CVE-2016-7823: Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier all...

Security readout for executives and security teams

This CVE affects Buffalo WNC01WH devices running firmware 1.0.0.8 or earlier. An authenticated attacker could inject script or HTML into the device’s web interface. The sources do not provide severity scoring, exploit evidence, or detailed impact, so urgency depends on whether these devices are still deployed and who can log in. Exposure is limited to environments using Buffalo WNC01WH devices on firmware 1.0.0.8 or earlier. Risk increases if the device management interface is reachable by many authenticated users or exposed beyond a trusted administration network. Internet exposure is not established by the provided sources. Prioritize inventory and containment over emergency response. There is no provided evidence of active exploitation, but affected devices may be old and operationally forgotten. Confirm whether the product exists in the environment, then patch, restrict, isolate, or retire it based on vendor guidance. Mitigation focus: Identify all Buffalo WNC01WH devices and record firmware versions.; Check Buffalo and JVN guidance for available firmware updates or vendor instructions.; Restrict device administration access to trusted management networks only..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.