Is CVE-2022-34840 actively exploited?

CVE-2022-34840 has no public evidence of in-the-wild exploitation as of 2025-04-23.

What is the CVSS score for CVE-2022-34840?

CVE-2022-34840 has a CVSS score of 6.5 (MEDIUM severity). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

How do I patch CVE-2022-34840?

Patch guidance is available from buffalo security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2022-34840.

CVE-2022-34840 - remediation guidance & executive summary

Q: Which products are affected by CVE-2022-34840?

9 products: buffalo wzr-300hp firmware, buffalo wzr-450hp firmware, buffalo wzr-600dhp firmware, buffalo wzr-900dhp firmware, buffalo hw-450hp-zwe firmware, and 4 more.

Description

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, and WZR-D1100H firmware Ver. 2.00 and earlier.

CVSS Metrics

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector: adjacent network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: none
Integrity: high
Availability: none
Weaknesses: CWE-798 · Hard-coded Credentials CWE-798 · Hard-coded Credentials

Metadata

Primary Vendor: BUFFALO
Published: 12/7/2022
Last Modified: 4/23/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

buffalo : wzr-300hp_firmwarebuffalo : wzr-450hp_firmwarebuffalo : wzr-600dhp_firmwarebuffalo : wzr-900dhp_firmwarebuffalo : hw-450hp-zwe_firmwarebuffalo : wzr-450hp-cwt_firmwarebuffalo : wzr-450hp-ub_firmwarebuffalo : wzr-600dhp2_firmwarebuffalo : wzr-d1100h_firmware

Remediation Guidance

Executive Summary

View on NIST NVD