1. Home
  2. CVE Database
  3. CVE-2023-24464
MEDIUM · 5.4

CVE-2023-24464

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's ...

Vulnerability Description

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
BuffaloBs-Gs2008 Firmware<= 1.0.10.01
BuffaloBs-Gs2008-
BuffaloBs-Gs2016 Firmware<= 1.0.10.01
BuffaloBs-Gs2016-
BuffaloBs-Gs2024 Firmware<= 1.0.10.01
BuffaloBs-Gs2024-
BuffaloBs-Gs2048 Firmware<= 1.0.10.01
BuffaloBs-Gs2048-
BuffaloBs-Gs2008P Firmware<= 1.0.10.01
BuffaloBs-Gs2008P-
BuffaloBs-Gs2016P Firmware<= 1.0.10.01
BuffaloBs-Gs2016P-
BuffaloBs-Gs2024P Firmware<= 1.0.10.01
BuffaloBs-Gs2024P-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2023-24464?

CVE-2023-24464 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's ...

How severe is CVE-2023-24464?

CVE-2023-24464 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-24464?

Check the references section above for vendor advisories and patch information. Affected products include: Buffalo Bs-Gs2008 Firmware, Buffalo Bs-Gs2008, Buffalo Bs-Gs2016 Firmware, Buffalo Bs-Gs2016, Buffalo Bs-Gs2024 Firmware.