High severity8.8NVD Advisory· Published Jan 22, 2016· Updated Jun 17, 2026
CVE-2016-1134
CVE-2016-1134
Description
Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and earlier, WMR-300 devices with firmware 1.90 and earlier, WMR-433 devices with firmware 1.01 and earlier, and WSR-1166DHP devices with firmware 1.01 and earlier allows remote attackers to hijack the authentication of arbitrary users.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:buffalotech:whr-1166dhp_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:buffalotech:whr-1166dhp_firmware:*:*:*:*:*:*:*:*range: <=1.90
- (no CPE)range: <=1.90
- cpe:2.3:o:buffalotech:whr-300hp2_firmware:*:*:*:*:*:*:*:*Range: <=1.90
- cpe:2.3:o:buffalotech:wsr-1166dhp_firmware:*:*:*:*:*:*:*:*Range: <=1.01
- Range: <=1.04
- Range: <=1.90
Patches
Vulnerability mechanics
References
2- jvn.jp/en/jp/JVN09268287/index.htmlnvdVendor Advisory
- jvndb.jvn.jp/jvndb/JVNDB-2016-000005nvdVendor Advisory
News mentions
0No linked articles in our index yet.