Unscored severity · published Nov 22, 2011
CVE-2011-4505
The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S5
Speedtouch 5x6 Router · Alcatel
All versions, or not specified · source: NVD
S5
Speedtouch 5x6 Router Firmware · Alcatel
through 6.2 · source: NVD