Beveiligingsadvies

CVE-2022-43972

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-09 00:00:00
Laatst bijgewerkt 2025-04-09 14:22:24
Toegewezen door trellix
CVSS-score 6.5
Status PUBLISHED

Beschrijving

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.