GCVE-110-CERTCC-2015-361684

Advisory PublishedCVSS 4.3/10

Vulnetix · Advisory published August 31, 2015

Home routers implementing the UPnP protocol do not sufficiently randomize UUIDs in UPnP control URLs, or implement other UPnP security measures.

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.3/10

Medium · AV:N/AC:M/Au:N/C:N/I:P/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.7remediation_levelUreport_confidenceURenvironmental_score3.6731893716target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

References

Router devices do not implement sufficient UPnP authentication and security

advisory

Router devices do not implement sufficient UPnP authentication and security

url

Router devices do not implement sufficient UPnP authentication and security

url

Router devices do not implement sufficient UPnP authentication and security

url

Router devices do not implement sufficient UPnP authentication and security

url

Router devices do not implement sufficient UPnP authentication and security

url

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON