CVE-2011-4501

The CVE-2011-4501 entry describes a flaw in the UPnP IGD implementation (Edimax EdiLinux) on devices including Edimax BR-6104K (firmware <3.25), Edimax 6114Wg, Canyon-Tech CN-WF512 (fw 1.83), Canyon-Tech CN-WF514 (fw 2.08), Sitecom WL-153 (fw

CVE-2011-4500

CVE-2011-4500 affects the Cisco Linksys WRT54GX with firmware 2.00.05. When UPnP IGD is enabled, the SOAP server is configured to listen on the WAN port, enabling remote administration of the firewall via SOAP requests. This is the concrete vulnerability as described in multiple sources (NVD, Red...

CVE-2011-4500

The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests...

CVE-2011-4501

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

CVE-2011-4506

The CVE-2011-4506 entry concerns Thomson/Technicolor TG585 UPnP IGD implementation prior to firmware 7.4.3.2. Affected component: UPnP IGD SOAP AddPortMapping on WAN interface, enabling remote attackers to create arbitrary port mappings via an external forwarding vulnerability. Impact aligns with...

CVE-2011-4499

The CVE-2011-4499 issue affects the Broadcom UPnP IGD stack used by Cisco Linksys WRT54G/WRT54GS devices. The root cause is a vulnerability in the UPnP AddPortMapping handling on the WAN interface, allowing remote attackers to establish arbitrary port mappings (external forwarding). Affected firm...

UPnP requests accepted over router WAN interfaces

Overview Some Internet router devices incorrectly accept UPnP requests over the WAN interface. Description Universal Plug and Play UPnP is a networking protocol mostly used for personal computing devices to discover and communicate with each other and the Internet. Some UPnP enabled router device...

Nmap NSE net: upnp-info

Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...

Nmap NSE net: broadcast-upnp-info

Attempts to extract system information from the UPnP service by sending a multicast query, then collecting, parsing, and displaying all responses. OpenVAS Vulnerability Test $Id: gbnmapbroadcastupnpinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patr...

Nmap NSE net: broadcast-upnp-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: upnp-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[DCA-2011-0001] TP-LINK TL-WR740N Multiple Vulnerabilities - Stored XSS - Web Console and Upnp server DoS

DCA-2011-0001 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software/Hardware - TP-LINK TL-WR740N Vendor Product Description - The TL-WR740N is a combined wired/wireless network connection device integrated with internet-sharing router and 4-port switch. Th...

OS Identification : UPnP - deprecated

Plugin deprecated by compiled .nbin version osfingerprintupnp.nbin File data osfingerprintupnp.nasl...

Nmap NSE: UPnP Info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: UPnP Info

This script attempts to extract system information from the UPnP service. This is a wrapper on the Nmap Security Scanner's http://nmap.org upnp-info.nse. OpenVAS Vulnerability Test $Id: gbnmapupnpinfo.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap UPnP Info NSE script. Authors:...

Apple Mac OSX - mDNSResponder UPnP Location Overflow (Metasploit)

$Id: upnplocation.rb 11515 2011-01-08 01:12:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Mandriva Update for nautilus-sendto MDVA-2010:233 (nautilus-sendto)

Check for the Version of nautilus-sendto OpenVAS Vulnerability Test Mandriva Update for nautilus-sendto MDVA-2010:233 nautilus-sendto Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

Allegro RomPager 4.07 - UPnP HTTP Request Remote Denial of Service

Allegro RomPager 4.07 - UPnP HTTP Request Remote Denial of Service source: https://www.securityfocus.com/bid/45309/info Allegro RomPager is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to reboot affected devices, resulting in a...

Allegro RomPager 4.07 - UPnP HTTP Request Remote Denial of Service

source: https://www.securityfocus.com/bid/45309/info Allegro RomPager is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to reboot affected devices, resulting in a denial-of-service condition. require 'net/https' url =...

RomPager 4.07 Denial Of Service

Software: "RomPager/4.07 UPnP/1.0" Issue: A reboot can be caused when a special crafted http request is sent. Other Details: This version of RomPager is seen on a number of residential routers that are shipped by a number of different ISP's. The router I personal know it effects is the d-link...