CVE-2016-4816 (bhr-4grv_firmware, dwr-hp-g300nh_firmware, fs-600dhp_firmware, hw-450hp-zwe_firmware, wapm-ag300n_firmware, wapm-apg300n_firmware, wcr-300_firmware, whr-300_firmware, whr-300hp_firmware, whr-hp-g300n_firmware, wpl-05g300_firmware, wxr-1750dhp_firmware, wxr-1900dhp_firmware, wzr-1166dhp_firmware, wzr-1166dhp2_firmware, wzr-1750dhp_firmware, wzr-1750dhp2_firmware, wzr-300hp_firmware, wzr-450hp-cwt_firmware, wzr-450hp-ub_firmware, wzr-450hp_firmware, wzr-600dhp_firmware, wzr-600dhp3_firmware, wzr-900dhp_firmware, wzr-900dhp2_firmware, wzr-d1100h_firmware, wzr-hp-ag300h_firmware, wzr-hp-g300nh_firmware, wzr-hp-g301nh_firmware, wzr-hp-g302h_firmware, wzr-hp-g450h_firmware, wzr-s1750dhp_firmware, wzr-s600dhp_firmware, wzr-s900dhp_firmware)
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.