Read the docs
TI-2022-21276 Aliases CVE-2022-43486GHSA-2r4f-phw2-gpqp

Code injection in BUFFALO INC. WXR-5700AX7S

Priority LOW 32CWE-94Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-94.

Summary

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00376 31st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BUFFALO INC.WXR-5700AX7Sfirmware Ver. 1.27 and earlier—No fix listedCNA
BUFFALO INC.WXR-5700AX7Bfirmware Ver. 1.27 and earlier—No fix listedCNA
BUFFALO INC.WSR-3200AX4Sfirmware Ver. 1.26 and earlier—No fix listedCNA
BUFFALO INC.WSR-3200AX4Bfirmware Ver. 1.25—No fix listedCNA
BUFFALO INC.WSR-2533DHPfirmware Ver. 1.08 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHP2firmware Ver. 1.22 and earlier—No fix listedCNA
BUFFALO INC.WSR-A2533DHP2firmware Ver. 1.22 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHP3firmware Ver. 1.26 and earlier—No fix listedCNA
BUFFALO INC.WSR-A2533DHP3firmware Ver. 1.26 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPLfirmware Ver. 1.08 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPL2firmware Ver. 1.03 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPLSfirmware Ver. 1.07 and earlier—No fix listedCNA
BUFFALO INC.WSR-2533DHPLBfirmware Ver. 1.05—No fix listedCNA
BUFFALO INC.WCR-1166DSfirmware Ver. 1.34 and earlier—No fix listedCNA
BUFFALO INC.WEX-1800AX4firmware Ver. 1.13 and earlier—No fix listedCNA
BUFFALO INC.WEX-1800AX4EAfirmware Ver. 1.13 and earlier—No fix listedCNA
  • WXR-5700AX7S VendorBUFFALO INC. Affected firmware Ver. 1.27 and earlier Fixed in — No fix listed CNA
  • WXR-5700AX7B VendorBUFFALO INC. Affected firmware Ver. 1.27 and earlier Fixed in — No fix listed CNA
  • WSR-3200AX4S VendorBUFFALO INC. Affected firmware Ver. 1.26 and earlier Fixed in — No fix listed CNA
  • WSR-3200AX4B VendorBUFFALO INC. Affected firmware Ver. 1.25 Fixed in — No fix listed CNA
  • WSR-2533DHP VendorBUFFALO INC. Affected firmware Ver. 1.08 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHP2 VendorBUFFALO INC. Affected firmware Ver. 1.22 and earlier Fixed in — No fix listed CNA
  • WSR-A2533DHP2 VendorBUFFALO INC. Affected firmware Ver. 1.22 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHP3 VendorBUFFALO INC. Affected firmware Ver. 1.26 and earlier Fixed in — No fix listed CNA
  • WSR-A2533DHP3 VendorBUFFALO INC. Affected firmware Ver. 1.26 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPL VendorBUFFALO INC. Affected firmware Ver. 1.08 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPL2 VendorBUFFALO INC. Affected firmware Ver. 1.03 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPLS VendorBUFFALO INC. Affected firmware Ver. 1.07 and earlier Fixed in — No fix listed CNA
  • WSR-2533DHPLB VendorBUFFALO INC. Affected firmware Ver. 1.05 Fixed in — No fix listed CNA
  • WCR-1166DS VendorBUFFALO INC. Affected firmware Ver. 1.34 and earlier Fixed in — No fix listed CNA
  • WEX-1800AX4 VendorBUFFALO INC. Affected firmware Ver. 1.13 and earlier Fixed in — No fix listed CNA
  • WEX-1800AX4EA VendorBUFFALO INC. Affected firmware Ver. 1.13 and earlier Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:o:buffalo:wsr-3200ax4s_firmware:*:*:*:*:*:*:*:*up to 1.26VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-3200ax4s:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-3200ax4b_firmware:1.25:*:*:*:*:*:*:*1.25VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-3200ax4b:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhp2_firmware:*:*:*:*:*:*:*:*up to 1.22VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhp2:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:*up to 1.22VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-a2533dhp2:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhp3_firmware:*:*:*:*:*:*:*:*up to 1.26VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhp3:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-3200ax4s_firmware:*:*:*:*:*:*:*:* Versions up to 1.26 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-3200ax4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-3200ax4b_firmware:1.25:*:*:*:*:*:*:* Versions 1.25 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-3200ax4b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhp2_firmware:*:*:*:*:*:*:*:* Versions up to 1.22 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-a2533dhp2_firmware:*:*:*:*:*:*:*:* Versions up to 1.22 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-a2533dhp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhp3_firmware:*:*:*:*:*:*:*:* Versions up to 1.26 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:buffalo:wsr-a2533dhp3_firmware:*:*:*:*:*:*:*:*up to 1.26VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-a2533dhp3:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhpl2_firmware:*:*:*:*:*:*:*:*up to 1.03VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhpl2:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhpls_firmware:*:*:*:*:*:*:*:*up to 1.07VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhpls:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wex-1800ax4_firmware:*:*:*:*:*:*:*:*up to 1.13VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wex-1800ax4:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wex-1800ax4ea_firmware:*:*:*:*:*:*:*:*up to 1.13VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wex-1800ax4ea:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhp_firmware:*:*:*:*:*:*:*:*up to 1.08VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhp:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wsr-2533dhpl_firmware:*:*:*:*:*:*:*:*up to 1.08VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wsr-2533dhpl:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
cpe:2.3:o:buffalo:wcr-1166ds_firmware:*:*:*:*:*:*:*:*up to 1.34VulnerableBUFFALO INC.
cpe:2.3:h:buffalo:wcr-1166ds:-:*:*:*:*:*:*:*not specified by NVDRunning onBUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-a2533dhp3_firmware:*:*:*:*:*:*:*:* Versions up to 1.26 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-a2533dhp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhpl2_firmware:*:*:*:*:*:*:*:* Versions up to 1.03 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhpl2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhpls_firmware:*:*:*:*:*:*:*:* Versions up to 1.07 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhpls:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wex-1800ax4_firmware:*:*:*:*:*:*:*:* Versions up to 1.13 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wex-1800ax4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wex-1800ax4ea_firmware:*:*:*:*:*:*:*:* Versions up to 1.13 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wex-1800ax4ea:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhp_firmware:*:*:*:*:*:*:*:* Versions up to 1.08 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wsr-2533dhpl_firmware:*:*:*:*:*:*:*:* Versions up to 1.08 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wsr-2533dhpl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.
  • cpe:2.3:o:buffalo:wcr-1166ds_firmware:*:*:*:*:*:*:*:* Versions up to 1.34 Vulnerable ·BUFFALO INC.
  • cpe:2.3:h:buffalo:wcr-1166ds:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BUFFALO INC.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-43486
  2. 2026-10-03 Alias added: GHSA-2r4f-phw2-gpqp

References

Other 2

  • TI-2022-21238 OS command injection in BUFFALO INC. WXR-11000XE12 CVSS 3.1HIGH 8.8
  • TI-2017-07912 OS command injection in BUFFALO INC. WCR-1166DS CVSS 3.0MEDIUM 6.8
  • TI-2024-17120 OS command injection in BUFFALO INC. WCR-1166DS CVSS 3.1MEDIUM 4.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences