CVE-2011-4505

2011-11-2211:00:00

mitre

www.cve.org

cve-2011-4505

speedtouch 5x6

upnp igd

firmware 6.2.29

port mappings

soap request

wan interface

external forwarding

AI Score

Confidence

Low

EPSS

0.005

Percentile

77.4%

JSON

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an “external forwarding” vulnerability.

References

toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf

www.kb.cert.org/vuls/id/357851