CVE-2022-43443
Assigner: jpcert
Published: 2022-12-19T00:00:00
State: PUBLISHED
affected: vendor: BUFFALO INC.
product: WXR-11000XE12
versions: version: firmware Ver. 1.10 and earlier
status: affected
vendor: BUFFALO INC.
product: WXR-5700AX7S
versions: version: firmware Ver. 1.27 and earlier
status: affected
vendor: BUFFALO INC.
product: WXR-5700AX7B
versions: version: firmware Ver. 1.27 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-3200AX4S
versions: version: firmware Ver. 1.26 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-3200AX4B
versions: version: firmware Ver. 1.25
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHP
versions: version: firmware Ver. 1.08 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHP2
versions: version: firmware Ver. 1.22 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-A2533DHP2
versions: version: firmware Ver. 1.22 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHP3
versions: version: firmware Ver. 1.26 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-A2533DHP3
versions: version: firmware Ver. 1.26 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHPL
versions: version: firmware Ver. 1.08 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHPL2
versions: version: firmware Ver. 1.03 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHPLS
versions: version: firmware Ver. 1.07 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-2533DHPLB
versions: version: firmware Ver. 1.05
status: affected
vendor: BUFFALO INC.
product: WSR-1166DHP
versions: version: firmware Ver. 1.16 and earlier
status: affected
vendor: BUFFALO INC.
product: WSR-1166DHP2
versions: version: firmware Ver. 1.17 and earlier
status: affected
vendor: BUFFALO INC.
product: WCR-1166DS
versions: version: firmware Ver. 1.34 and earlier
status: affected
descriptions: value: OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.
problemTypes: descriptions: description: OS command injection
type: text