Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to hijack the authentication of arbitrary users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款Buffalo设备跨站请求伪造漏洞
Vulnerability Description
Buffalo BHR-4GRV2等都是日本巴法络(Buffalo)集团的无线路由器产品。 多款Buffalo设备中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权操作。以下产品及版本受到影响:使用1.04及之前版本固件的Buffalo BHR-4GRV2,使用1.90及之前版本固件的WEX-300,WHR-1166DHP,WHR-300HP2,WHR-600D,WMR-300,使用1.01及之前版本固件的WMR-433。
CVSS Information
N/A
Vulnerability Type
N/A