CVE-2016-1135: XSS
Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1135?
CVE-2016-1135 has been classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2016-1135?
To fix CVE-2016-1135, update the firmware of affected BUFFALO devices to the latest version available that is newer than the vulnerable versions specified.
Which devices are affected by CVE-2016-1135?
CVE-2016-1135 affects BUFFALO BHR-4GRV2 with firmware 1.04 and earlier, and various other models with specific firmware versions up to 1.90.
What types of attacks can CVE-2016-1135 facilitate?
CVE-2016-1135 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages viewed by users.
Is there a timeline for the disclosure of CVE-2016-1135?
CVE-2016-1135 was publicly disclosed in 2016, prompting users to take immediate action to secure their affected devices.