Xxe

2011-11-2211:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.6%

JSON

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an “external forwarding” vulnerability.

CPENameOperatorVersion
pseudoicseq0.1
pseudoicseq0.2
pseudoicseq0.3

Name	Operator	Version
pseudoics	eq	0.1
pseudoics	eq	0.2
pseudoics	eq	0.3

References

www.kb.cert.org/vuls/id/357851

www.upnp-hacks.org/suspect.html