CVE-2022-43970: Buffer overflow in Linksys WRT54GL
Vulnerability summary
CVE-2022-43970 is a high (CVSS 7.2) Classic Buffer Overflow vulnerability in linksys wrt54gl_firmware. EPSS estimates a 19.30% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 09-01-2023PublishedVulnerability first disclosed.
- 09-04-2025Last modifiedVulnerability information updated.
Description
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.2HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
19.30%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
No change 0.00 pp
From 19.30% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
3 foundExploit Reference (youtu.be)
Maturity: unknown
Exploit Reference (youtu.be)
Maturity: unknown
Exploit Reference (youtu.be)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Linksys2 products
- wrt54gl_firmware≤ 4.30.18.006
- wrt54gl wireless-g broadband router≥ Firmware, ≤ 4.30.18.006
1 vendor · 2 products