CVE-2023-24544

🗓️ 11 Apr 2023 00:00:00Reported by jpcertType

Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files

Reporter	Title	Published	Views	Family All 10
CNNVD	Buffalo network devices 安全漏洞	7 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-24544	11 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-28560	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Buffalo network devices	8 Mar 202306:12	–	jvn
NVD	CVE-2023-24544	11 Apr 202309:15	–	nvd
OSV	CVE-2023-24544	11 Apr 202309:15	–	osv
Prion	Improper access control	11 Apr 202309:15	–	prion
Positive Technologies	PT-2023-19681 · Buffalo · Bs-Gs2008P +5	11 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-24544	23 May 202501:54	–	redhatcve
Vulnrichment	CVE-2023-24544	11 Apr 202300:00	–	vulnrichment

NVD

Vulners

Node

buffalo bs-gsl2024_firmwareRange≤1.10-0.03

AND

buffalo bs-gsl2024Match-

Node

buffalo bs-gsl2016p_firmwareRange≤1.10-0.03

AND

buffalo bs-gsl2016pMatch-

Node

buffalo bs-gsl2016_firmwareRange≤1.10-0.03

AND

buffalo bs-gsl2016Match-

Node

buffalo bs-gs2008_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2008Match-

Node

buffalo bs-gs2016_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2016Match-

Node

buffalo bs-gs2024_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2024Match-

Node

buffalo bs-gs2048_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2048Match-

Node

buffalo bs-gs2008p_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2008pMatch-

Node

buffalo bs-gs2016p_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2016pMatch-

Node

buffalo bs-gs2024p_firmwareRange≤1.0.10.01

AND

buffalo bs-gs2024pMatch-

Node

buffalo bs-gs2016p_firmwareRange<1.1.7.01

AND

buffalo bs-gs2016pMatch-

Node

buffalo bs-gs2016hp_firmwareRange<1.1.7.01

AND

buffalo bs-gs2016hpMatch-

Node

buffalo bs-gs2024p_firmwareRange<1.1.7.01

AND

buffalo bs-gs2024pMatch-

Node

buffalo bs-gs2024hp_firmwareRange<1.1.7.01

AND

buffalo bs-gs2024hpMatch-

[
  {
    "vendor": "BUFFALO INC.",
    "product": "BS-GSL and BS-GS series",
    "versions": [
      {
        "version": "BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU96824262/
buffalo	www.buffalo.jp/news/detail/20230310-01.html

11 Feb 2025 17:15Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18.1

EPSS0.00085

SSVC

CWE-284