PT-2023-14413 · Linksys · Linksys Wumc710 Wireless-Ac Universal Media Connector

Jessie Chick · Published 2023-01-09 · Updated 2023-01-13 · CVE-2022-43971

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys WUMC710 Wireless-AC Universal Media Connector version 1.0.02 (build3) and earlier

Description An arbitrary code execution issue exists due to the do setNTP function within the httpd binary using unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can exploit this over the network via a malicious GET or POST request to "/setNTP.cgi" to execute arbitrary commands on the underlying Linux operating system as root.

Recommendations For Linksys WUMC710 Wireless-AC Universal Media Connector version 1.0.02 (build3) and earlier, as a temporary workaround, consider disabling the do setNTP function until a patch is available. Restrict access to the "/setNTP.cgi" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-43971

Affected Products

Linksys Wumc710 Wireless-Ac Universal Media Connector

References · 6

• 🔥 https://youtu.be/TeWAmZaKQ_w · Exploit
• 🔥 https://youtu.be/73-1lhvJPNg · Exploit
• 🔥 https://youtu.be/RfWVYCUBNZ0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43971 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43971 · Vendor Advisory
• https://t.me/cibsecurity/56185 · Telegram Post