CVE-2015-8262: Buffalotech Airstation Extreme n600

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.

Affected products

• Buffalotech Airstation Extreme n600
• Buffalotech Airstation Extreme n600 Firmware: version 2.09 only; version 2.13 only; version 2.16 only

Published 2015-12-27. Last modified 2026-06-17.