CVE-2021-35392

Realtek Jungle SDK (Realtek RTL819xD-based devices) exposes a vulnerable WiFi Simple Config server (Go-Ahead/Boa HTTP web server variants) that implements UPnP/SSDP. CVE-2021-35392 describes a heap overflow in handling SSDP NOTIFY messages crafted from M-SEARCH ST headers, affecting Realtek Jungl...

CVE-2021-35393

Concrete details exist for Realtek Jungle SDK vulnerabilities (CVE-2021-35392, -35393, -35394, -35395). Realtek Jungle SDK v2.x–v3.4.14B runs a WiFi Simple Config/UPnP/SSDP server (named wscd or mini_upnpd) and separate management interfaces. Root causes include unsafe handling of submitted param...

CVE-2021-35393

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due ...

PT-2021-3800 · Realtek · Realtek Jungle Sdk

Name of the Vulnerable Software and Affected Versions: Realtek Jungle SDK versions v2.x up to v3.4.14B Description: The issue is caused by a heap buffer overflow in the WiFi Simple Config server, which implements both UPnP and SSDP protocols. This overflow is due to the unsafe crafting of SSDP...

Advisory ROSA-SA-2021-1898

Software: libupnp 1.6.25 OS: Cobalt 7.9 CVE-ID: CVE-2020-13848 CVE-Crit: HIGH CVE-DESC: Portable UPnP SDK aka libupnp 1.12.1 and earlier allows remote attackers to cause a denial of service failure with a crafted SSDP message due to dereferencing a NULL pointer in the FindServiceControlURLPath an...

The vulnerability of the Windows SSDP Service component in the Windows operating system allows attackers to increase their privileges.

The vulnerability of the Windows SSDP Service component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

RHEL 8 : gssdp and gupnp (RHSA-2021:1789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1789 advisory. GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API...

RLSA-2021:1789 Moderate: gssdp and gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. The...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66096)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation-of-privilege vulnerability exists in the "SSDP service" of Microsoft Windows/Windows Server. N...

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability...

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows SSDP Service Elevation of Privilege Vulnerability...

CVE-2021-31193 Windows SSDP Service Elevation of Privilege Vulnerability

...

CVE-2021-31193

CVE-2021-31193 is a Windows SSDP Service elevation-of-privilege vulnerability. Affects Windows OS where the SSDP service can be abused locally to gain high integrity privileges (CVSS3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation in provided documents points to Microsoft security updates r...

Windows SSDP Service Elevation of Privilege Vulnerability

...

KLA12174 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

PT-2021-3038 · Microsoft · Windows Ssdp Service +1

Name of the Vulnerable Software and Affected Versions: Windows SSDP Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows SSDP Service component of the Windows operating system. Exploitation of this issue may allow an attacker...

Denial Of Service (DoS)

libupnp is vulnerable to denial of service. A remote attackers is able to cause a denial of service crash via a malicious SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c...

CVE-2021-29379

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...

CVE-2021-29379

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...