CVE-2022-43972 | BDVDB-2026-192528 Detail

Description#

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-01-09Record published in the CVE List.
2. Version 22025-04-09Most recent update recorded in the CVE List.