Buffalo Wex-1800Ax4 Firmware vulnerabilities

CVE-2022-43466 [MEDIUM] CWE-78 CVE-2022-43466: OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker wit OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

CVE-2022-43486 [MEDIUM] CWE-94 CVE-2022-43486: Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker wit Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.