PatchTheCVEbuffalotech vulnerabilities
Recent CVEs affecting buffalotech products. 10 tracked.
buffalotech has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2017-06-09. Highest priority: CVE-2016-7824 (score 50/100).
- CVE-2016-7826 MEDIUM 6.5 UPGRADE Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows
- CVE-2016-7825 MEDIUM 6.5 UPGRADE Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows
- CVE-2016-7824 HIGH 8.8 UPGRADE Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass acce
- CVE-2016-7823 MEDIUM 4.3 UPGRADE Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows
- CVE-2016-7822 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and e
- CVE-2016-7821 MEDIUM 6.5 UPGRADE Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of
- CVE-2016-1135 MEDIUM 6.1 MITIGATE MITIGATE Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300
- CVE-2016-1134 HIGH 8.8 UPGRADE UPGRADE Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, W
- CVE-2015-8262 MEDIUM 6.8 MITIGATE MITIGATE Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID
- CVE-2014-9284 HIGH 7.7 UPGRADE UPGRADE The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1
FAQ
How do I fix buffalotech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is buffalotech being exploited right now?
None of the tracked buffalotech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which buffalotech CVE should I patch first?
CVE-2016-7824 currently ranks highest (50/100): Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass acce.