CVE:CVE-2016-1135
CNNVD:CNNVD-201601-605
Buffalo BHR-4GRV2等都是日本巴法络（Buffalo）集团的无线路由器产品。
多款Buffalo产品中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。以下产品及版本受到影响：使用1.04及之前版本固件的Buffalo BHR-4GRV2，使用1.90及之前版本固件的WEX-300，WHR-1166DHP，WHR-300HP2，WHR-600D，WMR-300，使用1.01及之前版本固件的WMR-433，WSR-1166DHP。
solution:Upgrade buffalotech wmr-300_firmware to a higher version than 1.90,and avoid the version 1.90; Upgrade buffalotech wex-300_firmware to a higher version than 1.90,and avoid the version 1.90; Upgrade buffalotech wmr-433_firmware to a higher version than 1.01,and avoid the version 1.01; Upgrade buffalotech bhr-4grv2_firmware to a higher version than 1.04,and avoid the version 1.04; Upgrade buffalotech whr-300hp2_firmware to a higher version than 1.90,and avoid the version 1.90; Upgrade buffalotech whr-1166dhp_firmware to a higher version than 1.90,and avoid the version 1.90; Upgrade buffalotech whr-600d_firmware to a higher version than 1.90,and avoid the version 1.90; Upgrade buffalotech wsr-1166dhp_firmware to a higher version than 1.01,and avoid the version 1.01