Login Request a demo
Unscored severity · published Nov 22, 2011
CVE-2011-4499
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
Linksys Wrt54g Router Firmware · Cisco
through 4.20.8; 3.03.9; 4.20.7 · source: NVD
LW
Linksys Wrt54gs Router Firmware · Cisco
through 4.70.6; 2.09.1; through 1.06 · source: NVD
WR
Wrt54g · Linksys
2.2 · source: NVD
WR
Wrt54gs · Linksys
1.0; 2.0; 3.0; 4.0 · source: NVD
Affected product
LW
Linksys Wrt54g Router Firmware
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4499
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4499
US Government Resource
http://www.kb.cert.org/vuls/id/357851
www.upnp-hacks.org
http://www.upnp-hacks.org/devices.html