← Back

Wnc01wh Firmware

wnc01wh_firmware

Vendor: Buffalotech • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Buffalotech
1Wnc01wh Firmware
May 13, 2026
Jun 9, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.
1Buffalotech
1Wnc01wh Firmware
May 13, 2026
Jun 9, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.
1Buffalotech
1Wnc01wh Firmware
May 13, 2026
Jun 9, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors.
1Buffalotech
1Wnc01wh Firmware
May 13, 2026
Jun 9, 2017
N/A· v4
4.3 MEDIUM· v3
2.3 LOW· v2
Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
1Buffalotech
1Wnc01wh Firmware
May 13, 2026
Jun 9, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operatio...Show more
Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors.Show less
1Buffalotech
1Wnc01wh Firmware
May 13, 2026
Jun 9, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors.