Описание
Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
Ссылки
- Vendor Advisory
- URL Repurposed
- URL Repurposed
- Vendor Advisory
- URL Repurposed
- URL Repurposed
Уязвимые конфигурации
Конфигурация 1Версия до 1.34 (включая)
Одновременно
Одно из
cpe:2.3:o:sitecom:wl-153_router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:sitecom:wl-153_router_firmware:1.31:*:*:*:*:*:*:*
cpe:2.3:h:sitecom:wl-153:-:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00191
Низкий
7.5 High
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
почти 4 года назад
Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
EPSS
Процентиль: 41%
0.00191
Низкий
7.5 High
CVSS2
Дефекты
CWE-264