PT-2011-4967 · Broadcom+1 · Broadcom Linux+1

Publicado 2011-11-22 · Atualizado 2013-01-24 · CVE-2011-4503

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sitecom WL-111

Description The issue concerns the UPnP IGD implementation in Broadcom Linux, allowing remote attackers to establish arbitrary port mappings. This is achieved by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, and is related to an "external forwarding" issue.

Recommendations For Sitecom WL-111, consider disabling the UPnP functionality as a temporary workaround until a patch is available. Restrict access to the WAN interface to minimize the risk of exploitation. Avoid using the external forwarding feature in the UPnP IGD implementation until the issue is resolved.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2011-4503

Produtos afetados

Broadcom Linux

Sitecom Wl-111

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4503 · Nota de Segurança
• http://upnp-hacks.org/suspect.html · Nota
• http://kb.cert.org/vuls/id/357851 · Nota