Unscored severity · published Nov 22, 2011
CVE-2011-4501
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
61
6114wg · Edimax
All versions, or not specified · source: NVD
6R
6114wg Router Firmware · Edimax
1.83; 2.08 · source: NVD
BR
Br-6104k · Edimax
All versions, or not specified · source: NVD
BR
Br-6104k Router Firmware · Edimax
3.21 · source: NVD
CN
Cn-wf512 · Canyon-tech
All versions, or not specified · source: NVD
CR
Cn-wf512 Router Firmware · Canyon-tech
1.83 · source: NVD
CN
Cn-wf514 · Canyon-tech
All versions, or not specified · source: NVD
CR
Cn-wf514 Router Firmware · Canyon-tech
2.08 · source: NVD
LB
Lb000021 · Sweex
All versions, or not specified · source: NVD
LR
Lb000021 Router Firmware · Sweex
3.15 · source: NVD
WL
Wl-153 · Sitecom
All versions, or not specified · source: NVD
WR
Wl-153 Router Firmware · Sitecom
1.31; 1.34 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4501
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4501
US Government Resource
http://www.kb.cert.org/vuls/id/357851
www.upnp-hacks.org
http://www.upnp-hacks.org/devices.html
www.upnp-hacks.org
http://www.upnp-hacks.org/suspect.html
More from Cn-wf512
–
CVE-2011-4502
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with…