CVE-2022-48472

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:bisheng-wnm_firmware:2.0.0.211:*:*:*:*:*:*:*
cpe:2.3:o:huawei:bisheng-wnm_firmware:3.0.0.325:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ota-bisheng_firmware:2.0.0.211:beta:*:*:*:*:*:*
cpe:2.3:h:huawei:bisheng-wnm:-:*:*:*:*:*:*:*

History

26 Jun 2023, 22:26

Type Values Removed Values Added
CWE CWE-78
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References (MISC) https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-6bcddec5-en - (MISC) https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-6bcddec5-en - Vendor Advisory
CPE cpe:2.3:o:huawei:bisheng-wnm_firmware:3.0.0.325:*:*:*:*:*:*:*
cpe:2.3:o:huawei:bisheng-wnm_firmware:2.0.0.211:*:*:*:*:*:*:*
cpe:2.3:h:huawei:bisheng-wnm:-:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ota-bisheng_firmware:2.0.0.211:beta:*:*:*:*:*:*

16 Jun 2023, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-16 13:15

Updated : 2024-02-04 23:37


NVD link : CVE-2022-48472

Mitre link : CVE-2022-48472

CVE.ORG link : CVE-2022-48472


JSON object : View

Products Affected

huawei

  • bisheng-wnm
  • bisheng-wnm_firmware
  • ota-bisheng_firmware
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')