CVE-2023-26588: High severity buffalo bs-gsl2024 vulnerability
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-26588?
CVE-2023-26588 is a vulnerability that allows an attacker to access the debug function of Buffalo network devices by exploiting hard-coded credentials.
Which Buffalo network devices are affected by CVE-2023-26588?
Buffalo BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, and BS-GSL2016 firmware Ver. 1.10-0.03 and earlier are affected by CVE-2023-26588.
What is the severity of CVE-2023-26588?
CVE-2023-26588 has a severity rating of 7.5 (High).
How can I fix CVE-2023-26588?
To fix CVE-2023-26588, update the affected Buffalo network devices to a version later than 1.10-0.03.
Where can I find more information about CVE-2023-26588?
You can find more information about CVE-2023-26588 on the JVN website and the Buffalo website.