CVE-2011-4499
First published: Tue Nov 22 2011(Updated: )
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Linksys WRT54G Router Firmware | <=4.20.8 | |
| Cisco Linksys WRT54G Router Firmware | =3.03.9 | |
| Cisco Linksys WRT54G Router Firmware | =4.20.7 | |
| Cisco Linksys WRT54G Router Firmware | ||
| Cisco Linksys WRT54G Router Firmware | =2.2 | |
| Linksys WRT54GS | <=4.70.6 | |
| Linksys WRT54GS | =2.09.1 | |
| Cisco Linksys Wrt54gs Router Firmware | =1.0 | |
| Cisco Linksys Wrt54gs Router Firmware | =2.0 | |
| Cisco Linksys Wrt54gs Router Firmware | =3.0 | |
| Linksys WRT54GS | <=1.06 | |
| Cisco Linksys Wrt54gs Router Firmware | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2011-4499?
CVE-2011-4499 has a medium severity rating due to the potential for remote attackers to manipulate port mappings.
How do I fix CVE-2011-4499?
To fix CVE-2011-4499, update the firmware of affected Cisco Linksys WRT54G and WRT54GS routers to versions that are equal to or later than 4.30.5 and 4.71.1 respectively.
What are the affected devices for CVE-2011-4499?
CVE-2011-4499 affects the Cisco Linksys WRT54G and WRT54GS routers with specific firmware versions prior to 4.30.5 and 4.71.1.
What type of vulnerability is CVE-2011-4499?
CVE-2011-4499 is a vulnerability in the UPnP IGD implementation, allowing for arbitrary port mapping on vulnerable devices.
Who is impacted by CVE-2011-4499?
Users of the Cisco Linksys WRT54G and WRT54GS routers with outdated firmware are impacted by CVE-2011-4499.
- collector/nvd-historical
- agent/references
- agent/type
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco linksys wrt54g router firmware
- version/cisco linksys wrt54g router firmware/4.20.8
- version/cisco linksys wrt54g router firmware/3.03.9
- version/cisco linksys wrt54g router firmware/4.20.7
- vendor/linksys
- version/cisco linksys wrt54g router firmware/2.2
- canonical/linksys wrt54gs
- version/linksys wrt54gs/4.70.6
- version/linksys wrt54gs/2.09.1
- canonical/cisco linksys wrt54gs router firmware
- version/cisco linksys wrt54gs router firmware/1.0
- version/cisco linksys wrt54gs router firmware/2.0
- version/cisco linksys wrt54gs router firmware/3.0
- version/linksys wrt54gs/1.06
- version/cisco linksys wrt54gs router firmware/4.0