Read the docs
TI-2023-01671 Aliases CVE-2023-1778GHSA-f9gp-vxr4-29wq

Default Credential Vulnerability in GajShield Data Security Firewall

Priority MEDIUM 51CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass, Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287 and CWE-522.

Summary

This vulnerability exists in GajShield Data Security Firewall firmware versions prior to v4.28 (except v4.21) due to insecure default credentials which allows remote attacker to login as superuser by using default username/password via web-based management interface and/or exposed SSH port thereby enabling remote attackers to execute arbitrary commands with administrative/superuser privileges on the targeted systems. The vulnerability has been addressed by forcing the user to change their default password to a new non-default password.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01128 66th percentileScored 2026-11-07
Fix Fixed Data Security Firewall (GajShield): 4.28, 4.21

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GajShieldData Security Firewall4.5 to before 4.284.28, 4.21Patch availableCNA
  • Data Security Firewall VendorGajShield Affected 4.5 to before 4.28 Fixed in 4.28, 4.21 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:gajshield:data_security_firewall_firmware:*:*:*:*:*:*:*:*before 4.21; 4.22 to before 4.28VulnerableGajShield
cpe:2.3:h:gajshield:data_security_firewall:-:*:*:*:*:*:*:*not specified by NVDRunning onGajShield
  • cpe:2.3:o:gajshield:data_security_firewall_firmware:*:*:*:*:*:*:*:* Versions before 4.21; 4.22 to before 4.28 Vulnerable ·GajShield
  • cpe:2.3:h:gajshield:data_security_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·GajShield

Remediation

  • Fix · CNA Data Security Firewall (GajShield) Fixed in 4.28, 4.21

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1778
  2. 2026-10-03 Alias added: GHSA-f9gp-vxr4-29wq

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences