PT-2011-4967 · Broadcom+1 · Broadcom Linux+1

Published 2011-11-22 · Updated 2013-01-24 · CVE-2011-4503

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sitecom WL-111

Description The issue concerns the UPnP IGD implementation in Broadcom Linux, allowing remote attackers to establish arbitrary port mappings. This is achieved by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, and is related to an "external forwarding" issue.

Recommendations For Sitecom WL-111, consider disabling the UPnP functionality as a temporary workaround until a patch is available. Restrict access to the WAN interface to minimize the risk of exploitation. Avoid using the external forwarding feature in the UPnP IGD implementation until the issue is resolved.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2011-4503

Affected Products

Broadcom Linux

Sitecom Wl-111

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4503 · Security Note
• http://upnp-hacks.org/suspect.html · Note
• http://kb.cert.org/vuls/id/357851 · Note