Medium severity6.5NVD Advisory· Published Jan 9, 2023· Updated Jun 17, 2026
CVE-2022-43972
CVE-2022-43972
Description
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.
Affected products
3<=4.30.18.006+ 1 more
- (no CPE)range: <=4.30.18.006
- (no CPE)range: Firmware
Patches
Vulnerability mechanics
References
3- youtu.be/73-1lhvJPNgnvdExploitThird Party Advisory
- youtu.be/RfWVYCUBNZ0nvdExploitThird Party Advisory
- youtu.be/TeWAmZaKQ_wnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.