Vulnerability Details CVE-2021-33516
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.7%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.8
Products affected by CVE-2021-33516
-
cpe:2.3:a:gnome:gupnp:0.10
-
cpe:2.3:a:gnome:gupnp:0.12
-
cpe:2.3:a:gnome:gupnp:0.12.1
-
cpe:2.3:a:gnome:gupnp:0.12.2
-
cpe:2.3:a:gnome:gupnp:0.12.3
-
cpe:2.3:a:gnome:gupnp:0.12.4
-
cpe:2.3:a:gnome:gupnp:0.12.5
-
cpe:2.3:a:gnome:gupnp:0.12.6
-
cpe:2.3:a:gnome:gupnp:0.12.7
-
cpe:2.3:a:gnome:gupnp:0.12.8
-
cpe:2.3:a:gnome:gupnp:0.13
-
cpe:2.3:a:gnome:gupnp:0.13.1
-
cpe:2.3:a:gnome:gupnp:0.13.2
-
cpe:2.3:a:gnome:gupnp:0.13.3
-
cpe:2.3:a:gnome:gupnp:0.13.4
-
cpe:2.3:a:gnome:gupnp:0.13.5
-
cpe:2.3:a:gnome:gupnp:0.14.0
-
cpe:2.3:a:gnome:gupnp:0.14.1
-
cpe:2.3:a:gnome:gupnp:0.15.0
-
cpe:2.3:a:gnome:gupnp:0.15.1
-
cpe:2.3:a:gnome:gupnp:0.16.0
-
cpe:2.3:a:gnome:gupnp:0.16.1
-
cpe:2.3:a:gnome:gupnp:0.17.0
-
cpe:2.3:a:gnome:gupnp:0.17.1
-
cpe:2.3:a:gnome:gupnp:0.17.2
-
cpe:2.3:a:gnome:gupnp:0.18.0
-
cpe:2.3:a:gnome:gupnp:0.18.1
-
cpe:2.3:a:gnome:gupnp:0.18.2
-
cpe:2.3:a:gnome:gupnp:0.18.3
-
cpe:2.3:a:gnome:gupnp:0.18.4
-
cpe:2.3:a:gnome:gupnp:0.19.0
-
cpe:2.3:a:gnome:gupnp:0.19.1
-
cpe:2.3:a:gnome:gupnp:0.19.2
-
cpe:2.3:a:gnome:gupnp:0.19.3
-
cpe:2.3:a:gnome:gupnp:0.19.4
-
cpe:2.3:a:gnome:gupnp:0.20.0
-
cpe:2.3:a:gnome:gupnp:0.20.1
-
cpe:2.3:a:gnome:gupnp:0.20.10
-
cpe:2.3:a:gnome:gupnp:0.20.11
-
cpe:2.3:a:gnome:gupnp:0.20.12
-
cpe:2.3:a:gnome:gupnp:0.20.13
-
cpe:2.3:a:gnome:gupnp:0.20.14
-
cpe:2.3:a:gnome:gupnp:0.20.15
-
cpe:2.3:a:gnome:gupnp:0.20.16
-
cpe:2.3:a:gnome:gupnp:0.20.17
-
cpe:2.3:a:gnome:gupnp:0.20.18
-
cpe:2.3:a:gnome:gupnp:0.20.2
-
cpe:2.3:a:gnome:gupnp:0.20.3
-
cpe:2.3:a:gnome:gupnp:0.20.4
-
cpe:2.3:a:gnome:gupnp:0.20.5
-
cpe:2.3:a:gnome:gupnp:0.20.6
-
cpe:2.3:a:gnome:gupnp:0.20.7
-
cpe:2.3:a:gnome:gupnp:0.20.8
-
cpe:2.3:a:gnome:gupnp:0.20.9
-
cpe:2.3:a:gnome:gupnp:0.99.0
-
cpe:2.3:a:gnome:gupnp:1.0.0
-
cpe:2.3:a:gnome:gupnp:1.0.1
-
cpe:2.3:a:gnome:gupnp:1.0.2
-
cpe:2.3:a:gnome:gupnp:1.0.3
-
cpe:2.3:a:gnome:gupnp:1.0.4
-
cpe:2.3:a:gnome:gupnp:1.0.5
-
cpe:2.3:a:gnome:gupnp:1.0.6
-
cpe:2.3:a:gnome:gupnp:1.1.0
-
cpe:2.3:a:gnome:gupnp:1.1.1
-
cpe:2.3:a:gnome:gupnp:1.1.2
-
cpe:2.3:a:gnome:gupnp:1.2.0
-
cpe:2.3:a:gnome:gupnp:1.2.1
-
cpe:2.3:a:gnome:gupnp:1.2.2
-
cpe:2.3:a:gnome:gupnp:1.2.3
-
cpe:2.3:a:gnome:gupnp:1.2.4