What is the CVSS score of CVE-2022-39044?

CVE-2022-39044 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2022-39044?

Yes, a patch is available for CVE-2022-39044. Update the affected software to the latest version immediately.

Wcr 300 Firmware CVE-2022-39044

MEDIUM

2022-12-07 vultures@jpcert.or.jp

Command Injection HP Wcr 300 Firmware Whr Hp G300N Firmware Whr Hp Gn Firmware Wpl 05G300 Firmware Wzr 300Hp Firmware Wzr 450Hp Firmware Wzr 600Dhp Firmware Wzr 900Dhp Firmware Wzr Hp Ag300H Firmware Wzr Hp G302H Firmware Wlae Ag300N Firmware Fs 600Dhp Firmware Fs G300N Firmware Fs Hp G300N Firmware Fs R600Dhp Firmware Bhr 4Grv Firmware Dwr Hp G300Nh Firmware Dwr Pg Firmware Hw 450Hp Zwe Firmware Wer A54G54 Firmware Wer Ag54 Firmware Wer Am54G54 Firmware Wer Amg54 Firmware Whr 300 Firmware Whr 300Hp Firmware Whr Am54G54 Firmware Whr Amg54 Firmware Whr Ampg Firmware Whr G Firmware Whr G300N Firmware Whr G301N Firmware Whr G54S Firmware Whr G54S Ni Firmware Whr Hp Ampg Firmware Whr Hp G Firmware Whr Hp G54 Firmware Wli H4 D600 Firmware Wli Tx4 Ag300N Firmware Ws024Bf Firmware Ws024Bf Nw Firmware Wzr2 G108 Firmware Wzr2 G300N Firmware Wzr 450Hp Cwt Firmware Wzr 450Hp Ub Firmware Wzr 600Dhp2 Firmware Wzr Agl300Nh Firmware Wzr Ampg144Nh Firmware Wzr Ampg300Nh Firmware Wzr D1100H Firmware Wzr G144N Firmware Wzr G144Nh Firmware Wzr Hp G300Nh Firmware Wzr Hp G301Nh Firmware Wzr Hp G450H Firmware

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Dec 07, 2022 - 10:15 nvd

MEDIUM 6.8

DescriptionNVD

Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WLI-TX4-AG300N firmware Ver. 1.53 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WZR2-G108 firmware Ver. 1.33 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, and WZR-HP-G450H firmware Ver. 1.90 and earlier.

AnalysisAI

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.