CVE-2011-4505 - The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability

Back Back to CVE browser

HIGH

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability

Published Nov 22, 2011

7.5

HIGH

CVSS 2.0

EPSS 1.31%

Description

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-16

References (3)

http://toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf
x_refsource_MISC
http://www.kb.cert.org/vuls/id/357851
third-party-advisoryx_refsource_CERT-VNUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-4431
Advisory

Link	Providers	Tags
http://toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf		x_refsource_MISC
http://www.kb.cert.org/vuls/id/357851		third-party-advisoryx_refsource_CERT-VNUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-4431		Advisory