CVE-2016-7822

8.8 highEPSS 1.0%

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2017-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

buffalotech:wnc01wh_firmware

References

http://buffalo.jp/support_s/s20161201.html
http://www.securityfocus.com/bid/94648
https://jvn.jp/en/jp/JVN40613060/index.html
http://buffalo.jp/support_s/s20161201.html
http://www.securityfocus.com/bid/94648

Check your stack JSON