Sign-up

ID

VAR-201601-0399


CVE

CVE-2016-1134


TITLE

Multiple Buffalo network devices vulnerable to cross-site request forgery

Trust: 0.8

sources: JVNDB: JVNDB-2016-000005

DESCRIPTION

Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to hijack the authentication of arbitrary users. Multiple network devices provided by BUFFALO INC. contain a cross-site request forgery vulnerability (CWE-352). Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. and Masashi Sakai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.If a user views a malicious page while logged in, unintended operations may be conducted. Buffalo BHR-4GRV2 and so on are all wireless router products of Buffalo Group of Japan. A remote attacker could exploit this vulnerability to perform unauthorized operations. This may aid in other attacks. Buffalo BHR-4GRV2 etc

Trust: 2.52

sources: NVD: CVE-2016-1134 // JVNDB: JVNDB-2016-000005 // CNVD: CNVD-2016-00775 // BID: 81550 // VULHUB: VHN-89953

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2016-00775

AFFECTED PRODUCTS

vendor:buffalotechmodel:whr-1166dhpscope:lteversion:1.90

Trust: 1.0

vendor:buffalotechmodel:wmr-300scope:lteversion:1.90

Trust: 1.0

vendor:buffalotechmodel:whr-300hp2scope:lteversion:1.90

Trust: 1.0

vendor:buffalotechmodel:wex-300scope:lteversion:1.90

Trust: 1.0

vendor:buffalotechmodel:whr-600dscope:lteversion:1.90

Trust: 1.0

vendor:buffalotechmodel:wsr-1166dhpscope:lteversion:1.01

Trust: 1.0

vendor:buffalotechmodel:bhr-4grv2scope:lteversion:1.04

Trust: 1.0

vendor:buffalotechmodel:wmr-433scope:lteversion:1.01

Trust: 1.0

vendor:buffalomodel:bhr-4grv2scope:lteversion:ver.1.04

Trust: 0.8

vendor:buffalomodel:wex-300scope:lteversion:ver.1.90

Trust: 0.8

vendor:buffalomodel:whr-1166dhpscope:lteversion:ver.1.90

Trust: 0.8

vendor:buffalomodel:whr-300hp2scope:lteversion:ver.1.90

Trust: 0.8

vendor:buffalomodel:whr-600dscope:lteversion:ver.1.90

Trust: 0.8

vendor:buffalomodel:wmr-300scope:lteversion:ver.1.90

Trust: 0.8

vendor:buffalomodel:wmr-433scope:lteversion:ver.1.01

Trust: 0.8

vendor:buffalomodel:wsr-1166dhpscope:eqversion:ver.1.01

Trust: 0.8

vendor:buffalomodel:bhr-4grv2scope:lteversion:<=1.04

Trust: 0.6

vendor:buffalomodel:wex-300scope:lteversion:<=1.90

Trust: 0.6

vendor:buffalomodel:whr-1166dhpscope:lteversion:<=1.90

Trust: 0.6

vendor:buffalomodel:whr-300hp2scope:lteversion:<=1.90

Trust: 0.6

vendor:buffalomodel:whr-600dscope:lteversion:<=1.90

Trust: 0.6

vendor:buffalomodel:wmr-300scope:lteversion:<=1.90

Trust: 0.6

vendor:buffalomodel:wmr-433scope:lteversion:<=1.01

Trust: 0.6

vendor:buffalomodel:wsr-1166dhpscope:lteversion:<=1.01

Trust: 0.6

vendor:buffalotechmodel:whr-600dscope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:whr-300hp2scope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:wex-300scope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:whr-1166dhpscope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:wmr-300scope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:wsr-1166dhpscope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:wmr-433scope:eqversion: -

Trust: 0.6

vendor:buffalotechmodel:bhr-4grv2scope:eqversion: -

Trust: 0.6

vendor:buffalomodel:technology wsr-1166dhpscope:eqversion:1.01

Trust: 0.3

vendor:buffalomodel:technology wmr-433scope:eqversion:1.01

Trust: 0.3

vendor:buffalomodel:technology wmr-300scope:eqversion:1.90

Trust: 0.3

vendor:buffalomodel:technology wmr-300scope:eqversion:1.60

Trust: 0.3

vendor:buffalomodel:technology whr-600dscope:eqversion:1.90

Trust: 0.3

vendor:buffalomodel:technology whr-600dscope:eqversion:1.80

Trust: 0.3

vendor:buffalomodel:technology whr-600dscope:eqversion:1.70

Trust: 0.3

vendor:buffalomodel:technology whr-600dscope:eqversion:1.60

Trust: 0.3

vendor:buffalomodel:technology whr-300hp2scope:eqversion:1.90

Trust: 0.3

vendor:buffalomodel:technology whr-300hp2scope:eqversion:1.80

Trust: 0.3

vendor:buffalomodel:technology whr-300hp2scope:eqversion:1.70

Trust: 0.3

vendor:buffalomodel:technology whr-300hp2scope:eqversion:1.60

Trust: 0.3

vendor:buffalomodel:technology whr-1166dhpscope:eqversion:1.90

Trust: 0.3

vendor:buffalomodel:technology whr-1166dhpscope:eqversion:1.80

Trust: 0.3

vendor:buffalomodel:technology whr-1166dhpscope:eqversion:1.70

Trust: 0.3

vendor:buffalomodel:technology whr-1166dhpscope:eqversion:1.60

Trust: 0.3

vendor:buffalomodel:technology wex-300scope:eqversion:1.90

Trust: 0.3

vendor:buffalomodel:technology wex-300scope:eqversion:1.60

Trust: 0.3

vendor:buffalomodel:technology bhr-4grv2scope:eqversion:1.04

Trust: 0.3

sources: CNVD: CNVD-2016-00775 // BID: 81550 // JVNDB: JVNDB-2016-000005 // CNNVD: CNNVD-201601-604 // NVD: CVE-2016-1134

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-1134
value: HIGH

Trust: 1.0

IPA: JVNDB-2016-000005
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2016-00775
value: LOW

Trust: 0.6

CNNVD: CNNVD-201601-604
value: MEDIUM

Trust: 0.6

VULHUB: VHN-89953
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-1134
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

IPA: JVNDB-2016-000005
severity: LOW
baseScore: 2.6
vectorString: AV:N/AC:H/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2016-00775
severity: LOW
baseScore: 2.6
vectorString: AV:N/AC:H/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 4.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-89953
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-1134
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.0

IPA: JVNDB-2016-000005
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2016-00775 // VULHUB: VHN-89953 // JVNDB: JVNDB-2016-000005 // CNNVD: CNNVD-201601-604 // NVD: CVE-2016-1134

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.9

sources: VULHUB: VHN-89953 // JVNDB: JVNDB-2016-000005 // NVD: CVE-2016-1134

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201601-604

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-201601-604

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-000005

PATCH
title:BUFFALO INC. websiteurl:http://buffalo.jp/support_s/s20141030_1.html
Trust: 0.8
title:Patches for cross-site request forgery vulnerabilities for multiple Buffalo devicesurl:https://www.cnvd.org.cn/patchInfo/show/71069
Trust: 0.6
title:Multiple Buffalo Fixing measures for device cross-site request forgery vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59922
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2016-00775 // 
            
            
            
            JVNDB: JVNDB-2016-000005 // 
            
            
            
            CNNVD: CNNVD-201601-604

EXTERNAL IDS
db:NVDid:CVE-2016-1134
Trust: 3.4
db:JVNid:JVN09268287
Trust: 2.8
db:JVNDBid:JVNDB-2016-000005
Trust: 2.5
db:CNNVDid:CNNVD-201601-604
Trust: 0.7
db:CNVDid:CNVD-2016-00775
Trust: 0.6
db:BIDid:81550
Trust: 0.4
db:VULHUBid:VHN-89953
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2016-00775 // 
            
            
            
            VULHUB: VHN-89953 // 
            
            
            
            BID: 81550 // 
            
            
            
            JVNDB: JVNDB-2016-000005 // 
            
            
            
            CNNVD: CNNVD-201601-604 // 
            
            
            
            NVD: CVE-2016-1134

REFERENCES
url:http://jvn.jp/en/jp/jvn09268287/index.html
Trust: 2.8
url:http://jvndb.jvn.jp/jvndb/jvndb-2016-000005
Trust: 1.7
url:https://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-1134
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1134
Trust: 0.8
url:http://www.buffalotech.com/products/wireless/wireless-n-routers-access-points/
Trust: 0.3
url:http://www.buffalotech.com/
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2016-00775 // 
            
            
            
            VULHUB: VHN-89953 // 
            
            
            
            BID: 81550 // 
            
            
            
            JVNDB: JVNDB-2016-000005 // 
            
            
            
            CNNVD: CNNVD-201601-604 // 
            
            
            
            NVD: CVE-2016-1134

CREDITS
Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. and Masashi Sakai
Trust: 0.3
sources:
            
            
            BID: 81550

SOURCES
db:CNVDid:CNVD-2016-00775
db:VULHUBid:VHN-89953
db:BIDid:81550
db:JVNDBid:JVNDB-2016-000005
db:CNNVDid:CNNVD-201601-604
db:NVDid:CVE-2016-1134

LAST UPDATE DATE
2024-11-23T21:54:45.386000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2016-00775date:2016-02-03T00:00:00
db:VULHUBid:VHN-89953date:2016-03-14T00:00:00
db:BIDid:81550date:2016-01-22T00:00:00
db:JVNDBid:JVNDB-2016-000005date:2016-03-10T00:00:00
db:CNNVDid:CNNVD-201601-604date:2016-01-25T00:00:00
db:NVDid:CVE-2016-1134date:2024-11-21T02:45:49.897

SOURCES RELEASE DATE
db:CNVDid:CNVD-2016-00775date:2016-02-03T00:00:00
db:VULHUBid:VHN-89953date:2016-01-22T00:00:00
db:BIDid:81550date:2016-01-22T00:00:00
db:JVNDBid:JVNDB-2016-000005date:2016-01-22T00:00:00
db:CNNVDid:CNNVD-201601-604date:2016-01-25T00:00:00
db:NVDid:CVE-2016-1134date:2016-01-22T11:59:05.117