PT-2023-14415 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

Jessie Chick · Published 2023-01-09 · Updated 2023-01-13 · CVE-2022-43973

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys WRT54GL Wireless-G Broadband Router versions <= 4.30.18.006

Description An arbitrary code execution issue exists due to the Check TSSI function within the httpd binary using unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can exploit this over the network via a malicious POST request to "/apply.cgi" to execute arbitrary commands on the underlying Linux operating system as root.

Recommendations For Linksys WRT54GL Wireless-G Broadband Router versions <= 4.30.18.006, consider disabling the Check TSSI function as a temporary workaround until a patch is available. Restrict access to the "/apply.cgi" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-43973

Affected Products

Linksys Wrt54Gl Wireless-G Broadband Router

References · 6

• 🔥 https://youtu.be/TeWAmZaKQ_w · Exploit
• 🔥 https://youtu.be/RfWVYCUBNZ0 · Exploit
• 🔥 https://youtu.be/73-1lhvJPNg · Exploit
• https://osv.dev/vulnerability/CVE-2022-43973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43973 · Security Note
• https://t.me/cibsecurity/56177 · Telegram Post