NVD
WF
Whr-hp-g300n Firmware · Buffalo
through 1.96 · source: NVD
WF
Wpl-05g300 Firmware · Buffalo
through 1.86 · source: NVD
WF
Wxr-1750dhp Firmware · Buffalo
through 2.42 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4816
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4816
Patch
http://buffalo.jp/support_s/s20160527a.html
Vendor Advisory
http://jvn.jp/en/jp/JVN75813272/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087
More from Bhr-4grv Firmware
8.8
CVE-2022-40966
Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device
8.8
CVE-2021-3512
Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99…
6.8
CVE-2022-39044
Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command
4.3
CVE-2021-3511
Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and…