A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.
References
| Link | Resource |
|---|---|
| https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-6bcddec5-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
26 Jun 2023, 22:26
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-78 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | (MISC) https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-6bcddec5-en - Vendor Advisory | |
| First Time |
Huawei bisheng-wnm Firmware
Huawei Huawei bisheng-wnm Huawei ota-bisheng Firmware |
|
| CPE | cpe:2.3:o:huawei:bisheng-wnm_firmware:2.0.0.211:*:*:*:*:*:*:* cpe:2.3:o:huawei:bisheng-wnm_firmware:3.0.0.325:*:*:*:*:*:*:* cpe:2.3:o:huawei:ota-bisheng_firmware:2.0.0.211:beta:*:*:*:*:*:* cpe:2.3:h:huawei:bisheng-wnm:-:*:*:*:*:*:*:* |
16 Jun 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-16 13:15
Updated : 2023-12-10 15:01
NVD link : CVE-2022-48472
Mitre link : CVE-2022-48472
CVE.ORG link : CVE-2022-48472
JSON object : View
Products Affected
huawei
- bisheng-wnm
- bisheng-wnm_firmware
- ota-bisheng_firmware
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')