CVE-2023-46711

MEDIUM

Buffalo VR-S1000 Firmware < 2.37 - Use of Hard-coded Cryptographic Key

Title source: llm

Description

VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.

References (2)

Core 2

Core References

Third Party Advisory

https://jvn.jp/en/jp/JVN23771490/

Patch, Vendor Advisory

https://www.buffalo.jp/news/detail/20231225-01.html

Scores

CVSS v3 4.6

EPSS 0.0023

EPSS Percentile 13.7%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-798

Status published

Products (1)

buffalo/vr-s1000_firmware < 2.37

Published Dec 26, 2023

Tracked Since Feb 18, 2026