CVE-2016-4816
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote...
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
- Record
CVE-2016-4816- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
- Record
CVE-2016-4816- Updated
- 2026-11-02
EUVDEUVD-2016-5798 No score
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
- Record
EUVD-2016-5798- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-93m3-ch25-858f
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote...
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
- Record
GHSA-93m3-ch25-858f- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- buffalo bhr-4grv firmware
- buffalo dwr-hp-g300nh firmware
- buffalo fs-600dhp firmware
- buffalo hw-450hp-zwe firmware
- buffalo wapm-ag300n firmware
- buffalo wapm-apg300n firmware
- buffalo wcr-300 firmware
- buffalo whr-300 firmware
- buffalo whr-300hp firmware
- buffalo whr-hp-g300n firmware
- buffalo wpl-05g300 firmware
- buffalo wxr-1750dhp firmware
Show 22 moreShow less
- buffalo wxr-1900dhp firmware
- buffalo wzr-1166dhp2 firmware
- buffalo wzr-1166dhp firmware
- buffalo wzr-1750dhp2 firmware
- buffalo wzr-1750dhp firmware
- buffalo wzr-300hp firmware
- buffalo wzr-450hp-cwt firmware
- buffalo wzr-450hp-ub firmware
- buffalo wzr-450hp firmware
- buffalo wzr-600dhp3 firmware
- buffalo wzr-600dhp firmware
- buffalo wzr-900dhp2 firmware
- buffalo wzr-900dhp firmware
- buffalo wzr-d1100h firmware
- buffalo wzr-hp-ag300h firmware
- buffalo wzr-hp-g300nh firmware
- buffalo wzr-hp-g301nh firmware
- buffalo wzr-hp-g302h firmware
- buffalo wzr-hp-g450h firmware
- buffalo wzr-s1750dhp firmware
- buffalo wzr-s600dhp firmware
- buffalo wzr-s900dhp firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-4816 is a medium vulnerability (CVSS 6.5) in Buffalo Bhr-4grv Firmware, published June 19, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. No source names a fixed version.