High severity · published Jan 9, 2023
CVE-2022-43970
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006
7.2
CVSS
19.3%
EPSS
No
On KEV
Description
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)19.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Wrt54gl Firmware · Linksys
through 4.30.18.006 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-43970
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-43970
Exploit
https://youtu.be/73-1lhvJPNg
Exploit
https://youtu.be/RfWVYCUBNZ0
Exploit
https://youtu.be/TeWAmZaKQ_w
More from Wrt54gl Firmware
7.5
CVE-2024-1404
A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic
7.5
CVE-2022-43972
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006
7.2
CVE-2023-31742
There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006
7.2
CVE-2022-43973
An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006
4.3
CVE-2024-1406
A vulnerability was found in Linksys WRT54GL 4.30.18