CVE-2011-4502 The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Siteco...
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| edimax br-6104k router firmware | = 3.21 | No fix listed |
| edimax br-6104k | All versions | No fix listed |
| canyon-tech cn-wf512 router firmware | = 1.83 | No fix listed |
| canyon-tech cn-wf514 router firmware | = 2.08 | No fix listed |
| canyon-tech cn-wf512 | All versions | No fix listed |
| canyon-tech cn-wf514 | All versions | No fix listed |
| edimax 6114wg router firmware | = 1.83 | No fix listed |
| edimax 6114wg router firmware | = 2.08 | No fix listed |
| edimax 6114wg | All versions | No fix listed |
| sitecom wl-153 router firmware | = 1.31 | No fix listed |
| sitecom wl-153 router firmware | = 1.34 | No fix listed |
| sitecom wl-153 | All versions | No fix listed |
| sweex lb000021 router firmware | = 3.15 | No fix listed |
| sweex lb000021 | All versions | No fix listed |
References
- VU#357851 third-party-advisory us-government-resource
- www.upnp-hacks.org
- www.upnp-hacks.org