Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-43486

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an

Description

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BUFFALO INC. WXR-5700AX7S

  • firmware Ver. 1.27 and earlieraffected

BUFFALO INC. WXR-5700AX7B

  • firmware Ver. 1.27 and earlieraffected

BUFFALO INC. WSR-3200AX4S

  • firmware Ver. 1.26 and earlieraffected

BUFFALO INC. WSR-3200AX4B

  • firmware Ver. 1.25affected

BUFFALO INC. WSR-2533DHP

  • firmware Ver. 1.08 and earlieraffected

BUFFALO INC. WSR-2533DHP2

  • firmware Ver. 1.22 and earlieraffected

BUFFALO INC. WSR-A2533DHP2

  • firmware Ver. 1.22 and earlieraffected

BUFFALO INC. WSR-2533DHP3

  • firmware Ver. 1.26 and earlieraffected

BUFFALO INC. WSR-A2533DHP3

  • firmware Ver. 1.26 and earlieraffected

BUFFALO INC. WSR-2533DHPL

  • firmware Ver. 1.08 and earlieraffected

BUFFALO INC. WSR-2533DHPL2

  • firmware Ver. 1.03 and earlieraffected

BUFFALO INC. WSR-2533DHPLS

  • firmware Ver. 1.07 and earlieraffected

BUFFALO INC. WSR-2533DHPLB

  • firmware Ver. 1.05affected

BUFFALO INC. WCR-1166DS

  • firmware Ver. 1.34 and earlieraffected

BUFFALO INC. WEX-1800AX4

  • firmware Ver. 1.13 and earlieraffected

BUFFALO INC. WEX-1800AX4EA

  • firmware Ver. 1.13 and earlieraffected

References