← Database

CVE-2022-43443

HIGH CVSS: 8.8 Published: 2022-12-19 Modified: 2026-06-17

Description

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.

Affected Platforms

Buffalo Wcr-1166DsBuffalo Wsr-2533DhplsBuffalo Wsr-2533Dhpl FirmwareBuffalo Wsr-2533Dhp2Buffalo Wsr-A2533Dhp2Buffalo Wsr-2533Dhp2 FirmwareBuffalo Wsr-A2533Dhp3 FirmwareBuffalo Wsr-2533Dhp3 FirmwareBuffalo Wsr-A2533Dhp3Buffalo Wsr-2533Dhp Firmware

Weakness Type

CWE-78, CWE-78

References