high7.5
CVE-2011-4504
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP …
Impact
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genmei Mori | Pseudoics | Versions 0.1, 0.2, 0.3 |
| Zyxel | P-330w Router | All versions |