CSRF Vulnerability in Buffalo WNC01WH Devices

CVE-2016-7822

What is CVE-2016-7822?

A cross-site request forgery (CSRF) vulnerability exists in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier. This vulnerability allows remote attackers to exploit the authentication session of a logged-in user, potentially leading to unauthorized actions being performed without the user's consent. Unsuspecting users who are tricked into navigating to a malicious site can inadvertently trigger requests that the device accepts as legitimate, enabling attackers to manipulate device settings or perform other unintended operations.

References