Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 5 min 148 bronnen 6 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-1134

HIGH · 8.8 CVSS Gepubliceerd: CWE-352

Beschrijving NL

Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attack ers to hijack the authentication of arbitrary users.

Origineel (Engels) tonen

Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Vendors

Buffalotech

Affected products

Whr-1166dhp Whr-1166dhp Firmware Whr-300hp2 Whr-300hp2 Firmware Wmr-300 Wmr-300 Firmware Bhr-4grv2 Bhr-4grv2 Firmware Wex-300 Wex-300 Firmware Whr-600d Whr-600d Firmware Wmr-433 Wmr-433 Firmware Wsr-1166dhp Wsr-1166dhp Firmware

References