Sign-up

ID

VAR-201706-0097


CVE

CVE-2016-7822


TITLE

WNC01WH vulnerable to cross-site request forgery

Trust: 0.8

sources: JVNDB: JVNDB-2016-000237

DESCRIPTION

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors. WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a cross-site request forgery vulnerability. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.If a user views a malicious page while logged-in, unintended operations may be conducted. Buffalo WNC01WH camera is prone to the following security vulnerabilities: 1. A denial-of-service vulnerability 2. An HTML-injection vulnerability 4. A security bypass vulnerability 5. Multiple directory-traversal vulnerabilities An attacker can exploit these issues to perform unauthorized actions, bypass security restrictions, cause denial-of-service conditions, execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials or gain access to sensitive information. Buffalo WNC01WH firmware version 1.0.0.8 and prior are vulnerable. Buffalo WNC01WH is a network camera of Japan Buffalo Group. A remote attacker could exploit this vulnerability to perform unauthorized operations

Trust: 1.98

sources: NVD: CVE-2016-7822 // JVNDB: JVNDB-2016-000237 // BID: 94648 // VULHUB: VHN-96642

AFFECTED PRODUCTS

vendor:buffalotechmodel:wnc01whscope:lteversion:1.0.0.8

Trust: 1.0

vendor:buffalomodel:wnc01whscope:lteversion:version 1.0.0.8

Trust: 0.8

vendor:buffalotechmodel:wnc01whscope:eqversion:1.0.0.8

Trust: 0.6

vendor:buffalomodel:wnc01whscope:eqversion:1.0.0.8

Trust: 0.3

vendor:buffalomodel:wnc01whscope:eqversion:1.0.0.5

Trust: 0.3

vendor:buffalomodel:wnc01whscope:eqversion:1.0.0.4

Trust: 0.3

vendor:buffalomodel:wnc01whscope:neversion:1.0.0.9

Trust: 0.3

sources: BID: 94648 // JVNDB: JVNDB-2016-000237 // CNNVD: CNNVD-201612-087 // NVD: CVE-2016-7822

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-7822
value: HIGH

Trust: 1.0

IPA: JVNDB-2016-000237
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201612-087
value: MEDIUM

Trust: 0.6

VULHUB: VHN-96642
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-7822
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

IPA: JVNDB-2016-000237
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:H/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-96642
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-7822
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.0

IPA: JVNDB-2016-000237
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-96642 // JVNDB: JVNDB-2016-000237 // CNNVD: CNNVD-201612-087 // NVD: CVE-2016-7822

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.9

sources: VULHUB: VHN-96642 // JVNDB: JVNDB-2016-000237 // NVD: CVE-2016-7822

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201612-087

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-201612-087

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-000237

PATCH
title:BUFFALO INC. websiteurl:http://buffalo.jp/support_s/s20161201.html
Trust: 0.8
title:Buffalo WNC01WH Fixes for cross-site request forgery vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=66138
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2016-000237 // 
            
            
            
            CNNVD: CNNVD-201612-087

EXTERNAL IDS
db:JVNid:JVN40613060
Trust: 2.8
db:NVDid:CVE-2016-7822
Trust: 2.8
db:BIDid:94648
Trust: 2.0
db:JVNDBid:JVNDB-2016-000237
Trust: 0.8
db:CNNVDid:CNNVD-201612-087
Trust: 0.7
db:VULHUBid:VHN-96642
Trust: 0.1
sources:
            
            
            VULHUB: VHN-96642 // 
            
            
            
            BID: 94648 // 
            
            
            
            JVNDB: JVNDB-2016-000237 // 
            
            
            
            CNNVD: CNNVD-201612-087 // 
            
            
            
            NVD: CVE-2016-7822

REFERENCES
url:https://jvn.jp/en/jp/jvn40613060/index.html
Trust: 2.5
url:http://www.securityfocus.com/bid/94648
Trust: 1.7
url:http://buffalo.jp/support_s/s20161201.html
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-7822
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2016-7822
Trust: 0.8
url:http://buffalo.jp/
Trust: 0.3
url:http://jvn.jp/en/jp/jvn40613060/index.html 
Trust: 0.3
url:http://buffalo.jp/support_s/s20161201.html 
Trust: 0.3
sources:
            
            
            VULHUB: VHN-96642 // 
            
            
            
            BID: 94648 // 
            
            
            
            JVNDB: JVNDB-2016-000237 // 
            
            
            
            CNNVD: CNNVD-201612-087 // 
            
            
            
            NVD: CVE-2016-7822

CREDITS
Toshitsugu Yoneyama of Mitsui Bussan Secure Directions
Trust: 0.9
sources:
            
            
            BID: 94648 // 
            
            
            
            CNNVD: CNNVD-201612-087

SOURCES
db:VULHUBid:VHN-96642
db:BIDid:94648
db:JVNDBid:JVNDB-2016-000237
db:CNNVDid:CNNVD-201612-087
db:NVDid:CVE-2016-7822

LAST UPDATE DATE
2025-04-20T23:16:08.397000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-96642date:2017-06-15T00:00:00
db:BIDid:94648date:2016-12-20T02:05:00
db:JVNDBid:JVNDB-2016-000237date:2017-11-27T00:00:00
db:CNNVDid:CNNVD-201612-087date:2017-06-12T00:00:00
db:NVDid:CVE-2016-7822date:2025-04-20T01:37:25.860

SOURCES RELEASE DATE
db:VULHUBid:VHN-96642date:2017-06-09T00:00:00
db:BIDid:94648date:2016-12-02T00:00:00
db:JVNDBid:JVNDB-2016-000237date:2016-12-02T00:00:00
db:CNNVDid:CNNVD-201612-087date:2016-12-06T00:00:00
db:NVDid:CVE-2016-7822date:2017-06-09T16:29:00.937