CVE-2016-7826

Description

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.

Affected products

• BUFFALO INC. / WNC01WHfirmware version 1.0.0.8 and earlier – firmware version 1.0.0.8 and earlier

References

• MISChttps://jvn.jp/en/jp/JVN40613060/index.html
• MISChttp://buffalo.jp/support_s/s20161201.html
• MISChttp://www.securityfocus.com/bid/94648