Lucene search

PRIOn knowledge basePRION:CVE-2023-24464

HistoryApr 11, 2023 - 9:15 a.m.

Cross site scripting

2023-04-1109:15:00

PRIOn knowledge base

www.prio-n.com

stored xss

buffalo network

arbitrary javascript

web management

bs-gs2008

bs-gs2016

bs-gs2024

bs-gs2048

bs-gs2008p

bs-gs2016p

bs-gs2024p

vulnerability

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user’s web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier

CPENameOperatorVersion
bs-gs2008_firmwarele1.0.10.01
bs-gs2008p_firmwarele1.0.10.01
bs-gs2016_firmwarele1.0.10.01
bs-gs2016p_firmwarele1.0.10.01
bs-gs2024_firmwarele1.0.10.01
bs-gs2024p_firmwarele1.0.10.01
bs-gs2048_firmwarele1.0.10.01

Name	Operator	Version
bs-gs2008_firmware	le	1.0.10.01
bs-gs2008p_firmware	le	1.0.10.01
bs-gs2016_firmware	le	1.0.10.01
bs-gs2016p_firmware	le	1.0.10.01
bs-gs2024_firmware	le	1.0.10.01
bs-gs2024p_firmware	le	1.0.10.01
bs-gs2048_firmware	le	1.0.10.01

References

jvn.jp/en/vu/JVNVU96824262/

www.buffalo.jp/news/detail/20230310-01.html