CVE:CVE-2016-4815
CNNVD:CNNVD-201605-675
Buffalo WZR-600DHP3和WZR-S600DHP都是日本巴法络（Buffalo）集团的无线路由器产品。
使用2.16及之前版本固件的BUFFALO WZR-600DHP3和WZR-S600DHP中存在目录遍历漏洞。远程攻击者可利用该漏洞读取任意文件。
solution:Upgrade buffalo wzr-900dhp2_firmware to a higher version than 2.16,and avoid the version (,2.16]; Upgrade buffalo wzr-600dhp3_firmware to a higher version than 2.16,and avoid the version (,2.16]; Upgrade buffalo wzr-s900dhp_firmware to a higher version than 2.16,and avoid the version (,2.16]; Upgrade buffalo wzr-s600dhp_firmware to a higher version than 2.16,and avoid the version (,2.16]; Upgrade buffalo wzr-900dhp_firmware to a higher version than 1.11,and avoid the version (,1.11]; Upgrade buffalo wzr-600dhp2_firmware to a higher version than 1.13,and avoid the version (,1.13]