CVE-2016-7826

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.

Score

CVSS 3.0 6.5 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-06-09

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Wnc01wh (Buffalo Inc.)
• Wnc01wh Firmware (Buffalotech)

References

• http://buffalo.jp/support_s/s20161201.html
• http://www.securityfocus.com/bid/94648
• https://jvn.jp/en/jp/JVN40613060/index.html