CVE-2022-48472

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
HuaweiBiSheng-WNMOTA-BiSheng-FW-2.0.0.211-beta; BiSheng-WNM FW 3.0.0.325; BiSheng-WNM FW 2.0.0.211

References

Timeline

Published
Jun 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-484737.5There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer sCVE-2022-484747.5Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious requeCVE-2022-484758.8Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could CVE-2022-484767.5In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possibleCVE-2022-484779.8In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missingCVE-2022-484789.8The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptiCVE-2022-484799.8The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability maCVE-2022-48485.7Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484807.5Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2022-484817.8In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possibleCVE-2022-484827.53CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /ElectrCVE-2022-484837.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dow
CVE-2022-48472: Critical severity, CVSS 9.8 | Vulnix