Attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC
An attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
Summary
This vulnerability applies to functionality when the system is acting as an Active Directory domain controller. No Buffalo NAS products use this functionality, and so no Buffalo sytems are affected by this vulnerability.
| Vulnerability ID | Vulnerability Overview |
|---|---|
| CVE-2023-0614 | The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. |
Affected Supported TeraStations
None
| Date | Description |
| 6/23/2022 | Initial release |