UPnP Internet Gateway Device (IGD) Port Mapping Listing

According to its UPnP data, the remote device is a NAT router that supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to list 'port mappings' that redirect ports from the device's external interface to the scanner address. An unauthenticated, remote...

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass Cross-Site Request Forgery

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass Cross-Site Request Forgery ----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things...

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request Forgery

----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things: 1. Cross Site Request Forgery For more information, just google it. 2. This code change to new passwo...

TP-Link Cross Site Request Forgery Vulnerability

This write up goes into detail about how real world cross site request forgery attacks can be used to hijack DNS on TP-Link routers. I. Introduction Today the majority of wired Internet connections is used with an embedded NAT router, which allows using the same Internet connection with several...

STUN Detection

The remote service supports the STUN Session Traversal Utilities for NAT protocol as described in RFC 5389. STUN helps client software behind a NAT router discover the external public address and the behavior of the router. Note that an earlier version of the protocol used a different acronym -...

UPnP Internet Gateway Device (IGD) Port Mapping Manipulation

According to its UPnP data, the remote device is a NAT router that supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to add 'port mappings' that redirect ports from the device's external interface to the scanner address. An unauthenticated, remote...

UPnP Internet Gateway Device (IGD) External IP Address Reachable

According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to retrieve the external IP address of the device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35708;...

UPnP Internet Gateway Device (IGD) Protocol Detection

According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Therefore, the device is potentially vulnerable as the protocol can allow an adjacent attacker to punch holes in your firewall e.g., via a malicious...