CVE-2016-7822

Опубликовано: 09 июн. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors.

Ссылки

http://buffalo.jp/support_s/s20161201.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/94648
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN40613060/index.html
Third Party Advisory
VDB Entry
http://buffalo.jp/support_s/s20161201.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/94648
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN40613060/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:buffalotech:wnc01wh_firmware:*:*:*:*:*:*:*:*

Версия до 1.0.0.8 (включая)

cpe:2.3:h:buffalotech:wnc01wh:-:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.0014

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-h9gv-6f9x-4xg5