CVE-2023-26588

Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier

• CWE-668
• CWE-668

• https://jvn.jp/en/vu/JVNVU96824262/Patch, Third Party Advisory
• https://www.buffalo.jp/news/detail/20230310-01.htmlVendor Advisory
• https://jvn.jp/en/vu/JVNVU96824262/Patch, Third Party Advisory
• https://www.buffalo.jp/news/detail/20230310-01.htmlVendor Advisory

Published

Apr 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26582Unauthenticated SQL injection in the GetExcursionDetails m…9.1
• CVE-2023-26583Unauthenticated SQL injection in the GetCurrentPeriod met…9.1
• CVE-2023-26584Unauthenticated SQL injection in the GetStudentInconsistenci…9.1
• CVE-2023-26585Improper access control in some Intel(R) Thunderbolt(TM) DCH…5
• CVE-2023-26586Uncaught exception for some Intel(R) PROSet/Wireless and Int…6.5
• CVE-2023-26587Improper input validation for the Intel(R) Easy Streaming Wi…7.8
• CVE-2023-26589Use after free in some Intel(R) Aptio* V UEFI Firmware Integ…5.5
• CVE-2023-2659A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-26590A floating point exception vulnerability was found in sox, i…5.5
• CVE-2023-26591Unchecked return value in some Intel(R) Thunderbolt(TM) DCH …2
• CVE-2023-26592Deserialization of untrusted data in some Intel(R) Thunderbo…3.8
• CVE-2023-26593CENTUM series provided by Yokogawa Electric Corporation are …7.8