MEDIUM🇵🇱 Wersja polska

CVE-2022-43466

CVSS 6.8v3.1pub. 2022-12-19upd. 2025-04-17

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Buffalo Wex 1800ax4

    HW
    Buffalo
    all versions

  • Buffalo Wex 1800ax4ea

    HW
    Buffalo
    all versions

  • Buffalo Wex 1800ax4ea Firmware

    OS
    Buffalo
    ≤ 1.13

  • Buffalo Wex 1800ax4 Firmware

    OS
    Buffalo
    ≤ 1.13

  • Buffalo Wsr 2533dhp2

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhp2 Firmware

    OS
    Buffalo
    ≤ 1.22

  • Buffalo Wsr 2533dhp3

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhp3 Firmware

    OS
    Buffalo
    ≤ 1.26

  • Buffalo Wsr 2533dhpl2

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhpl2 Firmware

    OS
    Buffalo
    ≤ 1.03

  • Buffalo Wsr 2533dhpls

    HW
    Buffalo
    all versions

  • Buffalo Wsr 2533dhpls Firmware

    OS
    Buffalo
    ≤ 1.07

  • Buffalo Wsr 3200ax4b

    HW
    Buffalo
    all versions

  • Buffalo Wsr 3200ax4b Firmware

    OS
    Buffalo
    1.25

  • Buffalo Wsr 3200ax4s

    HW
    Buffalo
    all versions

  • Buffalo Wsr 3200ax4s Firmware

    OS
    Buffalo
    ≤ 1.26

  • Buffalo Wsr A2533dhp2

    HW
    Buffalo
    all versions

  • Buffalo Wsr A2533dhp2 Firmware

    OS
    Buffalo
    ≤ 1.22

  • Buffalo Wsr A2533dhp3

    HW
    Buffalo
    all versions

  • Buffalo Wsr A2533dhp3 Firmware

    OS
    Buffalo
    ≤ 1.26
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2024-23486CRITICAL9.8PL ✓same product

Buffalo WSR-2533DHP — hasło przechowywane w postaci jawnej (plaintext)

CVE-2022-43443HIGH8.8same product

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute a...

CVE-2024-26023MEDIUM4.2same product

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrar...

CVE-2022-43486MEDIUM6.8same product

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an admin...

CVE-2021-20090CRITICAL9.8⚠ KEVPL ✓same vendor

Path Traversal umożliwiający obejście uwierzytelnienia w routerach Buffalo