Potential Man-In-The-Middle attack during Firmware updates may allow for arbitrary code execution (CVE-2023-51073)

Potential Man-In-The-Middle attack during Firmware updates may allow for arbitrary code execution

Summary

When a Linkstation 200 series updates its firmware, it does not appropriately verify the update source. This could potentially lead to a Man-in-The-Middle attack.

Vulnerability ID	Vulnerability Overview
CVE-2023-51073	An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script

Affected Supported TeraStations

All.
Resolved. Please update to the latest firmware.

Date	Description
03/5/2024	Initial release
09/02/2026	Update

Back to Security Notices