Skip to content
OpenAdvisories
Unscored CVE-2011-4504 EUVD-2011-4430GHSA-jh63-w8jj-x72f

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mapping…

Published Nov 22, 2011 · Updated Sep 16, 2024 · Assigned by mitre

Description

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

References