CVE-2022-43466

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: Dec 19, 2022
Source updated: Apr 17, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WXR-5700AX7S

Vendor: BUFFALO INC.
Product: WXR-5700AX7S
Platforms: Unknown
Default status: Unknown

WXR-5700AX7S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.27 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WXR-5700AX7B

Vendor: BUFFALO INC.
Product: WXR-5700AX7B
Platforms: Unknown
Default status: Unknown

WXR-5700AX7B · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.27 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-3200AX4S

Vendor: BUFFALO INC.
Product: WSR-3200AX4S
Platforms: Unknown
Default status: Unknown

WSR-3200AX4S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.26 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-3200AX4B

Vendor: BUFFALO INC.
Product: WSR-3200AX4B
Platforms: Unknown
Default status: Unknown

WSR-3200AX4B · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.25	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-2533DHP2

Vendor: BUFFALO INC.
Product: WSR-2533DHP2
Platforms: Unknown
Default status: Unknown

WSR-2533DHP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.22 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-A2533DHP2

Vendor: BUFFALO INC.
Product: WSR-A2533DHP2
Platforms: Unknown
Default status: Unknown

WSR-A2533DHP2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.22 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-2533DHP3

Vendor: BUFFALO INC.
Product: WSR-2533DHP3
Platforms: Unknown
Default status: Unknown

WSR-2533DHP3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.26 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-A2533DHP3

Vendor: BUFFALO INC.
Product: WSR-A2533DHP3
Platforms: Unknown
Default status: Unknown

WSR-A2533DHP3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.26 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-2533DHPL2

Vendor: BUFFALO INC.
Product: WSR-2533DHPL2
Platforms: Unknown
Default status: Unknown

WSR-2533DHPL2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.03 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-2533DHPLS

Vendor: BUFFALO INC.
Product: WSR-2533DHPLS
Platforms: Unknown
Default status: Unknown

WSR-2533DHPLS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.07 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WSR-2533DHPLB

Vendor: BUFFALO INC.
Product: WSR-2533DHPLB
Platforms: Unknown
Default status: Unknown

WSR-2533DHPLB · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.05	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-1800AX4

Vendor: BUFFALO INC.
Product: WEX-1800AX4
Platforms: Unknown
Default status: Unknown

WEX-1800AX4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.13 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed

WEX-1800AX4EA

Vendor: BUFFALO INC.
Product: WEX-1800AX4EA
Platforms: Unknown
Default status: Unknown

WEX-1800AX4EA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
firmware Ver. 1.13 and earlier	`affected`	Unavailable	Unavailable	Unavailable	None listed