CVE-2022-43972

MEDIUM

Linksys WRT54GL Wireless-G Broadband Router <=4.30.18.006 - Memory ...

Title source: llm
STIX 2.1

Description

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.

References (3)

Core 3
Core References
Exploit, Third Party Advisory
https://youtu.be/73-1lhvJPNg
Exploit, Third Party Advisory
https://youtu.be/RfWVYCUBNZ0
Exploit, Third Party Advisory
https://youtu.be/TeWAmZaKQ_w

Scores

CVSS v3 6.5
EPSS 0.0151
EPSS Percentile 81.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (1)
linksys/wrt54gl_firmware < 4.30.18.006
Published Jan 09, 2023
Tracked Since Feb 18, 2026