CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability...

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows SSDP Service Elevation of Privilege Vulnerability...

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability...

CVE-2021-31193 Windows SSDP Service Elevation of Privilege Vulnerability

...

CVE-2021-31193

CVE-2021-31193 is a Windows SSDP Service elevation-of-privilege vulnerability. Affects Windows OS where the SSDP service can be abused locally to gain high integrity privileges (CVSS3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation in provided documents points to Microsoft security updates r...

Windows SSDP Service Elevation of Privilege Vulnerability

...

CVE-2021-31193: Undefined Security Weakness

Windows SSDP Service Elevation of Privilege Vulnerability...

PT-2021-3038 · Microsoft · Windows Ssdp Service +1

Name of the Vulnerable Software and Affected Versions: Windows SSDP Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows SSDP Service component of the Windows operating system. Exploitation of this issue may allow an attacker...

KLA12174 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

Denial Of Service (DoS)

libupnp is vulnerable to denial of service. A remote attackers is able to cause a denial of service crash via a malicious SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c...

CVE-2021-29379

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...

CVE-2021-29379

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...

CVE-2021-29379

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...

CVE-2021-29379: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...

CVE-2021-27239

The CVE-2021-27239 issue affects NETGEAR R6400 and R6700 routers with firmware 1.0.4.98. The flaw resides in the upnpd service, which listens on UDP port 1900; a crafted MX header in an SSDP message can overflow a fixed-length stack-based buffer, allowing network-adjacent attackers to execute arb...

CVE-2021-27239

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on...

NETGEAR Multiple Routers SSDP Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. ...

Cybercriminals Now Using Plex Media Servers to Amplify DDoS Attacks

A new distributed denial-of-service attack DDoS vector has ensnared Plex Media Server systems to amplify malicious traffic against targets to take them offline. "Plex's startup processes unintentionally expose a Plex UPnP-enabled service registration responder to the general Internet, where it ca...

Xxe

openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity XXE attack allows attackers in the same network as the openHAB instance to retrieve internal information like the content of files from th...