Read the docs
TI-2022-21258 Aliases CVE-2022-43466GHSA-vqc2-jf89-w6m6

OS command injection in BUFFALO INC. WXR-5700AX7S

Priority LOW 33CWE-78Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-78.

Summary

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00772 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BUFFALO INC.WXR-5700AX7Sfirmware Ver. 1.27 and earlier—No fix listedCNA
BUFFALO INC.WXR-5700AX7Bfirmware Ver. 1.27 and earlier—No fix listedCNA
BUFFALO INC.WSR-3200AX4Sfirmware Ver. 1.26 and earlier—No fix listedCNA
BUFFALO INC.WSR-3200AX4Bfirmware Ver. 1.25—No fix listedCNA
BUFFALO INC.WSR-2533DHP2firmware Ver. 1.22 and earlier—No fix listedCNA
BUFFALO INC.WSR-A2533DHP2firmware Ver. 1.22 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHP3firmware Ver. 1.26 and earlier—No fix listedCNA
BUFFALO INC.WSR-A2533DHP3firmware Ver. 1.26 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPL2firmware Ver. 1.03 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPLSfirmware Ver. 1.07 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPLBfirmware Ver. 1.05—No fix listedCNA
BUFFALO INC.WEX-1800AX4firmware Ver. 1.13 and earlier—No fix listedCNA
BUFFALO INC.WEX-1800AX4EAfirmware Ver. 1.13 and earlier—No fix listedCNA
  • WXR-5700AX7S VendorBUFFALO INC. Affected firmware Ver. 1.27 and earlier Fixed in — No fix listed CNA
  • WXR-5700AX7B VendorBUFFALO INC. Affected firmware Ver. 1.27 and earlier Fixed in — No fix listed CNA
  • WSR-3200AX4S VendorBUFFALO INC. Affected firmware Ver. 1.26 and earlier Fixed in — No fix listed CNA
  • WSR-3200AX4B VendorBUFFALO INC. Affected firmware Ver. 1.25 Fixed in — No fix listed CNA
  • WSR-2533DHP2 VendorBUFFALO INC. Affected firmware Ver. 1.22 and earlier Fixed in — No fix listed CNA
  • WSR-A2533DHP2 VendorBUFFALO INC. Affected firmware Ver. 1.22 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHP3 VendorBUFFALO INC. Affected firmware Ver. 1.26 and earlier Fixed in — No fix listed CNA
  • WSR-A2533DHP3 VendorBUFFALO INC. Affected firmware Ver. 1.26 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPL2 VendorBUFFALO INC. Affected firmware Ver. 1.03 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPLS VendorBUFFALO INC. Affected firmware Ver. 1.07 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPLB VendorBUFFALO INC. Affected firmware Ver. 1.05 Fixed in — No fix listed CNA
  • WEX-1800AX4 VendorBUFFALO INC. Affected firmware Ver. 1.13 and earlier Fixed in — No fix listed CNA
  • WEX-1800AX4EA VendorBUFFALO INC. Affected firmware Ver. 1.13 and earlier Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:buffalo:wsr-3200ax4s_firmware:*:*:*:*:*:*:*:*up to 1.26VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-3200ax4s:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-3200ax4b_firmware:1.25:*:*:*:*:*:*:*1.25VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-3200ax4b:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhp2_firmware:*:*:*:*:*:*:*:*up to 1.22VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhp2:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:*up to 1.22VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-a2533dhp2:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhp3_firmware:*:*:*:*:*:*:*:*up to 1.26VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhp3:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-3200ax4s_firmware:*:*:*:*:*:*:*:* Versions up to 1.26 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-3200ax4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-3200ax4b_firmware:1.25:*:*:*:*:*:*:* Versions 1.25 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-3200ax4b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhp2_firmware:*:*:*:*:*:*:*:* Versions up to 1.22 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:* Versions up to 1.22 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-a2533dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhp3_firmware:*:*:*:*:*:*:*:* Versions up to 1.26 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:buffalo:wsr-a2533dhp3_firmware:*:*:*:*:*:*:*:*up to 1.26VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-a2533dhp3:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhpl2_firmware:*:*:*:*:*:*:*:*up to 1.03VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhpl2:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhpls_firmware:*:*:*:*:*:*:*:*up to 1.07VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhpls:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wex-1800ax4_firmware:*:*:*:*:*:*:*:*up to 1.13VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wex-1800ax4:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wex-1800ax4ea_firmware:*:*:*:*:*:*:*:*up to 1.13VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wex-1800ax4ea:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-a2533dhp3_firmware:*:*:*:*:*:*:*:* Versions up to 1.26 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-a2533dhp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhpl2_firmware:*:*:*:*:*:*:*:* Versions up to 1.03 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhpl2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhpls_firmware:*:*:*:*:*:*:*:* Versions up to 1.07 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhpls:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wex-1800ax4_firmware:*:*:*:*:*:*:*:* Versions up to 1.13 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wex-1800ax4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wex-1800ax4ea_firmware:*:*:*:*:*:*:*:* Versions up to 1.13 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wex-1800ax4ea:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-43466
  2. 2026-10-03 Alias added: GHSA-vqc2-jf89-w6m6

References

Other 2

  • TI-2022-21276 Code injection in BUFFALO INC. WXR-5700AX7S CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences