What’s Vulnerable › Vulnerabilities

CVE-2016-4815

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-19 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

• Buffalo Wzr-600Dhp2 Firmware: through 1.13
• Buffalo Wzr-600Dhp3 Firmware: through 2.16
• Buffalo Wzr-900Dhp2 Firmware: through 2.16
• Buffalo Wzr-900Dhp Firmware: through 1.11
• Buffalo Wzr-S600Dhp Firmware: through 2.16
• Buffalo Wzr-S900Dhp Firmware: through 2.16

References

• http://buffalo.jp/support_s/s20160527b.html
• http://jvn.jp/en/jp/JVN81698369/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000086
• http://buffalo.jp/support_s/s20160527b.html
• http://jvn.jp/en/jp/JVN81698369/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000086

Get alerted when CVE-2016-4815 or the next vulnerability affects your stack