Critical severity · published Apr 20, 2021
CVE-2021-29462
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can be mitigated by using DNS revolvers which block DNS-rebinding attacks. The vulnerability is fixed in version 1.14.6 and later.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Pupnp · Pupnp Project
before 1.14.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-29462
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-29462
Mailing List
http://www.openwall.com/lists/oss-security/2021/04/20/4
Third Party Advisory
https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg
More from Pupnp
7.5
CVE-2026-77630
pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
7.5
CVE-2026-57487
libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
7.5
CVE-2026-57486
pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
7.5
CVE-2021-28302
A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function
7.1
CVE-2026-57488
pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling