CVE-2022-43443: Buffalo Wcr-1166ds Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page.

Affected products

• Buffalo Wcr-1166ds Firmware: up to and including 1.34
• Buffalo Wsr-2533dhp2 Firmware: up to and including 1.22
• Buffalo Wsr-2533dhp3 Firmware: up to and including 1.26
• Buffalo Wsr-2533dhp Firmware: up to and including 1.08
• Buffalo Wsr-2533dhpl2 Firmware: up to and including 1.03
• Buffalo Wsr-2533dhpl Firmware: up to and including 1.08
• Buffalo Wsr-2533dhpls Firmware: up to and including 1.07
• Buffalo Wsr-3200ax4b Firmware: version 1.25 only
• Buffalo Wsr-3200ax4s Firmware: up to and including 1.26
• Buffalo Wsr-a2533dhp2 Firmware: up to and including 1.22
• Buffalo Wsr-a2533dhp3 Firmware: up to and including 1.26

Published 2022-12-19. Last modified 2026-06-17.