CVE-2022-43972 — Null pointer dereference in Linksys WRT54GL
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action functi…
Published: 2023-01-09 · CVSS: 6.5 · CVSS 3.1
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7