Skip to main content

Wsr 3200Ax4S Firmware CVE-2022-43486

MEDIUM
Code Injection (CWE-94)
2022-12-19 vultures@jpcert.or.jp
RCE Code Injection Wsr 3200Ax4S Firmware Wsr 3200Ax4B Firmware Wsr 2533Dhp2 Firmware Wsr A2533Dhp2 Firmware Wsr 2533Dhp3 Firmware Wsr A2533Dhp3 Firmware Wsr 2533Dhpl2 Firmware Wsr 2533Dhpls Firmware Wex 1800Ax4 Firmware Wex 1800Ax4Ea Firmware Wsr 2533Dhp Firmware Wsr 2533Dhpl Firmware Wcr 1166Ds Firmware
6.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 19, 2022 - 03:15 nvd
MEDIUM 6.8

DescriptionNVD

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.

AnalysisAI

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Code Injection (CWE-94), which allows attackers to inject and execute arbitrary code within the application. Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices. Affected products include: Buffalo Wsr-3200Ax4S Firmware, Buffalo Wsr-3200Ax4B Firmware, Buffalo Wsr-2533Dhp2 Firmware, Buffalo Wsr-A2533Dhp2 Firmware, Buffalo Wsr-2533Dhp3 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Never evaluate user-controlled input as code. Use sandboxing, disable dangerous functions, apply strict input validation.

More in Wsr 3200Ax4S Firmware

View all
CVE-2022-43443 HIGH
8.8 Dec 19

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrar
CVE-2022-43466 MEDIUM
6.8 Dec 19

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative

Same weakness CWE-94 – Code Injection

View all
CVE-2023-3519 CRITICAL POC
9.8
CVE-2012-0158 HIGH POC
8.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8
CVE-2018-1273 CRITICAL POC
9.8
CVE-2025-32432 CRITICAL POC
10.0

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2022-43486 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy