Vulnerability Details CVE-2006-2561
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/20169
- http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
- http://www.securityview.org/how-does-the-upnp-flaw-works.html
- http://www.vupen.com/english/advisories/2006/1911
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26709
- http://secunia.com/advisories/20169
- http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
- http://www.securityview.org/how-does-the-upnp-flaw-works.html
- http://www.vupen.com/english/advisories/2006/1911
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26709