CVE-2016-1135 : Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmw

Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published 2016-01-22 11:59:06

Updated 2016-03-11 13:26:23

Source JPCERT/CC

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2016-1135

Buffalotech » Wmr-300 Firmware » Version: 1.90
cpe:2.3:o:buffalotech:wmr-300_firmware:1.90:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Wmr-300 » Version: N/A
Buffalotech » Wex-300 Firmware » Version: 1.90
cpe:2.3:o:buffalotech:wex-300_firmware:1.90:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Wex-300 » Version: N/A
Buffalotech » Wmr-433 Firmware » Version: 1.01
cpe:2.3:o:buffalotech:wmr-433_firmware:1.01:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Wmr-433 » Version: N/A
Buffalotech » Bhr-4grv2 Firmware » Version: 1.04
cpe:2.3:o:buffalotech:bhr-4grv2_firmware:1.04:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Bhr-4grv2 » Version: N/A
Buffalotech » Whr-300hp2 Firmware » Version: 1.90
cpe:2.3:o:buffalotech:whr-300hp2_firmware:1.90:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Whr-300hp2 » Version: N/A
Buffalotech » Whr-1166dhp Firmware » Version: 1.90
cpe:2.3:o:buffalotech:whr-1166dhp_firmware:1.90:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Whr-1166dhp » Version: N/A
Buffalotech » Whr-600d Firmware » Version: 1.90
cpe:2.3:o:buffalotech:whr-600d_firmware:1.90:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Whr-600d » Version: N/A
Buffalotech » Wsr-1166dhp Firmware » Version: 1.01
cpe:2.3:o:buffalotech:wsr-1166dhp_firmware:1.01:*:*:*:*:*:*:*
Matching versions
When used together with: Buffalotech » Wsr-1166dhp » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-1135

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-1135

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.1	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2016-1135

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-1135

http://jvndb.jvn.jp/jvndb/JVNDB-2016-000006

JVNDB-2016-000006 - JVN iPedia - 脆弱性対策情報データベース
Vendor Advisory
http://jvn.jp/en/jp/JVN49225722/index.html

JVN#49225722: Multiple Buffalo network devices vulnerable to cross-site scripting
Vendor Advisory

Jump to

Vulnerability Details : CVE-2016-1135

Products affected by CVE-2016-1135

Exploit prediction scoring system (EPSS) score for CVE-2016-1135

CVSS scores for CVE-2016-1135

CWE ids for CVE-2016-1135

References for CVE-2016-1135