PT-2011-4968 · Zyxel · Zyxel P-330W

Publicado 2011-11-22 · Atualizado 2012-03-08 · CVE-2011-4504

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL P-330W (affected versions not specified)

Description The issue concerns the UPnP IGD implementation in the Pseudo ICS UPnP software, allowing remote attackers to establish arbitrary port mappings. This is achieved by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, and is related to an "external forwarding" issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2011-4504

Produtos afetados

Zyxel P-330W

Referências · 3

• http://upnp-hacks.org/suspect.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4504 · Nota de Segurança
• http://kb.cert.org/vuls/id/357851 · Nota