Lucene search

K
nvd[email protected]NVD:CVE-2022-48472
HistoryJun 16, 2023 - 1:15 p.m.

CVE-2022-48472

2023-06-1613:15:09
CWE-78
web.nvd.nist.gov
huawei
printer
command injection
vulnerability
remote code execution
bisheng-wnm
ota-bisheng-fw-2.0.0.211-beta
fw 3.0.0.325
fw 2.0.0.211

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.

Affected configurations

NVD
Node
huaweibisheng-wnm_firmwareMatch2.0.0.211
OR
huaweibisheng-wnm_firmwareMatch3.0.0.325
OR
huaweiota-bisheng_firmwareMatch2.0.0.211beta
AND
huaweibisheng-wnmMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

Related for NVD:CVE-2022-48472