Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-43972

Null pointer dereference in Linksys WRT54GL

Description

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linksys WRT54GL Wireless-G Broadband Router

  • Firmware to ≤ 4.30.18.006affected

References