PT-2023-1574 · Unknown · Bisheng-Wnm Fw

Published 2023-01-18 · Updated 2025-03-11 · CVE-2022-48255

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BiSheng-WNM FW version 3.0.0.325

Description The issue is related to a system command injection vulnerability. This vulnerability could allow a remote attacker to execute arbitrary commands by sending specially crafted data. Successful exploitation could lead to remote code execution.

Recommendations For BiSheng-WNM FW version 3.0.0.325, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

BDU:2023-01055

CVE-2022-48255

Affected Products

Bisheng-Wnm Fw

References · 6

• https://bdu.fstec.ru/vul/2023-01055 · Security Note
• https://huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-f18e962a-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48255 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48255 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023011811 · Note
• https://t.me/cvenotify/114307 · Telegram Post