Description
A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shibby | Tomato | 1.28 | — |
References
- VDB-367154 | Shibby Tomato SUBSCRIBE Call miniupnpd send server-side request forgery vdb-entry technical-description
- VDB-367154 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #818237 | Tomato by Shibby Tomato Firmware 1.28 Out-of-Bounds Read third-party-advisory
- https://gitee.com/Fengyi-Wang/CVE/issues/IJD8SS issue-tracking