← CVE Intelligence

CVE-2022-43972

Null pointer dereference in Linksys WRT54GL PUBLISHED

Description (CNA)

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.

Affected (CNA)

Vendor / productVersions
Linksys / WRT54GL Wireless-G Broadband Routeraffected Firmware through 4.30.18.006

CWE

CWE-476

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.