CVE-2022-43443
published 2022-12-19CVE-2022-43443: OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted…
PriorityP355high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.79%
51.6th percentile
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| buffalo | wcr-1166ds_firmware | <= 1.34 | — |
| buffalo | wsr-2533dhp2_firmware | <= 1.22 | — |
| buffalo | wsr-2533dhp3_firmware | <= 1.26 | — |
| buffalo | wsr-2533dhp_firmware | <= 1.08 | — |
| buffalo | wsr-2533dhpl2_firmware | <= 1.03 | — |
| buffalo | wsr-2533dhpl_firmware | <= 1.08 | — |
| buffalo | wsr-2533dhpls_firmware | <= 1.07 | — |
| buffalo | wsr-3200ax4b_firmware | — | — |
| buffalo | wsr-3200ax4s_firmware | <= 1.26 | — |
| buffalo | wsr-a2533dhp2_firmware | <= 1.22 | — |
| buffalo | wsr-a2533dhp3_firmware | <= 1.26 | — |
| buffalo_inc | wcr-1166ds | — | — |
| buffalo_inc | wsr-1166dhp | — | — |
| buffalo_inc | wsr-1166dhp2 | — | — |
| buffalo_inc | wsr-2533dhp | — | — |
| buffalo_inc | wsr-2533dhp2 | — | — |
| buffalo_inc | wsr-2533dhp3 | — | — |
| buffalo_inc | wsr-2533dhpl | — | — |
| buffalo_inc | wsr-2533dhpl2 | — | — |
| buffalo_inc | wsr-2533dhplb | — | — |
| buffalo_inc | wsr-2533dhpls | — | — |
| buffalo_inc | wsr-3200ax4b | — | — |
| buffalo_inc | wsr-3200ax4s | — | — |
| buffalo_inc | wsr-a2533dhp2 | — | — |
| buffalo_inc | wsr-a2533dhp3 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-19
Published