CVE-2022-43970 Buffer overflow in Linksys WRT54GL
An authenticated administrator can trigger a stack-based buffer overflow in the router's web server to execute arbitrary commands as root.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-43970?
CVE-2022-43970 is a high-severity memory corruption vulnerability in Linksys WRT54GL Wireless-G Broadband Router, published on 9 Jan 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi.
Which versions are affected by CVE-2022-43970?
It affects 1 product.
Products include Linksys Wrt54gl Firmware.
How do I fix CVE-2022-43970?
No fix has been published for CVE-2022-43970 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-43970 being exploited?
There is no known exploitation of CVE-2022-43970 in the wild and no public exploit code.
Other vulnerabilities in Linksys WRT54GL Wireless-G Broadband Router
- CVE-2023-31742 Command injection in n/a
- CVE-2022-43973 Arbitrary code execution in Linksys WRT54GL
- CVE-2022-43972 Null pointer dereference in Linksys WRT54GL
- CVE-2024-1405 Linksys WRT54GL Web Management Interface wlaninfo.htm information disclosure
- CVE-2024-1406 Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure
Sources
Also known as GHSA-f4c9-fwv7-5pmf.