CVE-2020-12695: High severity UI UniFi Controller vulnerability

Published Jun 8, 2020
ยท
Updated

Last updated 24 July 2024

Other sources

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

Affected Software

298 affected componentsFixes available
debian/minidlna<=1.2.1+dfsg-2, <=1.2.1+dfsg-1
1.2.1+dfsg-2+deb10u11.2.1+dfsg-3
debian/gupnp
1.2.4-11.6.3-11.6.6-1
debian/minidlna
1.3.0+dfsg-2+deb11u21.3.0+dfsg-2.2+deb12u11.3.3+dfsg-1.1
debian/pupnp
1:1.14.19-2
debian/pupnp-1.8<=1:1.8.4-2
debian/wpa
2:2.9.0-21+deb11u22:2.10-12+deb12u22:2.10-22
UI UniFi Controller
w1.fi hostapd<2.0.0
ASUS Rt-n11
Broadcom Adsl
Canon Selphy Cp1200
Cisco Wap131
Cisco WAP150
Cisco Wap351
Dlink Dvg-n5412sp
Dell B1165nfw
Epson Ep-101
Epson Ew-m970a3t
Epson M571t
Epson Xp-100
Epson Xp-2101
Epson Xp-2105
Epson Xp-241
Epson Xp-320
Epson Xp-330
Epson Xp-340
Epson Xp-4100
Epson Xp-4105
Epson Xp-440
Epson Xp-620
Epson Xp-630
Epson Xp-702
Epson Xp-8500
Epson Xp-8600
Epson Xp-960
Epson Xp-970
HP 5020 Z4a69a
HP 5030 M2u92b
HP 5030 Z4a70a
HP 5034 Z4a74a
HP 5660 F8b04a
HP Deskjet Ink Advantage 3456 A9t84c
HP Deskjet Ink Advantage 3545 A9t81a
HP Deskjet Ink Advantage 3545 A9t81c
HP Deskjet Ink Advantage 3545 A9t83b
HP Deskjet Ink Advantage 3546 A9t82a
HP Deskjet Ink Advantage 3548 A9t81b
HP Deskjet Ink Advantage 4515
HP Deskjet Ink Advantage 4518
HP Deskjet Ink Advantage 4535 F0v64a
HP Deskjet Ink Advantage 4535 F0v64b
HP Deskjet Ink Advantage 4535 F0v64c
HP Deskjet Ink Advantage 4536 F0v65a
HP Deskjet Ink Advantage 4538 F0v66b
HP Deskjet Ink Advantage 4675 F1h97a
HP Deskjet Ink Advantage 4675 F1h97b
HP Deskjet Ink Advantage 4675 F1h97c
HP Deskjet Ink Advantage 4676 F1h98a
HP Deskjet Ink Advantage 4678 F1h99b
HP Deskjet Ink Advantage 5575 G0v48b
HP Deskjet Ink Advantage 5575 G0v48c
HP Envy 100 Cn517a
HP Envy 100 Cn517b
HP Envy 100 Cn517c
HP Envy 100 Cn518a
HP Envy 100 Cn519a
HP Envy 100 Cn519b
HP Envy 110 Cq809a
HP Envy 110 Cq809b
HP Envy 110 Cq809c
HP Envy 110 Cq809d
HP Envy 110 Cq812c
HP Envy 111 Cq810a
HP Envy 114 Cq811a
HP Envy 114 Cq811b
HP Envy 114 Cq812a
HP Envy 120 Cz022a
HP Envy 120 Cz022b
HP Envy 120 Cz022c
HP Envy 4500 A9t80a
HP Envy 4500 A9t80b
HP Envy 4500 A9t89a
HP Envy 4500 D3p93a
HP Envy 4501 C8d05a
HP Envy 4502 A9t85a
HP Envy 4502 A9t87b
HP Envy 4503 E6g71b
HP Envy 4504 A9t88b
HP Envy 4504 C8d04a
HP Envy 4505 A9t86a
HP Envy 4507 E6g70b
HP Envy 4508 E6g72b
HP Envy 4509 D3p94a
HP Envy 4509 D3p94b
HP Envy 4511 K9h50a
HP Envy 4512 K9h49a
HP Envy 4513 K9h51a
HP Envy 4516 K9h52a
HP Envy 4520 E6g67a
HP Envy 4520 E6g67b
HP Envy 4520 F0v63a
HP Envy 4520 F0v63b
HP Envy 4520 F0v69a
HP Envy 4521 K9t10b
HP Envy 4522 F0v67a
HP Envy 4523 J6u60b
HP Envy 4524 F0v71b
HP Envy 4524 F0v72b
HP Envy 4524 K9t01a
HP Envy 4525 K9t09b
HP Envy 4526 K9t05b
HP Envy 4527 J6u61b
HP Envy 4528 K9t08b
HP Envy 5000 M2u85a
HP Envy 5000 M2u85b
HP Envy 5000 M2u91a
HP Envy 5000 M2u91a
HP Envy 5000 M2u94b
HP Envy 5000 Z4a54a
HP Envy 5000 Z4a74a
HP Envy 5020 M2u91b
HP Envy 5530
HP Envy 5531
HP Envy 5532
HP Envy 5534
HP Envy 5535
HP Envy 5536
HP Envy 5539
HP Envy 5540 F2e72a
HP Envy 5540 G0v47a
HP Envy 5540 G0v51a
HP Envy 5540 G0v52a
HP Envy 5540 G0v53a
HP Envy 5540 K7c85a
HP Envy 5541 K7g89a
HP Envy 5542 K7c88a
HP Envy 5543 N9u88a
HP Envy 5544 K7c89a
HP Envy 5544 K7c93a
HP Envy 5545 G0v50a
HP Envy 5546 K7c90a
HP Envy 5547 J6u64a
HP Envy 5548 K7g87a
HP Envy 5640 B9s56a
HP Envy 5640 B9s58a
HP Envy 5642 B9s64a
HP Envy 5643 B9s63a
HP Envy 5644 B9s65a
HP Envy 5646 F8b05a
HP Envy 5664 F8b08a
HP Envy 5665 F8b06a
HP Envy 6020 5se16b
HP Envy 6020 5se17a
HP Envy 6020 6wd35a
HP Envy 6020 7cz37a
HP Envy 6052 5se18a
HP Envy 6055 5se16a
HP Envy 6540 B9s59a
HP Envy 7640
HP Envy 7644 E4w46a
HP Envy 7645 E4w44a
HP Envy Photo 6200 K7g18a
HP Envy Photo 6200 K7g26b
HP Envy Photo 6200 K7s21b
HP Envy Photo 6200 Y0k13d
HP Envy Photo 6200 Y0k15a
HP Envy Photo 6220 K7g20d
HP Envy Photo 6220 K7g21b
HP Envy Photo 6222 Y0k13d
HP Envy Photo 6222 Y0k14d
HP Envy Photo 6230 K7g25b
HP Envy Photo 6232 K7g26b
HP Envy Photo 6234 K7s21b
HP Envy Photo 6252 K7g22a
HP Envy Photo 7100 3xd89a
HP Envy Photo 7100 K7g93a
HP Envy Photo 7100 K7g99a
HP Envy Photo 7100 Z3m37a
HP Envy Photo 7100 Z3m52a
HP Envy Photo 7120 Z3m41d
HP Envy Photo 7155 Z3m52a
HP Envy Photo 7164 K7g99a
HP Envy Photo 7800 K7r96a
HP Envy Photo 7800 K7s00a
HP Envy Photo 7800 K7s10d
HP Envy Photo 7800 Y0g42d
HP Envy Photo 7800 Y0g52b
HP Envy Photo 7822 Y0g42d
HP Envy Photo 7822 Y0g43d
HP Envy Photo 7830 Y0g50b
HP Envy Pro 6420 5se45b
HP Envy Pro 6420 5se46a
HP Envy Pro 6420 6wd14a
HP Envy Pro 6420 6wd16a
HP Envy Pro 6452 5se47a
HP Envy Pro 6455 5se45a
HP Hp Deskjet Ink Advantage 4535 F0v64a
HP Hp Deskjet Ink Advantage 4535 F0v64b
HP Hp Deskjet Ink Advantage 4535 F0v64c
HP Hp Deskjet Ink Advantage 4536 F0v65a
HP Hp Deskjet Ink Advantage 4538 F0v66b
HP Hp Deskjet Ink Advantage 4675 F1h97a
HP Hp Deskjet Ink Advantage 4675 F1h97b
HP Hp Deskjet Ink Advantage 4675 F1h97c
HP Hp Deskjet Ink Advantage 4676 F1h98a
HP Hp Deskjet Ink Advantage 4678 F1h99b
HP Hp Envy 4511 K9h50a
HP Hp Envy 4512 K9h49a
HP Hp Envy 4513 K9h51a
HP Hp Envy 4516 K9h52a
HP Hp Envy 4520 E6g67a
HP Hp Envy 4520 E6g67b
HP Hp Envy 4520 F0v63a
HP Hp Envy 4520 F0v63b
HP Hp Envy 4520 F0v69a
HP Hp Envy 4521 K9t10b
HP Hp Envy 4522 F0v67a
HP Hp Envy 4523 J6u60b
HP Hp Envy 4524 F0v71b
HP Hp Envy 4524 F0v72b
HP Hp Envy 4524 K9t01a
HP Hp Envy 4525 K9t09b
HP Hp Envy 4526 K9t05b
HP Hp Envy 4527 J6u61b
HP Hp Envy 4528 K9t08b
HP Hp Officejet 4650 E6g87a
HP Hp Officejet 4650 F1h96a
HP Hp Officejet 4650 F1h96b
HP Hp Officejet 4652 F1j02a
HP Hp Officejet 4652 F1j05b
HP Hp Officejet 4652 K9v84b
HP Hp Officejet 4654 F1j06b
HP Hp Officejet 4654 F1j07b
HP Hp Officejet 4655 F1j00a
HP Hp Officejet 4655 K9v79a
HP Hp Officejet 4655 K9v82b
HP Hp Officejet 4656 K9v81b
HP Hp Officejet 4657 V6d29b
HP Hp Officejet 4658 V6d30b
HP Officejet 4650 E6g87a
HP Officejet 4650 F1h96a
HP Officejet 4650 F1h96b
HP Officejet 4652 F1j02a
HP Officejet 4652 F1j05b
HP Officejet 4652 K9v84b
HP Officejet 4654 F1j06b
HP Officejet 4654 F1j07b
HP Officejet 4655 F1j00a
HP Officejet 4655 K9v79a
HP Officejet 4655 K9v82b
HP Officejet 4656 K9v81b
HP Officejet 4657 V6d29b
HP Officejet 4658 V6d30b
Huawei HG255s
Huawei HG532e
NEC Wr8165n
Netgear Wnhde111
Ruckussecurity Zonedirector 1200
TP-Link Archer C50
ZTE ZXV10 W300
Zyxel Amg1202-t10b
Zyxel VMG8324-B10A
Microsoft Windows 10
Microsoft Xbox One=10.0.19041.2494
Fedoraproject Fedora=31
Fedoraproject Fedora=32
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Canonical Ubuntu Linux=20.04
alpine/hostapd<2.8-r3
2.8-r3
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.9-r2
2.9-r2
alpine/hostapd<2.7-r6
2.7-r6
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2
alpine/minidlna<1.2.1-r2
1.2.1-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/minidlna to a version that resolves this vulnerability.

    Fixed in 1.2.1+dfsg-2+deb10u1Fixed in 1.2.1+dfsg-3
  2. Upgrade

    Upgrade debian/gupnp to a version that resolves this vulnerability.

    Fixed in 1.2.4-1Fixed in 1.6.3-1Fixed in 1.6.6-1
  3. Upgrade

    Upgrade debian/minidlna to a version that resolves this vulnerability.

    Fixed in 1.3.0+dfsg-2+deb11u2Fixed in 1.3.0+dfsg-2.2+deb12u1Fixed in 1.3.3+dfsg-1.1
  4. Upgrade

    Upgrade debian/pupnp to a version that resolves this vulnerability.

    Fixed in 1:1.14.19-2
  5. Upgrade

    Upgrade debian/wpa to a version that resolves this vulnerability.

    Fixed in 2:2.9.0-21+deb11u2Fixed in 2:2.10-12+deb12u2Fixed in 2:2.10-22
  6. Upgrade

    Upgrade alpine/hostapd to a version that resolves this vulnerability.

    Fixed in 2.8-r3
  7. Upgrade

    Upgrade alpine/hostapd to a version that resolves this vulnerability.

    Fixed in 2.9-r2
  8. Upgrade

    Upgrade alpine/hostapd to a version that resolves this vulnerability.

    Fixed in 2.7-r6
  9. Upgrade

    Upgrade alpine/minidlna to a version that resolves this vulnerability.

    Fixed in 1.2.1-r2

Event History

Jun 8, 2020
CVE Published
via MITREยท04:45 PM
Data Sourced
via MITREยท04:45 PM
Description
Data Sourced
via NVDยท05:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSVยท05:15 PM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2020-12695?

CVE-2020-12695 is rated as high severity due to the potential for unauthorized access to system resources through a cross-network attack.

2

How do I fix CVE-2020-12695?

To remediate CVE-2020-12695, update the affected software packages to versions that have addressed this vulnerability.

3

What software is affected by CVE-2020-12695?

CVE-2020-12695 impacts several software packages including minidlna, gupnp, and others as listed in the vulnerability report.

4

What are the consequences of exploitation of CVE-2020-12695?

Exploitation of CVE-2020-12695 could allow an attacker to receive event notifications intended for other devices, potentially leading to information leakage.

5

Is there a specific patch for CVE-2020-12695?

Yes, specific patches are available for the affected software, which should be applied to prevent exploitation of CVE-2020-12695.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
ยฉ 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203