CVE-2022-43970: Buffer overflow in Linksys WRT54GL
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the StartEPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43970?
CVE-2022-43970 is a buffer overflow vulnerability that exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006.
How severe is CVE-2022-43970?
CVE-2022-43970 has a severity rating of 7.2 (High).
How does CVE-2022-43970 affect Linksys WRT54GL Wireless-G Broadband Router?
CVE-2022-43970 allows an authenticated attacker with administrator privileges to execute arbitrary commands on the router.
Which software versions are affected by CVE-2022-43970?
CVE-2022-43970 affects Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006.
Is Linksys WRT54GL Wireless-G Broadband Router vulnerable to CVE-2022-43970?
No, Linksys WRT54GL Wireless-G Broadband Router is not vulnerable to CVE-2022-43970.
How can I fix CVE-2022-43970?
To fix CVE-2022-43970, update the firmware of your Linksys WRT54GL Wireless-G Broadband Router to a version higher than 4.30.18.006.
What are the Common Weakness Enumeration (CWE) categories associated with CVE-2022-43970?
CVE-2022-43970 is associated with the CWE categories 119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), 787 (Out-of-bounds Write), and 120 (Buffer Copy without Checking Size of Input).