CVE-2011-4503

2011-11-2211:00:00

mitre

www.cve.org

cve-2011-4503

sitecom wl-111

remote attackers

arbitrary port mappings

upnp addportmapping action

soap request

wan interface

external forwarding vulnerability

broadcom linux

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.4%

JSON

The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an “external forwarding” vulnerability.

References

www.kb.cert.org/vuls/id/357851

www.upnp-hacks.org/suspect.html