CVE-2011-4502

The CVE-2011-4502 issue affects the UPnP IGD implementation in Edimax EdiLinux on affected devices: Edimax BR-6104K (firmware before 3.25), Edimax 6114Wg, Canyon-Tech CN-WF512 (firmware 1.83), Canyon-Tech CN-WF514 (firmware 2.08), Sitecom WL-153 (before 1.39), and Sweex LB000021 (firmware 3.15). ...

CVE-2011-4500

The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests...

CVE-2011-4500

CVE-2011-4500 affects the Cisco Linksys WRT54GX with firmware 2.00.05. When UPnP IGD is enabled, the SOAP server is configured to listen on the WAN port, enabling remote administration of the firewall via SOAP requests. This is the concrete vulnerability as described in multiple sources (NVD, Red...

CVE-2011-4503

The CVE-2011-4503 issue affects Broadcom Linux on the Sitecom WL-111, specifically the UPnP IGD implementation. The vulnerability allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request toward the WAN interface, tied to an “external f...

CVE-2011-4501

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

CVE-2011-4499

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMappi...

CVE-2011-4505

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

PT-2011-4969

Name of the Vulnerable Software and Affected Versions SpeedTouch 5x6 devices with firmware prior to 6.2.29 Description The issue allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface. This is related to an...

CVE-2011-4500: Undefined Security Weakness

The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests...

PT-2011-4968

Name of the Vulnerable Software and Affected Versions ZyXEL P-330W affected versions not specified Description The issue concerns the UPnP IGD implementation in the Pseudo ICS UPnP software, allowing remote attackers to establish arbitrary port mappings. This is achieved by sending a UPnP...

CVE-2011-4505: Undefined Security Weakness

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4499: Undefined Security Weakness

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMappi...

CVE-2011-4504: Undefined Security Weakness

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4502: Improper Neutralization of Special Elements used in an OS Command

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

PT-2011-4970

Name of the Vulnerable Software and Affected Versions Thomson TG585 firmware versions prior to 7.4.3.2 Description The issue allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an external forwardi...

CVE-2011-4501: Undefined Security Weakness

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

PT-2011-4965

Name of the Vulnerable Software and Affected Versions Edimax BR-6104K versions prior to 3.25 Edimax 6114Wg version not specified Canyon-Tech CN-WF512 version 1.83 Canyon-Tech CN-WF514 version 2.08 Sitecom WL-153 versions prior to 1.39 Sweex LB000021 version 3.15 Description The issue allows remot...

PT-2011-4963

Name of the Vulnerable Software and Affected Versions Cisco Linksys WRT54G versions prior to 4.30.5 Cisco Linksys WRT54GS v1 through v3 versions prior to 4.71.1 Cisco Linksys WRT54GS v4 versions prior to 1.06.1 Description The issue allows remote attackers to establish arbitrary port mappings by...

PT-2011-4966

Name of the Vulnerable Software and Affected Versions Edimax BR-6104K versions prior to 3.25 Edimax 6114Wg version not specified Canyon-Tech CN-WF512 version 1.83 Canyon-Tech CN-WF514 version 2.08 Sitecom WL-153 versions prior to 1.39 Sweex LB000021 version 3.15 Description The issue allows remot...

PT-2011-4964

Name of the Vulnerable Software and Affected Versions Cisco Linksys WRT54GX version 2.00.05 Description The issue concerns the UPnP IGD implementation. When UPnP is enabled, it configures the SOAP server to listen on the WAN port. This allows remote attackers to administer the firewall via SOAP...