Lucene search

JpcertCVE-2016-7825

HistoryJun 09, 2017 - 4:29 p.m.

CVE-2016-7825

2017-06-0916:29:01

CWE-22

jpcert

web.nvd.nist.gov

cve-2016-7825

directory traversal

buffalo wnc01wh

firmware

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

39.2%

JSON

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.

Affected configurations

Nvd

Vulners

Node

buffalotechwnc01wh_firmwareRange≤1.0.0.8

AND

buffalotechwnc01whMatch-

VendorProductVersionCPE
buffalotechwnc01wh_firmware*cpe:2.3:o:buffalotech:wnc01wh_firmware:*:*:*:*:*:*:*:*
buffalotechwnc01wh-cpe:2.3:h:buffalotech:wnc01wh:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
buffalotech	wnc01wh_firmware	*	cpe:2.3:o:buffalotech:wnc01wh_firmware::::::::
buffalotech	wnc01wh	-	cpe:2.3:h:buffalotech:wnc01wh:-:::::::*

CNA Affected

[
  {
    "product": "WNC01WH",
    "vendor": "BUFFALO INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.0.0.8 and earlier"
      }
    ]
  }
]

References

buffalo.jp/support_s/s20161201.html

www.securityfocus.com/bid/94648

jvn.jp/en/jp/JVN40613060/index.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

39.2%

JSON

Related for CVE-2016-7825