CVE-2011-4505 - The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability

Back Back to CVE browser

HIGH

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability

Published Nov 22, 2011

7.5

HIGH

CVSS 2.0

EPSS 1.31%

Description

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-16

References (3)

http://toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf
x_refsource_MISC
http://www.kb.cert.org/vuls/id/357851
third-party-advisoryx_refsource_CERT-VNUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-4431
Advisory

Link	Providers	Tags
http://toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf		x_refsource_MISC
http://www.kb.cert.org/vuls/id/357851		third-party-advisoryx_refsource_CERT-VNUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-4431		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 22, 2011

Updated Sep 16, 2024

Reserved Nov 22, 2011

Link CVE-2011-4505

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-4505

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 22, 2011

Updated Sep 16, 2024

Link EUVD-2011-4431

GitHub

No data