What is the severity of CVE-2016-1135?

CVE-2016-1135 has been classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2016-1135?

To fix CVE-2016-1135, update the firmware of affected BUFFALO devices to the latest version available that is newer than the vulnerable versions specified.

Which devices are affected by CVE-2016-1135?

CVE-2016-1135 affects BUFFALO BHR-4GRV2 with firmware 1.04 and earlier, and various other models with specific firmware versions up to 1.90.

What types of attacks can CVE-2016-1135 facilitate?

CVE-2016-1135 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages viewed by users.

Is there a timeline for the disclosure of CVE-2016-1135?

CVE-2016-1135 was publicly disclosed in 2016, prompting users to take immediate action to secure their affected devices.

Vulnerability/
CVE-2016-1135

medium

6.1

CWE

22/1/2016

5/8/2024

CVE-2016-1135: XSS

First published: Fri Jan 22 2016(Updated: )

Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Credit: vultures@jpcert.or.jp

Affected Software	Affected Version	How to fix
Buffalotech Wmr-300
Buffalotech Wmr-300	=1.90
Buffalotech Wex-300 Firmware
Buffalotech Wex-300	=1.90
Buffalotech Wmr-433 Firmware
Buffalo Wmr-433 Firmware	=1.01
Buffalotech Bhr-4grv2 Firmware
Buffalo BHR-4GRV2	=1.04
Buffalotech Whr-300hp2 Firmware
Buffalotech Whr-300hp2 Firmware	=1.90
Buffalotech WHR-1166DHP
Buffalotech WHR-1166DHP Firmware	=1.90
Buffalotech WHR-600D Firmware
Buffalotech WHR-600D Firmware	=1.90
Buffalotech Wsr-1166dhp Firmware
Buffalotech WHR-1166DHP Firmware	=1.01

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-1135?
CVE-2016-1135 has been classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2016-1135?
To fix CVE-2016-1135, update the firmware of affected BUFFALO devices to the latest version available that is newer than the vulnerable versions specified.
Which devices are affected by CVE-2016-1135?
CVE-2016-1135 affects BUFFALO BHR-4GRV2 with firmware 1.04 and earlier, and various other models with specific firmware versions up to 1.90.
What types of attacks can CVE-2016-1135 facilitate?
CVE-2016-1135 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages viewed by users.
Is there a timeline for the disclosure of CVE-2016-1135?
CVE-2016-1135 was publicly disclosed in 2016, prompting users to take immediate action to secure their affected devices.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/buffalotech
canonical/buffalotech wmr-300
version/buffalotech wmr-300/1.90
canonical/buffalotech wex-300 firmware
canonical/buffalotech wex-300
version/buffalotech wex-300/1.90
canonical/buffalotech wmr-433 firmware
canonical/buffalo wmr-433 firmware
version/buffalo wmr-433 firmware/1.01
canonical/buffalotech bhr-4grv2 firmware
canonical/buffalo bhr-4grv2
version/buffalo bhr-4grv2/1.04
canonical/buffalotech whr-300hp2 firmware
version/buffalotech whr-300hp2 firmware/1.90
canonical/buffalotech whr-1166dhp
canonical/buffalotech whr-1166dhp firmware
version/buffalotech whr-1166dhp firmware/1.90
canonical/buffalotech whr-600d firmware
version/buffalotech whr-600d firmware/1.90
canonical/buffalotech wsr-1166dhp firmware
version/buffalotech whr-1166dhp firmware/1.01

Frequently Asked Questions

What is the severity of CVE-2016-1135?
CVE-2016-1135 has been classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2016-1135?
To fix CVE-2016-1135, update the firmware of affected BUFFALO devices to the latest version available that is newer than the vulnerable versions specified.
Which devices are affected by CVE-2016-1135?
CVE-2016-1135 affects BUFFALO BHR-4GRV2 with firmware 1.04 and earlier, and various other models with specific firmware versions up to 1.90.
What types of attacks can CVE-2016-1135 facilitate?
CVE-2016-1135 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages viewed by users.
Is there a timeline for the disclosure of CVE-2016-1135?
CVE-2016-1135 was publicly disclosed in 2016, prompting users to take immediate action to secure their affected devices.

CVE-2016-1135: XSS

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-1135?

How do I fix CVE-2016-1135?

Which devices are affected by CVE-2016-1135?

What types of attacks can CVE-2016-1135 facilitate?

Is there a timeline for the disclosure of CVE-2016-1135?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2016-1135?

How do I fix CVE-2016-1135?

Which devices are affected by CVE-2016-1135?

What types of attacks can CVE-2016-1135 facilitate?

Is there a timeline for the disclosure of CVE-2016-1135?