Approved changes feed: RSS · Atom

cpe:2.3:o:linksys:wrt54gl_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorLinksys (6d3f2e7c-48a8-5a19-9a98-85960b5ae3c2)
ProductWrt54Gl Firmware (193ccdf4-3489-546c-9e50-c24f058d6b9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43973 vulnerable 2026-06-08 05:49:35.195224 Arbitrary code execution in Linksys WRT54GL
HIGH (7.2)
An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request to /apply.cgi to execute arbitrary commands on the underlying Linux operating system as root.
Published: 2023-01-09T00:00:00.000Z
Updated: 2025-04-09T14:20:48.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43972 vulnerable 2026-06-08 05:49:35.194775 Null pointer dereference in Linksys WRT54GL
MEDIUM (6.5)
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.
Published: 2023-01-09T00:00:00.000Z
Updated: 2025-04-09T14:22:24.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43970 vulnerable 2026-06-08 05:49:35.188450 Buffer overflow in Linksys WRT54GL
HIGH (7.2)
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi.
Published: 2023-01-09T00:00:00.000Z
Updated: 2025-04-09T14:26:11.008Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.