CVE-2016-1135
Published Jan 22, 2016
Last updated 9 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:wmr-300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2A3F352-8B87-466F-A0FA-BD14B9CF9D2F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:wmr-300_firmware:1.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65304F8F-98C4-46F7-986B-75BEA28B352A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:wex-300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0DA4990B-8BD9-45FD-8398-BA8DC71FDEC3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:wex-300_firmware:1.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A67631F-1D66-41E0-A245-7C9AC5FD3F5B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:wmr-433:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71A0823E-754E-4AF4-AB3D-B1B891373D78"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:wmr-433_firmware:1.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2E6D547-90FC-4F73-BE2C-5BA3CC7A39C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:bhr-4grv2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DF7FB55C-6A22-4750-B44B-19E1427AF251"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:bhr-4grv2_firmware:1.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40031273-04B3-4476-9E21-8F1536B42462"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:whr-300hp2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DBC2CA67-6E1C-4AA1-B3B2-B0CAC8F16BDC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:whr-300hp2_firmware:1.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3766ED4C-2FAB-4664-AACD-76B21156721F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:whr-1166dhp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8D857063-0CB1-4B06-A7E5-39D5A995AB51"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:whr-1166dhp_firmware:1.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A937DB27-F813-4A0A-8706-3DF2E044501A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:whr-600d:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B1267DDE-4D61-4498-9DFD-B429CC49696E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:whr-600d_firmware:1.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DEB6082-C3D8-4DBA-ABFB-1ECAEBF87214"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:buffalotech:wsr-1166dhp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8385DDF8-9E6F-4397-9232-1DD943EBED6D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:buffalotech:wsr-1166dhp_firmware:1.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F70C6F98-1BD0-4A8D-B944-A5FAA5AC6FE2"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]