CVE-2016-1134: CSRF
Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to hijack the authentication of arbitrary users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1134?
CVE-2016-1134 has been rated as a medium severity vulnerability due to the risk of cross-site request forgery.
How do I fix CVE-2016-1134?
To fix CVE-2016-1134, update the firmware on your affected Buffalo devices to the latest version beyond the specified vulnerable firmware versions.
Which Buffalo devices are affected by CVE-2016-1134?
CVE-2016-1134 affects Buffalo BHR-4GRV2, WEX-300, WHR-1166DHP, WHR-300HP2, and WHR-600D devices with specific firmware versions.
Can CVE-2016-1134 be exploited remotely?
Yes, CVE-2016-1134 can potentially be exploited remotely, allowing an attacker to perform unauthorized actions on behalf of the user.
Is there a way to mitigate CVE-2016-1134 if I cannot update my device?
If updating is not possible, limiting access to the devices and employing additional network security measures can help mitigate the risk of CVE-2016-1134.