CVE-2023-26588

Published: Apr 11, 2023Modified: Feb 11, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier

Affected (18)

Products: Buffalo: Bs Gsl2024 Firmware, Bs Gsl2016p Firmware, Bs Gsl2016 Firmware, Bs Gs2008 Firmware, Bs Gs2016 Firmware, Bs Gs2024 Firmware, Bs Gs2048 Firmware, Bs Gs2008p Firmware, Bs Gs2016p Firmware, Bs Gs2024p Firmware, Bs Gsl2005 Firmware, Bs Gsl2008 Firmware, Bs Gsl2005p Firmware, Bs Gsl2008p Firmware, Bs Gs2016hp Firmware, Bs Gs2024hp Firmware

16 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2024 Firmware	Up to 1.10-0.03

Running on/with	Platform Versions
Buffalo Bs Gsl2024	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2016p Firmware	Up to 1.10-0.03

Running on/with	Platform Versions
Buffalo Bs Gsl2016p	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2016 Firmware	Up to 1.10-0.03

Running on/with	Platform Versions
Buffalo Bs Gsl2016	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2008 Firmware	Up to 1.0.10.01

Running on/with	Platform Versions
Buffalo Bs Gs2008	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2016 Firmware	Up to 1.0.10.01

Running on/with	Platform Versions
Buffalo Bs Gs2016	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2024 Firmware	Up to 1.0.10.01

Running on/with	Platform Versions
Buffalo Bs Gs2024	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2048 Firmware	Up to 1.0.10.01

Running on/with	Platform Versions
Buffalo Bs Gs2048	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2008p Firmware	Up to 1.0.10.01

Running on/with	Platform Versions
Buffalo Bs Gs2008p	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Buffalo Bs Gs2016p Firmware	Up to 1.0.10.01

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Buffalo Bs Gs2024p Firmware	Up to 1.0.10.01

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2005 Firmware	Before 1.12-0.01

Running on/with	Platform Versions
Buffalo Bs Gsl2005	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2008 Firmware	Before 1.12-0.01

Running on/with	Platform Versions
Buffalo Bs Gsl2008	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2005p Firmware	Before 1.11-0.01

Running on/with	Platform Versions
Buffalo Bs Gsl2005p	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gsl2008p Firmware	Before 1.11-0.01

Running on/with	Platform Versions
Buffalo Bs Gsl2008p	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2016p Firmware	Before 1.1.7.01

Running on/with	Platform Versions
Buffalo Bs Gs2016p	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2016hp Firmware	Before 1.1.7.01

Running on/with	Platform Versions
Buffalo Bs Gs2016hp	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2024p Firmware	Before 1.1.7.01

Running on/with	Platform Versions
Buffalo Bs Gs2024p	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Buffalo Bs Gs2024hp Firmware	Before 1.1.7.01

Running on/with	Platform Versions
Buffalo Bs Gs2024hp	All versions

Related CWEs

CWE-668

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (4)

https://jvn.jp/en/vu/JVNVU96824262/

Source: vultures@jpcert.or.jp

PatchThird Party Advisory

https://www.buffalo.jp/news/detail/20230310-01.html

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/vu/JVNVU96824262/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.buffalo.jp/news/detail/20230310-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.