CVE-2016-4816: Buffalo Bhr-4grv Firmware

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.

Affected products

Buffalo Bhr-4grv Firmware: up to and including 1.96
Buffalo Dwr-HP-g300nh Firmware: up to and including 1.81
Buffalo Fs-600dhp Firmware: up to and including 3.34
Buffalo Hw-450hp-Zwe Firmware: up to and including 1.91
Buffalo Wapm-AG300N Firmware: up to and including 2.62
Buffalo Wapm-APG300N Firmware: up to and including 2.62
Buffalo Wcr-300 Firmware: up to and including 1.86
Buffalo Whr-300 Firmware: up to and including 1.96
Buffalo Whr-300hp Firmware: up to and including 1.96
Buffalo Whr-HP-g300n Firmware: up to and including 1.96
Buffalo Wpl-05g300 Firmware: up to and including 1.86
Buffalo Wxr-1750dhp Firmware: up to and including 2.42
Buffalo Wxr-1900dhp Firmware: up to and including 2.34
Buffalo Wzr-1166dhp2 Firmware: up to and including 2.13
Buffalo Wzr-1166dhp Firmware: up to and including 2.13
Buffalo Wzr-1750dhp2 Firmware: up to and including 2.28
Buffalo Wzr-1750dhp Firmware: up to and including 2.28
Buffalo Wzr-300hp Firmware: up to and including 1.96
Buffalo Wzr-450hp-Cwt Firmware: up to and including 1.92
Buffalo Wzr-450hp-Ub Firmware: up to and including 1.96
Buffalo Wzr-450hp Firmware: up to and including 1.97
Buffalo Wzr-600dhp3 Firmware: up to and including 2.16
Buffalo Wzr-600dhp Firmware: version 1.97 only
Buffalo Wzr-900dhp2 Firmware: up to and including 2.16; up to and including 1.13
Buffalo Wzr-900dhp Firmware: up to and including 1.11
and 9 more

Published 2016-06-19. Last modified 2026-06-17.