← Database

CVE-2022-43466

MEDIUM CVSS: 6.8 Published: 2022-12-19 Modified: 2026-06-17

Description

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

Affected Platforms

Buffalo Wex-1800Ax4Buffalo Wsr-2533DhplsBuffalo Wsr-2533Dhp2Buffalo Wsr-A2533Dhp2Buffalo Wsr-2533Dhp2 FirmwareBuffalo Wsr-A2533Dhp3 FirmwareBuffalo Wex-1800Ax4Ea FirmwareBuffalo Wex-1800Ax4EaBuffalo Wsr-2533Dhp3 FirmwareBuffalo Wsr-A2533Dhp3

Weakness Type

CWE-78, CWE-78

References