CVE-2023-26588
First published: Tue Apr 11 2023(Updated: )
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Buffalo Bs-gsl2024 | <=1.10-0.03 | |
| Buffalo Bs-gsl2024 Firmware | ||
| All of | ||
| Buffalo Bs-gsl2016p Firmware | <=1.10-0.03 | |
| Buffalo BS-GSL2016P | ||
| All of | ||
| Buffalo Bs-gsl2016 Firmware | <=1.10-0.03 | |
| Buffalo BS-GSL2016 | ||
| All of | ||
| Buffalo BS-GS2008P | <=1.0.10.01 | |
| Buffalo Bs-gs2008 Firmware | ||
| All of | ||
| Buffalo BS-GS2016P | <=1.0.10.01 | |
| Buffalo BS-GS2016 | ||
| All of | ||
| Buffalo Bs-gs2024 | <=1.0.10.01 | |
| Buffalo Bs-gs2024 | ||
| All of | ||
| Buffalo Bs-gs2048 Firmware | <=1.0.10.01 | |
| Buffalo BS-GS2048 | ||
| All of | ||
| Buffalo BS-GS2008P | <=1.0.10.01 | |
| Buffalo BS-GS2008P | ||
| All of | ||
| Buffalo BS-GS2016P | <=1.0.10.01 | |
| Buffalo Bs-gs2016p Firmware | ||
| All of | ||
| Buffalo Bs-gs2024 | <=1.0.10.01 | |
| Buffalo Bs-gs2024p Firmware | ||
| All of | ||
| Buffalo BS-GSL2005 | <1.12-0.01 | |
| Buffalo BS-GSL2005 | ||
| All of | ||
| Buffalo Bs-gsl2008p | <1.12-0.01 | |
| Buffalo BS-GSL2008 | ||
| All of | ||
| Buffalo BS-GSL2005 | <1.11-0.01 | |
| Buffalo BS-GSL2005 | ||
| All of | ||
| Buffalo Bs-gsl2008p | <1.11-0.01 | |
| Buffalo BS-GSL2008 | ||
| All of | ||
| Buffalo BS-GS2016P | <1.1.7.01 | |
| Buffalo Bs-gs2016p Firmware | ||
| All of | ||
| Buffalo BS-GS2016HP | <1.1.7.01 | |
| Buffalo BS-GS2016HP | ||
| All of | ||
| Buffalo Bs-gs2024 | <1.1.7.01 | |
| Buffalo Bs-gs2024p Firmware | ||
| All of | ||
| Buffalo BS-GS2024HP | <1.1.7.01 | |
| Buffalo BS-GS2024HP | ||
| Buffalo Bs-gsl2024 | <=1.10-0.03 | |
| Buffalo Bs-gsl2024 Firmware | ||
| Buffalo Bs-gsl2016p Firmware | <=1.10-0.03 | |
| Buffalo BS-GSL2016P | ||
| Buffalo Bs-gsl2016 Firmware | <=1.10-0.03 | |
| Buffalo BS-GSL2016 | ||
| Buffalo BS-GS2008P | <=1.0.10.01 | |
| Buffalo Bs-gs2008 Firmware | ||
| Buffalo BS-GS2016P | <=1.0.10.01 | |
| Buffalo BS-GS2016 | ||
| Buffalo Bs-gs2024 | <=1.0.10.01 | |
| Buffalo Bs-gs2024 | ||
| Buffalo Bs-gs2048 Firmware | <=1.0.10.01 | |
| Buffalo BS-GS2048 | ||
| Buffalo BS-GS2008P | <=1.0.10.01 | |
| Buffalo BS-GS2008P | ||
| Buffalo BS-GS2016P | <=1.0.10.01 | |
| Buffalo Bs-gs2016p Firmware | ||
| Buffalo Bs-gs2024 | <=1.0.10.01 | |
| Buffalo Bs-gs2024p Firmware | ||
| Buffalo BS-GSL2005 | <1.12-0.01 | |
| Buffalo BS-GSL2005 | ||
| Buffalo Bs-gsl2008p | <1.12-0.01 | |
| Buffalo BS-GSL2008 | ||
| Buffalo BS-GSL2005 | <1.11-0.01 | |
| Buffalo BS-GSL2005 | ||
| Buffalo Bs-gsl2008p | <1.11-0.01 | |
| Buffalo BS-GSL2008 | ||
| Buffalo BS-GS2016P | <1.1.7.01 | |
| Buffalo BS-GS2016HP | <1.1.7.01 | |
| Buffalo BS-GS2016HP | ||
| Buffalo Bs-gs2024 | <1.1.7.01 | |
| Buffalo BS-GS2024HP | <1.1.7.01 | |
| Buffalo BS-GS2024HP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-26588?
CVE-2023-26588 is a vulnerability that allows an attacker to access the debug function of Buffalo network devices by exploiting hard-coded credentials.
Which Buffalo network devices are affected by CVE-2023-26588?
Buffalo BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, and BS-GSL2016 firmware Ver. 1.10-0.03 and earlier are affected by CVE-2023-26588.
What is the severity of CVE-2023-26588?
CVE-2023-26588 has a severity rating of 7.5 (High).
How can I fix CVE-2023-26588?
To fix CVE-2023-26588, update the affected Buffalo network devices to a version later than 1.10-0.03.
Where can I find more information about CVE-2023-26588?
You can find more information about CVE-2023-26588 on the JVN website and the Buffalo website.
- agent/type
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/buffalo
- canonical/buffalo bs-gsl2024
- version/buffalo bs-gsl2024/1.10-0.03
- canonical/buffalo bs-gsl2024 firmware
- canonical/buffalo bs-gsl2016p firmware
- version/buffalo bs-gsl2016p firmware/1.10-0.03
- canonical/buffalo bs-gsl2016p
- canonical/buffalo bs-gsl2016 firmware
- version/buffalo bs-gsl2016 firmware/1.10-0.03
- canonical/buffalo bs-gsl2016
- canonical/buffalo bs-gs2008p
- version/buffalo bs-gs2008p/1.0.10.01
- canonical/buffalo bs-gs2008 firmware
- canonical/buffalo bs-gs2016p
- version/buffalo bs-gs2016p/1.0.10.01
- canonical/buffalo bs-gs2016
- canonical/buffalo bs-gs2024
- version/buffalo bs-gs2024/1.0.10.01
- canonical/buffalo bs-gs2048 firmware
- version/buffalo bs-gs2048 firmware/1.0.10.01
- canonical/buffalo bs-gs2048
- canonical/buffalo bs-gs2016p firmware
- canonical/buffalo bs-gs2024p firmware
- canonical/buffalo bs-gsl2005
- canonical/buffalo bs-gsl2008p
- canonical/buffalo bs-gsl2008
- canonical/buffalo bs-gs2016hp
- canonical/buffalo bs-gs2024hp