BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-5798
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087