Huawei Bisheng-Wnm Firmware vulnerabilities

CVE-2022-48472 [CRITICAL] CWE-78 CVE-2022-48472: A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.

CVE-2022-48471 [HIGH] CWE-436 CVE-2022-48471: There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of th There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.

CVE-2022-48473 [HIGH] CWE-436 CVE-2022-48473: There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of th There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.

CVE-2022-48259 [CRITICAL] CWE-77 CVE-2022-48259: There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitati There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges.

CVE-2022-48255 [CRITICAL] CWE-77 CVE-2022-48255: There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution.

CVE-2022-48260 [HIGH] CWE-120 CVE-2022-48260: There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.

CVE-2022-48230 [HIGH] CWE-436 CVE-2022-48230: There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploita There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.

CVE-2022-48261 [HIGH] CWE-436 CVE-2022-48261: There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploita There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to be abnormal.