Skip to content
Noroxi

buffalotech records

12 published records for vendor buffalotech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2016-7824
    35Monitor

    Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the d

    HighCVSS 8.8No exploitEPSS 2%

    buffalotech · wnc01wh firmwareJun 9, 2017

  • CVE-2016-7822
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers

    HighCVSS 8.8No exploitEPSS 1%

    buffalotech · wnc01wh firmwareJun 9, 2017

  • CVE-2016-1134
    35Monitor

    Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1

    HighCVSS 8.8No exploitEPSS 1%

    buffalotech · whr-1166dhpJan 22, 2016

  • CVE-2014-9284
    30Monitor

    The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60

    HighCVSS 7.7No exploitEPSS 1%

    buffalotech · wsr-600dhp firmwareJun 8, 2015

  • CVE-2016-7826
    27Monitor

    Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to rea

    MediumCVSS 6.5No exploitEPSS 2%

    buffalotech · wnc01wh firmwareJun 9, 2017

  • CVE-2016-7825
    27Monitor

    Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to rea

    MediumCVSS 6.5No exploitEPSS 2%

    buffalotech · wnc01wh firmwareJun 9, 2017

  • CVE-2016-7821
    27Monitor

    Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management

    MediumCVSS 6.5No exploitEPSS 2%

    buffalotech · wnc01wh firmwareJun 9, 2017

  • CVE-2015-8262
    27Monitor

    Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS q

    MediumCVSS 6.8No exploitEPSS 1%

    buffalotech · airstation extreme n600 firmwareDec 26, 2015

  • CVE-2016-1135
    24Monitor

    Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and

    MediumCVSS 6.1No exploitEPSS 1%

    buffalotech · wmr-300Jan 22, 2016

  • CVE-2011-1324
    23Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers w

    MediumCVSS 5.8No exploitEPSS 0%

    buffalotech · bbr-4hg firmwareMay 9, 2011

  • CVE-2007-4822
    17Monitor

    Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attacke

    MediumCVSS 4.3No exploitEPSS 1%

    buffalotech · airstation whr-g54sSep 11, 2007

  • CVE-2016-7823
    17Monitor

    Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to in

    MediumCVSS 4.3No exploitEPSS 0%

    buffalotech · wnc01wh firmwareJun 9, 2017