HIGH🇵🇱 Wersja polska

CVE-2022-43443

CVSS 8.8v3.1pub. 2022-12-19upd. 2025-04-17

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Buffalo Wcr 1166ds

    HW
    Buffalo
    all versions

  • Buffalo Wcr 1166ds Firmware

    OS
    Buffalo
    ≤ 1.34

  • Buffalo Wsr 2533dhp

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhp2

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhp2 Firmware

    OS
    Buffalo
    ≤ 1.22

  • Buffalo Wsr 2533dhp3

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhp3 Firmware

    OS
    Buffalo
    ≤ 1.26

  • Buffalo Wsr 2533dhp Firmware

    OS
    Buffalo
    ≤ 1.08

  • Buffalo Wsr 2533dhpl

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhpl2

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhpl2 Firmware

    OS
    Buffalo
    ≤ 1.03

  • Buffalo Wsr 2533dhpl Firmware

    OS
    Buffalo
    ≤ 1.08

  • Buffalo Wsr 2533dhpls

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhpls Firmware

    OS
    Buffalo
    ≤ 1.07

  • Buffalo Wsr 3200ax4b

    HW
    Buffalo
    all versions

  • Buffalo Wsr 3200ax4b Firmware

    OS
    Buffalo
    1.25

  • Buffalo Wsr 3200ax4s

    HW
    Buffalo
    all versions

  • Buffalo Wsr 3200ax4s Firmware

    OS
    Buffalo
    ≤ 1.26

  • Buffalo Wsr A2533dhp2

    HW
    Buffalo
    all versions

  • Buffalo Wsr A2533dhp2 Firmware

    OS
    Buffalo
    ≤ 1.22

  • Buffalo Wsr A2533dhp3

    HW
    Buffalo
    all versions

  • Buffalo Wsr A2533dhp3 Firmware

    OS
    Buffalo
    ≤ 1.26
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2024-23486CRITICAL9.8PL ✓same product

Buffalo WSR-2533DHP — hasło przechowywane w postaci jawnej (plaintext)

CVE-2024-26023MEDIUM4.2same product

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrar...

CVE-2022-43466MEDIUM6.8same product

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an admin...

CVE-2022-43486MEDIUM6.8same product

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an admin...

CVE-2017-10811MEDIUM6.8same product

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands v...