Lucene search

K
cve[email protected]CVE-2011-4504
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4504

2022-10-0316:15:14
CWE-16
web.nvd.nist.gov
16
cve-2011-4504
upnp
igd
pseudo ics
zyxel p-330w
remote attackers
port mappings
soap request
wan interface
external forwarding
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.6%

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an “external forwarding” vulnerability.

Affected configurations

NVD
Node
genmei_moripseudoicsMatch0.1
OR
genmei_moripseudoicsMatch0.2
OR
genmei_moripseudoicsMatch0.3
AND
zyxelp-330w_router

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.6%

Related for CVE-2011-4504