CVE Feed

    Dashboard / CVE / CVE-2022-43466

    CVE-2022-43466

    OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

    Published:Dec 19, 2022
    Last Modified:Apr 17, 2025
    EPS:Dec 19, 2022
    EPSS Score:0.00152
    CVSS Score:6.8

    Affected Products

    Vendor
    Buffalo
    Product
    Wex-1800ax4
    Vendor
    Buffalo
    Product
    Wex-1800ax4 Firmware
    Vendor
    Buffalo
    Product
    Wex-1800ax4ea
    Vendor
    Buffalo
    Product
    Wex-1800ax4ea Firmware
    Vendor
    Buffalo
    Product
    Wsr-2533dhp2
    Vendor
    Buffalo
    Product
    Wsr-2533dhp2 Firmware
    Vendor
    Buffalo
    Product
    Wsr-2533dhp3
    Vendor
    Buffalo
    Product
    Wsr-2533dhp3 Firmware
    Vendor
    Buffalo
    Product
    Wsr-2533dhpl2
    Vendor
    Buffalo
    Product
    Wsr-2533dhpl2 Firmware
    Vendor
    Buffalo
    Product
    Wsr-2533dhpls
    Vendor
    Buffalo
    Product
    Wsr-2533dhpls Firmware
    Vendor
    Buffalo
    Product
    Wsr-3200ax4b
    Vendor
    Buffalo
    Product
    Wsr-3200ax4b Firmware
    Vendor
    Buffalo
    Product
    Wsr-3200ax4s
    Vendor
    Buffalo
    Product
    Wsr-3200ax4s Firmware
    Vendor
    Buffalo
    Product
    Wsr-a2533dhp2
    Vendor
    Buffalo
    Product
    Wsr-a2533dhp2 Firmware
    Vendor
    Buffalo
    Product
    Wsr-a2533dhp3
    Vendor
    Buffalo
    Product
    Wsr-a2533dhp3 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High