CVE-2011-4499: High severity linksys wrt54g firmware vulnerability
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4499?
CVE-2011-4499 has a medium severity rating due to the potential for remote attackers to manipulate port mappings.
How do I fix CVE-2011-4499?
To fix CVE-2011-4499, update the firmware of affected Cisco Linksys WRT54G and WRT54GS routers to versions that are equal to or later than 4.30.5 and 4.71.1 respectively.
What are the affected devices for CVE-2011-4499?
CVE-2011-4499 affects the Cisco Linksys WRT54G and WRT54GS routers with specific firmware versions prior to 4.30.5 and 4.71.1.
What type of vulnerability is CVE-2011-4499?
CVE-2011-4499 is a vulnerability in the UPnP IGD implementation, allowing for arbitrary port mapping on vulnerable devices.
Who is impacted by CVE-2011-4499?
Users of the Cisco Linksys WRT54G and WRT54GS routers with outdated firmware are impacted by CVE-2011-4499.