CVE-2016-7822

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-06-09

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Wnc01wh (Buffalo Inc.)
• Wnc01wh Firmware (Buffalotech)

References

• http://buffalo.jp/support_s/s20161201.html
• http://www.securityfocus.com/bid/94648
• https://jvn.jp/en/jp/JVN40613060/index.html