CVE-2011-4502

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

CVE-2011-4505

The CVE-2011-4505 issue affects SpeedTouch 5x6 devices running firmware before 6.2.29. The UPnP IGD implementation exposes a vulnerability where remote attackers can establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, tied to an "exter...

CVE-2011-4502

The CVE-2011-4502 issue affects the UPnP IGD implementation in Edimax EdiLinux on affected devices: Edimax BR-6104K (firmware before 3.25), Edimax 6114Wg, Canyon-Tech CN-WF512 (firmware 1.83), Canyon-Tech CN-WF514 (firmware 2.08), Sitecom WL-153 (before 1.39), and Sweex LB000021 (firmware 3.15). ...

CVE-2011-4503

The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4506

The UPnP IGD implementation on the Thomson aka Technicolor TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4505

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4504

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4500

CVE-2011-4500 affects the Cisco Linksys WRT54GX with firmware 2.00.05. When UPnP IGD is enabled, the SOAP server is configured to listen on the WAN port, enabling remote administration of the firewall via SOAP requests. This is the concrete vulnerability as described in multiple sources (NVD, Red...

CVE-2011-4501

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

CVE-2011-4499

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMappi...

CVE-2011-4500

The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests...

CVE-2011-4499

The CVE-2011-4499 issue affects the Broadcom UPnP IGD stack used by Cisco Linksys WRT54G/WRT54GS devices. The root cause is a vulnerability in the UPnP AddPortMapping handling on the WAN interface, allowing remote attackers to establish arbitrary port mappings (external forwarding). Affected firm...

CVE-2011-4501

The CVE-2011-4501 entry describes a flaw in the UPnP IGD implementation (Edimax EdiLinux) on devices including Edimax BR-6104K (firmware <3.25), Edimax 6114Wg, Canyon-Tech CN-WF512 (fw 1.83), Canyon-Tech CN-WF514 (fw 2.08), Sitecom WL-153 (fw

CVE-2011-4506

The CVE-2011-4506 entry concerns Thomson/Technicolor TG585 UPnP IGD implementation prior to firmware 7.4.3.2. Affected component: UPnP IGD SOAP AddPortMapping on WAN interface, enabling remote attackers to create arbitrary port mappings via an external forwarding vulnerability. Impact aligns with...

UPnP requests accepted over router WAN interfaces

Overview Some Internet router devices incorrectly accept UPnP requests over the WAN interface. Description Universal Plug and Play UPnP is a networking protocol mostly used for personal computing devices to discover and communicate with each other and the Internet. Some UPnP enabled router device...

Nmap NSE net: upnp-info

Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...

Nmap NSE net: broadcast-upnp-info

Attempts to extract system information from the UPnP service by sending a multicast query, then collecting, parsing, and displaying all responses. OpenVAS Vulnerability Test $Id: gbnmapbroadcastupnpinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patr...

Nmap NSE net: broadcast-upnp-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: upnp-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[DCA-2011-0001] TP-LINK TL-WR740N Multiple Vulnerabilities - Stored XSS - Web Console and Upnp server DoS

DCA-2011-0001 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software/Hardware - TP-LINK TL-WR740N Vendor Product Description - The TL-WR740N is a combined wired/wireless network connection device integrated with internet-sharing router and 4-port switch. Th...