Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24520 State: PUBLISHED Published: 2023-07-06T14:53:30.444Z Last Updated: 2025-11-04T19:14:45.135Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-77 Description: Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the trace tool utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com
CVE ID: CVE-2023-24521 State: PUBLISHED Published: 2023-02-14T03:16:44.948Z Last Updated: 2025-03-21T14:03:26.159Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP Products: NetWeaver AS ABAP (BSP Framework) Problem Types: CWE-79 Description: Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application. Additional
intended data. This may lead to a limited impact on the confidentiality and the integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3269151 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24522 State: PUBLISHED Published: 2023-02-14T03:17:02.758Z Last Updated: 2025-03-20T20:31:30.924Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP Products: NetWeaver AS ABAP (BSP Framework) Problem Types: CWE-79 Description: Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application. Additional Analyst Notes: - CVE Program Co
a limited impact on the confidentiality and the integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3269118 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24523 State: PUBLISHED Published: 2023-02-14T03:17:37.098Z Last Updated: 2024-08-02T10:56:04.370Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP Products: Host Agent Service Problem Types: CWE-668 Description: An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can submit a crafted ConfigureOutsideDiscovery request with an operating system command which will be executed with administrator privileges. The OS command can read or modify any user or system data and can make the system unavailable. Additional Analyst Notes: - CVE Program Containe
or modify any user or system data and can make the system unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3285757 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24524 State: PUBLISHED Published: 2023-02-14T03:17:59.139Z Last Updated: 2025-03-20T20:30:54.464Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP Products: S/4 HANA (Map Treasury Correspondence Format Data) Problem Types: CWE-862 Description: SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2985905 - https://ww
Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2985905 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24525 State: PUBLISHED Published: 2023-02-14T03:18:24.206Z Last Updated: 2025-03-20T20:22:57.501Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP Products: CRM (WebClient UI) Problem Types: CWE-79 Description: SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2788178
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2788178 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24526 State: PUBLISHED Published: 2023-03-14T04:38:03.702Z Last Updated: 2025-02-27T18:15:15.151Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP Products: NetWeaver AS Java for Classload Service Problem Types: CWE-306 Description: SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
er can read non-sensitive server data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3288394 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24527 State: PUBLISHED Published: 2023-04-11T02:33:38.624Z Last Updated: 2025-02-07T19:33:50.934Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP Products: NetWeaver AS Java for Deploy Service Problem Types: CWE-306 Description: SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability and integrity. Additional Ana
able them to access but not modify server settings and data with no effect on availability and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3287784 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24528 State: PUBLISHED Published: 2023-02-14T03:18:53.948Z Last Updated: 2025-03-20T20:22:20.083Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP Products: Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests) Problem Types: CWE-862 Description: SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents. Additional Analyst Notes: - CVE Program Container: - CIS
xploitation can lead to exposure of data like travel documents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3290901 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24529 State: PUBLISHED Published: 2023-02-14T03:19:22.690Z Last Updated: 2025-03-20T20:21:30.580Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP Products: NetWeaver AS ABAP (Business Server Pages application) Problem Types: CWE-79 Description: Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting (XSS) attack. As a result, an attacker may be able to hijack a user session, read and modify some sensitive informatio
g (XSS) attack. As a result, an attacker may be able to hijack a user session, read and modify some sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3282663 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24530 State: PUBLISHED Published: 2023-02-14T03:19:44.905Z Last Updated: 2025-03-20T20:19:02.203Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: SAP Products: BusinessObjects Business Intelligence Platform (CMC) Problem Types: CWE-434 Description: SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that may completely compromise the application causing high impact on confidentiality, integrity and availability of the application. Additional A
mise the application causing high impact on confidentiality, integrity and availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3256787 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-24531 State: PUBLISHED Published: 2024-07-02T19:51:48.731Z Last Updated: 2025-03-28T15:02:59.076Z Vendors: Go toolchain Products: cmd/go Problem Types: CWE-138: Improper Neutralization of Special Elements Description: Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is relatively minor because, in general, if an attacker can set arbitrary environment variables on a system, they have better attack vectors than making "go env" print th
acker can set arbitrary environment variables on a system, they have better attack vectors than making "go env" print them out. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/cl/488375 - https://go.dev/cl/493535 - https://go.dev/issue/58508 - https://groups.google.com/g/golang-dev/c/ixHOFpSbajE/m/8EjlbKVWAwAJ - https://pkg.go.dev/vuln/GO-2024-2962
CVE ID: CVE-2023-24532 State: PUBLISHED Published: 2023-03-08T19:40:45.425Z Last Updated: 2024-08-02T10:56:04.340Z Vendors: Go standard library Products: crypto/internal/nistec Problem Types: CWE-682: Incorrect Calculation Description: The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/58647 - https://go.dev/cl/471255 - https://groups.google.com/g/golang-announce/c/3-TpUx48iQY - https://pkg.g
o.dev/issue/58647 - https://go.dev/cl/471255 - https://groups.google.com/g/golang-announce/c/3-TpUx48iQY - https://pkg.go.dev/vuln/GO-2023-1621
CVE ID: CVE-2023-24533 State: PUBLISHED Published: 2023-03-08T19:40:38.341Z Last Updated: 2025-02-28T19:51:47.955Z Vendors: filippo.io/nistec Products: filippo.io/nistec Problem Types: CWE-682: Incorrect Calculation Description: Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/58647 - https://github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244 - https://pkg.go.dev/vuln/GO-2023-1595
CVE ID: CVE-2023-24534 State: PUBLISHED Published: 2023-04-06T15:50:45.710Z Last Updated: 2025-02-13T16:44:17.255Z Vendors: Go standard library Products: net/textproto Problem Types: CWE-400: Uncontrolled Resource Consumption Description: HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially l
an exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service. With fix, header parsing now correctly allocates only the memory required to hold parsed headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/58975 - https://go.dev/cl/481994 - https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 - https://pkg.go.dev/vuln/GO-2023-1704 - https://security.netapp.com/advisory/ntap-20230526-0007/ - https://security.gentoo.org/glsa/202311-09
CVE ID: CVE-2023-24535 State: PUBLISHED Published: 2023-06-08T20:26:40.313Z Last Updated: 2025-01-06T19:33:28.532Z Vendors: google.golang.org/protobuf Products: google.golang.org/protobuf/encoding/prototext, google.golang.org/protobuf/internal/encoding/text Problem Types: CWE-125: Out-of-bounds Read Description: Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/cl/475995 - https://github.com/golang/protobuf/issues/1530 - https://pkg.g
DP Vulnrichment: References: - https://go.dev/cl/475995 - https://github.com/golang/protobuf/issues/1530 - https://pkg.go.dev/vuln/GO-2023-1631
CVE ID: CVE-2023-24536 State: PUBLISHED Published: 2023-04-06T15:50:24.879Z Last Updated: 2025-02-13T16:44:18.172Z Vendors: Go standard library Products: mime/multipart, net/textproto Problem Types: CWE-400: Uncontrolled Resource Consumption Description: Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbag
it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts. 3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector. The combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormV
as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. With fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations. In addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms: 1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=. 2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 heade
contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/59153 - https://go.dev/cl/482076 - https://go.dev/cl/482075 - https://go.dev/cl/482077 - https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 - https://pkg.go.dev/vuln/GO-2023-1705 - https://security.netapp.com/advisory/ntap-20230526-0007/ - https://security.gentoo.org/glsa/202311-09
CVE ID: CVE-2023-24537 State: PUBLISHED Published: 2023-04-06T15:50:49.556Z Last Updated: 2025-02-13T16:44:18.701Z Vendors: Go standard library Products: go/scanner Problem Types: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') Description: Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/59180 - https://go.dev/cl/482078 - https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 - https://pkg.go.dev/vuln/GO-2023-1702 - https://security.gentoo.org/gls
oups.google.com/g/golang-announce/c/Xdv6JL9ENs8 - https://pkg.go.dev/vuln/GO-2023-1702 - https://security.gentoo.org/glsa/202311-09
CVE ID: CVE-2023-24538 State: PUBLISHED Published: 2023-04-06T15:50:48.185Z Last Updated: 2025-02-13T16:44:19.259Z Vendors: Go standard library Products: html/template Problem Types: CWE-94: Improper Control of Generation of Code ('Code Injection') Description: Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselve
al, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. "var a = {{.}}"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the cav
Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/59234 - https://go.dev/cl/482079 - https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 - https://pkg.go.dev/vuln/GO-2023-1703 - https://security.gentoo.org/glsa/202311-09
CVE ID: CVE-2023-24539 State: PUBLISHED Published: 2023-05-11T15:29:38.143Z Last Updated: 2025-01-24T16:41:28.222Z Vendors: Go standard library Products: html/template Problem Types: CWE-74: Improper input validation Description: Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/59720 - https://go.dev/cl/491615 - https://groups.google.com/g/gola
ADP Vulnrichment: References: - https://go.dev/issue/59720 - https://go.dev/cl/491615 - https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU - https://pkg.go.dev/vuln/GO-2023-1751
CVE ID: CVE-2023-24540 State: PUBLISHED Published: 2023-05-11T15:29:31.947Z Last Updated: 2025-01-24T16:45:07.999Z Vendors: Go standard library Products: html/template Problem Types: CWE-74: Improper input validation Description: Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/59721 - https://go.dev/cl/491616 - https://groups.google.com/g/golang-announce/c/
nt: References: - https://go.dev/issue/59721 - https://go.dev/cl/491616 - https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU - https://pkg.go.dev/vuln/GO-2023-1752
CVE ID: CVE-2023-24542 State: PUBLISHED Published: 2024-02-14T13:37:41.272Z Last Updated: 2025-05-12T14:59:22.830Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: escalation of privilege, CWE-428 Description: Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-24544 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T16:50:19.055Z Vendors: BUFFALO INC. Products: BS-GSL and BS-GS series Problem Types: Improper access control Description: Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earli
e Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20230310-01.html - https://jvn.jp/en/vu/JVNVU96824262/