ID
VAR-202301-0975
CVE
CVE-2022-43970
TITLE
Linksys WRT54GL Wireless-G Broadband Router Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi. Linksys WRT54GL Wireless-G Broadband Router Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Linksys WRT54GL is a wireless router from Linksys, an American company. The vulnerability is caused by a boundary error in the Start_EPI function in the httpd binary file when processing untrusted input
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | linksys | model: | wrt54gl | scope: | lte | version: | 4.30.18.006 | Trust: 1.0 |
| vendor: | シスコシステムズ linksys | model: | wrt54gl | scope: | lte | version: | linksys wrt54gl firmware 4.30.18.006 and earlier | Trust: 0.8 |
| vendor: | シスコシステムズ linksys | model: | wrt54gl | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | linksys | model: | wrt54gl | scope: | lte | version: | <=4.30.18.006 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
buffer error
Trust: 0.6
PATCH
| title: | Linksys WRT54GL Wireless-G WiFi Router | url: | https://www.linksys.com/support-product?sku=WRT54GL | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-43970 | Trust: 3.8 |
| db: | JVNDB | id: | JVNDB-2023-001881 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-01712 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202301-605 | Trust: 0.6 |
REFERENCES
| url: | https://youtu.be/73-1lhvjpng | Trust: 2.2 |
| url: | https://youtu.be/tewamzakq_w | Trust: 1.6 |
| url: | https://youtu.be/rfwvycubnz0 | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-43970 | Trust: 0.8 |
| url: | https://www.youtube.com/watch?v=73-1lhvjpng | Trust: 0.8 |
| url: | https://www.youtube.com/watch?v=tewamzakq_w | Trust: 0.8 |
| url: | https://www.youtube.com/watch?v=rfwvycubnz0 | Trust: 0.8 |
| url: | https://cxsecurity.com/cveshow/cve-2022-43970/ | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-01712 |
| db: | JVNDB | id: | JVNDB-2023-001881 |
| db: | CNNVD | id: | CNNVD-202301-605 |
| db: | NVD | id: | CVE-2022-43970 |
LAST UPDATE DATE
2025-01-19T23:24:28.166000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-01712 | date: | 2025-01-17T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-001881 | date: | 2023-05-17T09:05:00 |
| db: | CNNVD | id: | CNNVD-202301-605 | date: | 2023-01-16T00:00:00 |
| db: | NVD | id: | CVE-2022-43970 | date: | 2023-01-13T14:19:16.203 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-01712 | date: | 2025-01-15T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-001881 | date: | 2023-05-17T00:00:00 |
| db: | CNNVD | id: | CNNVD-202301-605 | date: | 2023-01-09T00:00:00 |
| db: | NVD | id: | CVE-2022-43970 | date: | 2023-01-09T21:15:10.750 |