PT-2011-4964 · Cisco · Cisco Linksys Wrt54Gx

Published 2011-11-22 · Updated 2011-11-22 · CVE-2011-4500

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Linksys WRT54GX version 2.00.05

Description The issue concerns the UPnP IGD implementation. When UPnP is enabled, it configures the SOAP server to listen on the WAN port. This allows remote attackers to administer the firewall via SOAP requests.

Recommendations For Cisco Linksys WRT54GX version 2.00.05, consider disabling the UPnP feature to prevent remote administration of the firewall until a patch is available.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2011-4500

Affected Products

Cisco Linksys Wrt54Gx

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4500 · Security Note
• http://upnp-hacks.org/devices.html · Note
• http://kb.cert.org/vuls/id/357851 · Note