GCVE-110-CERTCC-2012-922681

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published January 29, 2013

The Portable SDK for UPnP Devices libupnp library contains multiple buffer overflow vulnerabilities. Devices that use libupnp may also accept UPnP queries over the WAN interface, therefore exposing the vulnerabilities to the internet.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population4d1_direct_report1

certcc-cvss-temporal-env

temporal_score8.7remediation_levelOFreport_confidenceCenvironmental_score6.5214078048target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND