Multiple Linksys/ ZyXel / Edimax / Sitecom routers UPnP problems updated since 23.05.2006
Published:		14.10.2006
Source:		SECURITYVIEWS
SecurityVulns ID:		6177
Type:		remote
Level:		7/10
Description:		UPnP AddPortMapping request requires no authentication. It makes it possible to create mapping between any external port and internal IP/port. Additionally, insufficient paramters validation allows code execution on router itself.

Affected:		LINKSYS : WRT54G
		ZYXEL : P-335WT
		EDIMAX : BR-6104K
		SITECOM : WL-153 MIMO XR
		LINKSYS : WRT54GX2

Original document

SECUNIA, [SA22326] Linksys WRT54GXv2 Insecure Universal Plug and Play Configuration (14.10.2006)

Files:		How does the UPnP flaw works
Discuss:		Read or add your comments to this news (0 comments)