Lucene search

MitreCVE-2023-39620

HistorySep 08, 2023 - 3:15 a.m.

CVE-2023-39620

2023-09-0803:15:08

mitre

web.nvd.nist.gov

buffalo america

terastation nas

ts5410r

vulnerability

cve-2023-39620

information disclosure

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

50.5%

JSON

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function.

Affected configurations

Nvd

Node

buffaloterastation_nas_5410r_firmwareMatch5.00-0.07

AND

buffaloterastation_nas_5410rMatch-

VendorProductVersionCPE
buffaloterastation_nas_5410r_firmware5.00-0.07cpe:2.3:o:buffalo:terastation_nas_5410r_firmware:5.00-0.07:*:*:*:*:*:*:*
buffaloterastation_nas_5410r-cpe:2.3:h:buffalo:terastation_nas_5410r:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
buffalo	terastation_nas_5410r_firmware	5.00-0.07	cpe:2.3:o:buffalo:terastation_nas_5410r_firmware:5.00-0.07:::::::*
buffalo	terastation_nas_5410r	-	cpe:2.3:h:buffalo:terastation_nas_5410r:-:::::::*

References

github.com/bcross520/bcross520.github.io/wiki/Buffalo-Terastation-NAS-Disabled-guest-built%E2%80%90in-account-allows-for-SMB%5CRPC-device-enumeration

github.com/bcross520/bcross520.github.io/wiki/Buffalo-Terastation-NAS-Disabled-guest-built%E2%80%90in-account-allows-for-SMB%5CRPC-device-enumeration.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

50.5%

JSON

Related for CVE-2023-39620