Vulnerability Description
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Edimax | Br-6104K Router Firmware | 3.21 |
| Edimax | Br-6104K | - |
| Canyon-Tech | Cn-Wf512 Router Firmware | 1.83 |
| Canyon-Tech | Cn-Wf514 Router Firmware | 2.08 |
| Canyon-Tech | Cn-Wf512 | - |
| Canyon-Tech | Cn-Wf514 | - |
| Edimax | 6114Wg Router Firmware | 1.83 |
| Edimax | 6114Wg | - |
| Sitecom | Wl-153 Router Firmware | 1.31 |
| Sitecom | Wl-153 | - |
| Sweex | Lb000021 Router Firmware | 3.15 |
| Sweex | Lb000021 | - |
Related Weaknesses (CWE)
References
- http://www.kb.cert.org/vuls/id/357851US Government Resource
- http://www.upnp-hacks.org/devices.html
- http://www.upnp-hacks.org/suspect.html
- http://www.kb.cert.org/vuls/id/357851US Government Resource
- http://www.upnp-hacks.org/devices.html
- http://www.upnp-hacks.org/suspect.html
FAQ
What is CVE-2011-4501?
CVE-2011-4501 is a vulnerability with a CVSS score of 10.0 (HIGH). The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Siteco...
How severe is CVE-2011-4501?
CVE-2011-4501 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-4501?
Check the references section above for vendor advisories and patch information. Affected products include: Edimax Br-6104K Router Firmware, Edimax Br-6104K, Canyon-Tech Cn-Wf512 Router Firmware, Canyon-Tech Cn-Wf514 Router Firmware, Canyon-Tech Cn-Wf512.