ID
VAR-202301-0949
CVE
CVE-2022-43973
TITLE
Linksys WRT54GL Wireless-G Broadband Router In OS Command injection vulnerability
Trust: 0.8
DESCRIPTION
An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request to /apply.cgi to execute arbitrary commands on the underlying Linux operating system as root. Linksys WRT54GL Wireless-G Broadband Router for, OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Linksys WRT54GL is a wireless router from Linksys, Inc. of the United States
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | linksys | model: | wrt54gl | scope: | lte | version: | 4.30.18.006 | Trust: 1.0 |
| vendor: | シスコシステムズ linksys | model: | wrt54gl | scope: | lte | version: | linksys wrt54gl firmware 4.30.18.006 and earlier | Trust: 0.8 |
| vendor: | シスコシステムズ linksys | model: | wrt54gl | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | linksys | model: | wrt54gl | scope: | lte | version: | <=4.30.18.006 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-78 | Trust: 1.0 |
| problemtype: | OS Command injection (CWE-78) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
operating system commend injection
Trust: 0.6
PATCH
| title: | Linksys WRT54GL Wireless-G WiFi Router | url: | https://www.linksys.com/support-product?sku=WRT54GL | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-43973 | Trust: 3.8 |
| db: | JVNDB | id: | JVNDB-2023-001877 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-01713 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202301-596 | Trust: 0.6 |
REFERENCES
| url: | https://youtu.be/73-1lhvjpng | Trust: 2.2 |
| url: | https://youtu.be/tewamzakq_w | Trust: 1.6 |
| url: | https://youtu.be/rfwvycubnz0 | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-43973 | Trust: 0.8 |
| url: | https://www.youtube.com/watch?v=73-1lhvjpng | Trust: 0.8 |
| url: | https://www.youtube.com/watch?v=tewamzakq_w | Trust: 0.8 |
| url: | https://www.youtube.com/watch?v=rfwvycubnz0 | Trust: 0.8 |
| url: | https://cxsecurity.com/cveshow/cve-2022-43973/ | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-01713 |
| db: | JVNDB | id: | JVNDB-2023-001877 |
| db: | CNNVD | id: | CNNVD-202301-596 |
| db: | NVD | id: | CVE-2022-43973 |
LAST UPDATE DATE
2025-01-20T23:24:42.725000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-01713 | date: | 2025-01-17T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-001877 | date: | 2023-05-17T08:42:00 |
| db: | CNNVD | id: | CNNVD-202301-596 | date: | 2023-01-16T00:00:00 |
| db: | NVD | id: | CVE-2022-43973 | date: | 2023-01-13T16:40:17.660 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-01713 | date: | 2023-01-15T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-001877 | date: | 2023-05-17T00:00:00 |
| db: | CNNVD | id: | CNNVD-202301-596 | date: | 2023-01-09T00:00:00 |
| db: | NVD | id: | CVE-2022-43973 | date: | 2023-01-09T21:15:10.997 |