CVE-2022-43971 Arbitrary code execution in Linksys WUMC710
An authenticated administrator can execute arbitrary commands as root on Linksys WUMC710 devices via a malicious request to the NTP configuration endpoint.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-43971?
CVE-2022-43971 is a high-severity command injection vulnerability in Linksys WUMC710 Wireless-AC Universal Media Connector, published on 9 Jan 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An arbitrary code exection vulnerability exists in Linksys WUMC710 Wireless-AC Universal Media Connector with firmware <= 1.0.02 (build3). The do_setNTP function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious GET or POST request to /setNTP.cgi to execute arbitrary commands on the underlying Linux operating system as root.
Weakness: CWE-78
Which versions are affected by CVE-2022-43971?
It affects 1 product.
Products include Linksys Wumc710 Firmware.
How do I fix CVE-2022-43971?
No fix has been published for CVE-2022-43971 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2022-43971 being exploited?
There is no known exploitation of CVE-2022-43971 in the wild and no public exploit code.
Sources
Also known as GHSA-mmc2-hxc5-9423.