← Vulnerability feed

Vulnerability record · CVE-2016-4815 · published 19 June 2016

CVE-2016-4815: Buffalo wzr-900dhp2 firmware path traversal vulnerability

Buffalo · Wzr 900dhp2 Firmware

Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

7.5 CVSS 3.0 High EPSS 2.2% · top 18.0% CWE-22 · Path traversal
7.5CVSS 3.0 base score, v2 5.0
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
6Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://buffalo.jp/support_s/s20160527b.html PatchVendor Advisory
http://jvn.jp/en/jp/JVN81698369/index.html Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000086 Vendor Advisory
http://buffalo.jp/support_s/s20160527b.html PatchVendor Advisory
http://jvn.jp/en/jp/JVN81698369/index.html Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000086 Vendor Advisory

Track CVE-2016-4815 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2022-40966Buffalo wcr-300 firmware improper authentication vulnerabilityAuthentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the de…EPSS 0.35%8.7CVE-2026-32669Buffalo wcr-1166dhpl firmware code injection vulnerabilityCode injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the pr…EPSS 0.48%8.7CVE-2026-32678Buffalo wzr-s900dhp firmware authentication bypass via alternate path vulnerabilityAuthentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without aut…EPSS 0.51%8.6CVE-2026-33280Buffalo wcr-1166dhpl firmware vulnerabilityHidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionali…EPSS 0.67%8.6CVE-2026-27650Buffalo wcr-1166dhpl firmware os command injection vulnerabilityOS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be execut…EPSS 1.4%6.9CVE-2026-33366Buffalo wcr-1166dhpl firmware missing authentication for critical function vulnerabilityMissing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product with…EPSS 0.55%6.8CVE-2022-39044Buffalo wcr-300 firmware vulnerabilityHidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute…EPSS 0.33%6.5CVE-2022-34840Buffalo wzr-300hp firmware hard-coded credentials vulnerabilityUse of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of…EPSS 0.25%

Source: NIST National Vulnerability Database (record CVE-2016-4815), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.