CVE-2022-43486: Code Injection
Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.
Other sources
Hidden functionality vulnerability in Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and earlier, WSR-3200AX4B firmware Ver. 1.25, WSR-2533DHP firmware Ver. 1.08 and earlier, WSR-2533DHP2 firmware Ver. 1.22 and earlier, WSR-A2533DHP2 firmware Ver. 1.22 and earlier, WSR-2533DHP3 firmware Ver. 1.26 and earlier, WSR-A2533DHP3 firmware Ver. 1.26 and earlier, WSR-2533DHPL firmware Ver. 1.08 and earlier, WSR-2533DHPL2 firmware Ver. 1.03 and earlier, WSR-2533DHPLS firmware Ver. 1.07 and earlier, WCR-1166DS firmware Ver. 1.34 and earlier, WEX-1800AX4 firmware Ver. 1.13 and earlier, and WEX-1800AX4EA firmware Ver. 1.13 and earlier allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected device.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-43486.
Which Buffalo network devices are affected by this vulnerability?
The Buffalo network devices affected by this vulnerability are WSR-3200AX4S (firmware Ver. 1.26 and earlier), WSR-3200AX4B (firmware Ver. 1.25), WSR-2533DHP (firmware Ver. 1.08 and earlier), WSR-2533DHP2 (firmware Ver. 1.22 and earlier), WSR-A2533DHP2 (firmware Ver. 1.22 and earlier), WSR-2533DHP3 (firmware Ver. 1.26), WSR-A2533DHP3 (firmware Ver. 1.26), WSR-2533DHPL2 (firmware Ver. 1.03), WSR-2533DHPLS (firmware Ver. 1.07), WEX-1800AX4 (firmware Ver. 1.13), WEX-1800AX4EA (firmware Ver. 1.13), WSR-2533DHP, WSR-2533DHPL, and WCR-1166DS (firmware Ver. 1.34).
What is the severity rating of CVE-2022-43486?
The severity rating of CVE-2022-43486 is medium with a score of 6.8.
What is the recommended action to fix this vulnerability?
To fix this vulnerability, update the firmware of the affected Buffalo network devices to the latest version provided by Buffalo.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the JVN and Buffalo websites. Please refer to the provided references for details.