{ "schema_version": "1.4.0", "id": "GHSA-w7jg-8v8v-4jpc", "modified": "2022-05-17T05:16:42Z", "published": "2022-05-17T05:16:42Z", "aliases": [ "CVE-2011-4501" ], "details": "The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an \"external forwarding\" vulnerability.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4501" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/357851" }, { "type": "WEB", "url": "http://www.upnp-hacks.org/devices.html" }, { "type": "WEB", "url": "http://www.upnp-hacks.org/suspect.html" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2011-11-22T11:55:00Z" } }