Most recent entries from all

bdu:2024-00424

EUVD-2026-162916

fkie_cve-2023-46711

VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.

GHSA-gqfx-jp8p-5v6q

VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.

gsd-2023-46711

jvndb-2023-000125

VR-S1000 provided by BUFFALO INC. contains multiple vulnerabilities listed below. <ul><li>OS command injection (CWE-78) - CVE-2023-45741</li><li>Argument injection (CWE-88) - CVE-2023-46681</li><li>Use of hard-coded cryptographic key (CWE-321) - CVE-2023-46711</li><li>Information disclosure (CWE-200) - CVE-2023-51363</li></ul> CVE-2023-45741, CVE-2023-46681, CVE-2023-46711 Thomas J. Knudsen and Samy Younsi of NeroTeam Security Labs reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2023-51363 MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.