CVE-2016-7826 Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.
MediumCVSS 6.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| buffalotech wnc01wh firmware | <= 1.0.0.8 | No fix listed |
| BUFFALO INC. WNC01WH | = firmware version 1.0.0.8 and earlier | No fix listed |
References
- buffalo.jp third-party-advisory vdb-entry
- 94648 third-party-advisory vdb-entry
- JVN#40613060 third-party-advisory vdb-entry