CVE Feed

    Dashboard / CVE / CVE-2022-39044

    CVE-2022-39044

    Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WLI-TX4-AG300N firmware Ver. 1.53 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WZR2-G108 firmware Ver. 1.33 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, and WZR-HP-G450H firmware Ver. 1.90 and earlier.

    Published:Dec 7, 2022
    Last Modified:Apr 23, 2025
    EPS:Dec 7, 2022
    EPSS Score:0.00087
    CVSS Score:6.8

    Affected Products

    Vendor
    Buffalo
    Product
    Bhr-4grv
    Vendor
    Buffalo
    Product
    Bhr-4grv Firmware
    Vendor
    Buffalo
    Product
    Dwr-hp-g300nh
    Vendor
    Buffalo
    Product
    Dwr-hp-g300nh Firmware
    Vendor
    Buffalo
    Product
    Dwr-pg
    Vendor
    Buffalo
    Product
    Dwr-pg Firmware
    Vendor
    Buffalo
    Product
    Fs-600dhp
    Vendor
    Buffalo
    Product
    Fs-600dhp Firmware
    Vendor
    Buffalo
    Product
    Fs-g300n
    Vendor
    Buffalo
    Product
    Fs-g300n Firmware
    Vendor
    Buffalo
    Product
    Fs-hp-g300n
    Vendor
    Buffalo
    Product
    Fs-hp-g300n Firmware
    Vendor
    Buffalo
    Product
    Fs-r600dhp
    Vendor
    Buffalo
    Product
    Fs-r600dhp Firmware
    Vendor
    Buffalo
    Product
    Hw-450hp-zwe
    Vendor
    Buffalo
    Product
    Hw-450hp-zwe Firmware
    Vendor
    Buffalo
    Product
    Wcr-300
    Vendor
    Buffalo
    Product
    Wcr-300 Firmware
    Vendor
    Buffalo
    Product
    Wer-a54g54
    Vendor
    Buffalo
    Product
    Wer-a54g54 Firmware
    Vendor
    Buffalo
    Product
    Wer-ag54
    Vendor
    Buffalo
    Product
    Wer-ag54 Firmware
    Vendor
    Buffalo
    Product
    Wer-am54g54
    Vendor
    Buffalo
    Product
    Wer-am54g54 Firmware
    Vendor
    Buffalo
    Product
    Wer-amg54
    Vendor
    Buffalo
    Product
    Wer-amg54 Firmware
    Vendor
    Buffalo
    Product
    Whr-300
    Vendor
    Buffalo
    Product
    Whr-300 Firmware
    Vendor
    Buffalo
    Product
    Whr-300hp
    Vendor
    Buffalo
    Product
    Whr-300hp Firmware
    Vendor
    Buffalo
    Product
    Whr-am54g54
    Vendor
    Buffalo
    Product
    Whr-am54g54 Firmware
    Vendor
    Buffalo
    Product
    Whr-amg54
    Vendor
    Buffalo
    Product
    Whr-amg54 Firmware
    Vendor
    Buffalo
    Product
    Whr-ampg
    Vendor
    Buffalo
    Product
    Whr-ampg Firmware
    Vendor
    Buffalo
    Product
    Whr-g
    Vendor
    Buffalo
    Product
    Whr-g300n
    Vendor
    Buffalo
    Product
    Whr-g300n Firmware
    Vendor
    Buffalo
    Product
    Whr-g301n
    Vendor
    Buffalo
    Product
    Whr-g301n Firmware
    Vendor
    Buffalo
    Product
    Whr-g54s
    Vendor
    Buffalo
    Product
    Whr-g54s-ni
    Vendor
    Buffalo
    Product
    Whr-g54s-ni Firmware
    Vendor
    Buffalo
    Product
    Whr-g54s Firmware
    Vendor
    Buffalo
    Product
    Whr-g Firmware
    Vendor
    Buffalo
    Product
    Whr-hp-ampg
    Vendor
    Buffalo
    Product
    Whr-hp-ampg Firmware
    Vendor
    Buffalo
    Product
    Whr-hp-g
    Vendor
    Buffalo
    Product
    Whr-hp-g300n
    Vendor
    Buffalo
    Product
    Whr-hp-g300n Firmware
    Vendor
    Buffalo
    Product
    Whr-hp-g54
    Vendor
    Buffalo
    Product
    Whr-hp-g54 Firmware
    Vendor
    Buffalo
    Product
    Whr-hp-g Firmware
    Vendor
    Buffalo
    Product
    Whr-hp-gn
    Vendor
    Buffalo
    Product
    Whr-hp-gn Firmware
    Vendor
    Buffalo
    Product
    Wlae-ag300n
    Vendor
    Buffalo
    Product
    Wlae-ag300n Firmware
    Vendor
    Buffalo
    Product
    Wli-h4-d600
    Vendor
    Buffalo
    Product
    Wli-h4-d600 Firmware
    Vendor
    Buffalo
    Product
    Wli-tx4-ag300n
    Vendor
    Buffalo
    Product
    Wli-tx4-ag300n Firmware
    Vendor
    Buffalo
    Product
    Wpl-05g300
    Vendor
    Buffalo
    Product
    Wpl-05g300 Firmware
    Vendor
    Buffalo
    Product
    Ws024bf
    Vendor
    Buffalo
    Product
    Ws024bf-nw
    Vendor
    Buffalo
    Product
    Ws024bf-nw Firmware
    Vendor
    Buffalo
    Product
    Ws024bf Firmware
    Vendor
    Buffalo
    Product
    Wzr-300hp
    Vendor
    Buffalo
    Product
    Wzr-300hp Firmware
    Vendor
    Buffalo
    Product
    Wzr-450hp
    Vendor
    Buffalo
    Product
    Wzr-450hp-cwt
    Vendor
    Buffalo
    Product
    Wzr-450hp-cwt Firmware
    Vendor
    Buffalo
    Product
    Wzr-450hp-ub
    Vendor
    Buffalo
    Product
    Wzr-450hp-ub Firmware
    Vendor
    Buffalo
    Product
    Wzr-450hp Firmware
    Vendor
    Buffalo
    Product
    Wzr-600dhp
    Vendor
    Buffalo
    Product
    Wzr-600dhp2
    Vendor
    Buffalo
    Product
    Wzr-600dhp2 Firmware
    Vendor
    Buffalo
    Product
    Wzr-600dhp Firmware
    Vendor
    Buffalo
    Product
    Wzr-900dhp
    Vendor
    Buffalo
    Product
    Wzr-900dhp Firmware
    Vendor
    Buffalo
    Product
    Wzr-agl300nh
    Vendor
    Buffalo
    Product
    Wzr-agl300nh Firmware
    Vendor
    Buffalo
    Product
    Wzr-ampg144nh
    Vendor
    Buffalo
    Product
    Wzr-ampg144nh Firmware
    Vendor
    Buffalo
    Product
    Wzr-ampg300nh
    Vendor
    Buffalo
    Product
    Wzr-ampg300nh Firmware
    Vendor
    Buffalo
    Product
    Wzr-d1100h
    Vendor
    Buffalo
    Product
    Wzr-d1100h Firmware
    Vendor
    Buffalo
    Product
    Wzr-g144n
    Vendor
    Buffalo
    Product
    Wzr-g144n Firmware
    Vendor
    Buffalo
    Product
    Wzr-g144nh
    Vendor
    Buffalo
    Product
    Wzr-g144nh Firmware
    Vendor
    Buffalo
    Product
    Wzr-hp-ag300h
    Vendor
    Buffalo
    Product
    Wzr-hp-ag300h Firmware
    Vendor
    Buffalo
    Product
    Wzr-hp-g300nh
    Vendor
    Buffalo
    Product
    Wzr-hp-g300nh Firmware
    Vendor
    Buffalo
    Product
    Wzr-hp-g301nh
    Vendor
    Buffalo
    Product
    Wzr-hp-g301nh Firmware
    Vendor
    Buffalo
    Product
    Wzr-hp-g302h
    Vendor
    Buffalo
    Product
    Wzr-hp-g302h Firmware
    Vendor
    Buffalo
    Product
    Wzr-hp-g450h
    Vendor
    Buffalo
    Product
    Wzr-hp-g450h Firmware
    Vendor
    Buffalo
    Product
    Wzr2-g108
    Vendor
    Buffalo
    Product
    Wzr2-g108 Firmware
    Vendor
    Buffalo
    Product
    Wzr2-g300n
    Vendor
    Buffalo
    Product
    Wzr2-g300n Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High