GCVE-110-CERTCC-2008-347812

Advisory Published

Vulnetix · Advisory published January 15, 2008

Multiple vendors ship devices with UPnP enabled by default. By convincing a user to open a malicious URL, an attacker may be able to remotely control or configure UPnP enabled devices.

Download JSON Open in Console

Risk Scores

certcc-cam

impact20population15exploitation0widely_known20score_current18.4275ease_of_exploitation7

certcc-vrda

d1_impact3d1_population3d1_direct_report1

References

UPnP enabled by default in multiple devices

advisory

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

url

UPnP enabled by default in multiple devices

advisory

UPnP enabled by default in multiple devices

advisory

UPnP enabled by default in multiple devices

advisory

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON