CVE-2022-48472

A Huawei printer has a system command injection vulnerability

Critical · published June 16, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

🚨 Your Huawei printer could be an unwitting accomplice! A sneaky system command injection vulnerability lets attackers remotely execute code — and it’s affecting several BiSheng-WNM versions. 🔥 Think of it like a restaurant where the chef takes orders without checking for allergies. If someone slips in a dangerous request, the chef could whip up something harmful without a second thought! An attacker could exploit this vulnerability to execute any command on the printer, potentially gaining full control over the device. This means they could manipulate settings, steal sensitive information, or even turn your printer into a launchpad for further attacks!

Put simply

Think of it like a restaurant where the chef takes orders without checking for allergies. If someone slips in a dangerous request, the chef could whip up something harmful without a second thought! This vulnerability allows an attacker to inject malicious commands into the printer’s system, leading to remote code execution. Affected versions include BiSheng-WNM OTA-BiSheng-FW-2.0.0.211-beta, FW 3.0.0.325, and FW 2.0.0.211.

What to do

An attacker could exploit this vulnerability to execute any command on the printer, potentially gaining full control over the device. This means they could manipulate settings, steal sensitive information, or even turn your printer into a launchpad for further attacks! Immediate action is crucial! Ensure that your Huawei printer is upgraded to the latest firmware version to close off this vulnerability. Regularly audit your device for any unauthorized access or suspicious activity. 🛡️ You've got this! Take these steps, and you’ll be back to printing safely in no time! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01074 · 64.7th percentile
Published
2023-06-16T12:54Z
EPSS history
Timeline
  • 16 JUN 12:54Z
    A Huawei printer has a system command injection vulnerability
    cvelistv5