Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-43973. PoCs published by UmbertoDellaMonica.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-43973, targeting the Linksys WRT54GL router. It includes detailed hardware exploitation steps, firmware extraction, and a MIPS reverse shell payload for remote code execution.
Description
An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request to /apply.cgi to execute arbitrary commands on the underlying Linux operating system as root.
Exploits (1)
This repository contains a functional exploit for CVE-2022-43973, targeting the Linksys WRT54GL router. It includes detailed hardware exploitation steps, firmware extraction, and a MIPS reverse shell payload for remote code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H