VDB

GCVE-110-CERTCC-2014-184540

GCVE-110-CERTCC-2014-184540
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published October 21, 2014
Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and malicious port mapping requests.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.5/10
High · AV:N/AC:L/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.1remediation_levelUreport_confidenceCenvironmental_score5.33281960358437target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

References

Incorrect implementation of NAT-PMP in multiple devices
url
Incorrect implementation of NAT-PMP in multiple devices
url
Incorrect implementation of NAT-PMP in multiple devices
url
Incorrect implementation of NAT-PMP in multiple devices
fix
Incorrect implementation of NAT-PMP in multiple devices
advisory
Incorrect implementation of NAT-PMP in multiple devices
fix

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›