CVE-2011-4503 The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN in...
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom linux | All versions | No fix listed |
| sitecom wl-111 | All versions | No fix listed |
References
- VU#357851 third-party-advisory us-government-resource
- www.upnp-hacks.org