CVE-2016-4815: Path Traversal
Published Jun 19, 2016
·Updated
Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
Affected Software
12 affected components
Buffalo WZR-900DHP2
Buffalo WZR-900DHP2 firmware<=2.16
Buffalo WZR-600DHP3
Buffalo WZR-600DHP3 firmware<=2.16
Buffalo WZR-S900DHP
Buffalo WZR-S900DHP firmware<=2.16
Buffalo WZR-S600DHP
Buffalo WZR-S600DHP firmware<=2.16
Buffalo WZR-900DHP
Buffalo WZR-900DHP firmware<=1.11
Buffalo WZR-600DHP2
Buffalo WZR-600DHP2 firmware<=1.13
Remediation
Patch Available
Event History
Jun 19, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4815?
CVE-2016-4815 is considered a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2016-4815?
To fix CVE-2016-4815, upgrade the firmware of affected Buffalo devices to version 2.17 or later.
3
Which Buffalo devices are affected by CVE-2016-4815?
CVE-2016-4815 affects Buffalo WZR-600DHP3 and WZR-S600DHP devices with firmware versions 2.16 and earlier.
4
What type of vulnerability is CVE-2016-4815?
CVE-2016-4815 is a directory traversal vulnerability that allows unauthorized access to system files.
5
Can CVE-2016-4815 be exploited remotely?
Yes, CVE-2016-4815 can be exploited remotely, allowing attackers to read arbitrary files on the affected devices.