Lucene search

[email protected]CVE-2011-4499

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4499

2022-10-0316:15:14

CWE-16

[email protected]

web.nvd.nist.gov

cve

2011

4499

upnp

igd

broadcom

cisco

linksys

wrt54g

firmware

vulnerability

remote access

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an “external forwarding” vulnerability.

Affected configurations

NVD

Node

ciscolinksys_wrt54g_router_firmwareRange≤4.20.8

ciscolinksys_wrt54g_router_firmwareMatch3.03.9

ciscolinksys_wrt54g_router_firmwareMatch4.20.7

AND

linksyswrt54g

linksyswrt54gMatch2.2

Node

ciscolinksys_wrt54gs_router_firmwareRange≤4.70.6

ciscolinksys_wrt54gs_router_firmwareMatch2.09.1

AND

linksyswrt54gsMatch1.0

linksyswrt54gsMatch2.0

linksyswrt54gsMatch3.0

Node

ciscolinksys_wrt54gs_router_firmwareRange≤1.06

AND

linksyswrt54gsMatch4.0

CPENameOperatorVersion
cisco:linksys_wrt54g_router_firmwarecisco linksys wrt54g router firmwarele4.20.8
cisco:linksys_wrt54g_router_firmwarecisco linksys wrt54g router firmwareeq3.03.9
cisco:linksys_wrt54g_router_firmwarecisco linksys wrt54g router firmwareeq4.20.7
linksys:wrt54glinksys wrt54geq*
linksys:wrt54glinksys wrt54geq2.2

CPE	Name	Operator	Version
cisco:linksys_wrt54g_router_firmware	cisco linksys wrt54g router firmware	le	4.20.8
cisco:linksys_wrt54g_router_firmware	cisco linksys wrt54g router firmware	eq	3.03.9
cisco:linksys_wrt54g_router_firmware	cisco linksys wrt54g router firmware	eq	4.20.7
linksys:wrt54g	linksys wrt54g	eq	*
linksys:wrt54g	linksys wrt54g	eq	2.2

References

www.kb.cert.org/vuls/id/357851

www.upnp-hacks.org/devices.html

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

Related for CVE-2011-4499

cvelist1 nvd1 prion1