CVE-2020-12695
First published: Mon Jun 08 2020(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/minidlna | <=1.2.1+dfsg-2<=1.2.1+dfsg-1 | 1.2.1+dfsg-2+deb10u1 1.2.1+dfsg-3 |
| debian/gupnp | 1.2.4-1 1.6.3-1 1.6.6-1 | |
| debian/minidlna | 1.3.0+dfsg-2+deb11u2 1.3.0+dfsg-2.2+deb12u1 1.3.3+dfsg-1.1 | |
| debian/pupnp | 1:1.14.19-2 | |
| debian/pupnp-1.8 | <=1:1.8.4-2 | |
| debian/wpa | 2:2.9.0-21+deb11u2 2:2.10-12+deb12u2 2:2.10-22 | |
| Ubiquiti UniFi Controller | ||
| hostapd | <2.0.0 | |
| Asus RT-N11 | ||
| Broadcom ADSL | ||
| Canon Selphy CP1200 | ||
| Cisco WAP131 Firmware | ||
| Cisco WAP150 | ||
| Cisco WAP351 Firmware | ||
| D-Link DVG-N5412SP | ||
| Dell B1165nfw | ||
| Epson EP-101 | ||
| Epson EW-M970A3T | ||
| Epson M571T | ||
| Epson XP-100 | ||
| Epson XP-2101 | ||
| Epson XP-2105 | ||
| Epson XP-241 | ||
| Epson XP-320 | ||
| Epson XP-330 | ||
| Epson XP-340 | ||
| Epson Expression Home XP-4100 | ||
| Epson XP-4105 | ||
| Epson Expression Premium XP-440 | ||
| Epson XP-620 | ||
| Epson XP-630 | ||
| Epson XP-702 | ||
| Epson Expression Premium XP-8500 | ||
| Epson XP-8600 | ||
| Epson Expression Premium XP-960 | ||
| Epson XP-970 | ||
| HP 5020 | ||
| HP 5030 | ||
| HP 5030 | ||
| HP 5034 | ||
| HP 5660 | ||
| HP DeskJet Ink Advantage 3456 | ||
| HP DeskJet Ink Advantage 3545 | ||
| HP DeskJet Ink Advantage 3545 | ||
| HP DeskJet Ink Advantage 3545 | ||
| HP DeskJet Ink Advantage 3546 | ||
| HP DeskJet Ink Advantage 3548 | ||
| HP DeskJet Ink Advantage 4515 | ||
| HP DeskJet Ink Advantage 4518 | ||
| HP DeskJet Ink Advantage 4535 | ||
| HP DeskJet Ink Advantage 4535 | ||
| HP DeskJet Ink Advantage 4535 | ||
| HP DeskJet Ink Advantage 4536 | ||
| HP DeskJet Ink Advantage 4538 | ||
| HP DeskJet Ink Advantage 4675 | ||
| HP DeskJet Ink Advantage 4675 | ||
| HP DeskJet Ink Advantage 4675 | ||
| HP DeskJet Ink Advantage 4676 | ||
| HP DeskJet Ink Advantage 4678 | ||
| HP DeskJet Ink Advantage 5575 | ||
| HP DeskJet Ink Advantage 5575 | ||
| HP Envy 100 | ||
| HP Envy 100 | ||
| HP Envy 100 | ||
| HP Envy 100 | ||
| HP Envy 100 | ||
| HP Envy 100 | ||
| HP Envy 110 | ||
| HP Envy 110 | ||
| HP Envy 110 | ||
| HP Envy 110 | ||
| HP Envy 110 | ||
| HP Envy 111 CQ810A | ||
| HP Envy 114 | ||
| HP Envy 114 | ||
| HP Envy 114 | ||
| HP Envy 120 | ||
| HP Envy 120 | ||
| HP Envy 120 | ||
| HP Envy 4500 | ||
| HP Envy 4500 | ||
| HP Envy 4500 | ||
| HP Envy 4500 | ||
| HP Envy 4501 | ||
| HP Envy 4502 | ||
| HP Envy 4502 | ||
| HP Envy 4503 | ||
| HP Envy 4504 | ||
| HP Envy 4504 | ||
| HP Envy 4505 | ||
| HP Envy 4507 | ||
| HP Envy 4508 | ||
| HP Envy 4509 | ||
| HP Envy 4509 | ||
| HP Envy 4511 | ||
| HP Envy 4512 | ||
| HP Envy 4513 | ||
| HP Envy 4516 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4521 | ||
| HP Envy 4522 | ||
| HP Envy 4523 | ||
| HP Envy 4524 | ||
| HP Envy 4524 | ||
| HP Envy 4524 | ||
| HP Envy 4525 | ||
| HP Envy 4526 | ||
| HP Envy 4527 | ||
| HP Envy 4528 | ||
| HP Envy 5000 M2U85A Firmware | ||
| HP Envy 5000 m2u85b Firmware | ||
| HP Envy 5000 M2U91A Firmware | ||
| HP Envy 5000 M2U91A Firmware | ||
| HP Envy 5000 Firmware | ||
| HP Envy 5000 Firmware | ||
| HP Envy 5000 Z4A74A Firmware | ||
| HP Envy 5020 | ||
| HP Envy 5530 | ||
| HP Envy 5531 | ||
| HP Envy 5532 | ||
| HP Envy 5534 | ||
| HP Envy 5535 | ||
| HP Envy 5536 | ||
| HP Envy 5539 | ||
| HP Envy 5540 | ||
| HP Envy 5540 | ||
| HP Envy 5540 | ||
| HP Envy 5540 | ||
| HP Envy 5540 | ||
| HP Envy 5540 | ||
| HP Envy 5541 | ||
| HP Envy 5542 All-in-One Printer | ||
| HP Envy 5543 | ||
| HP Envy 5544 | ||
| HP Envy 5544 | ||
| HP Envy 5545 | ||
| HP Envy 5546 | ||
| HP Envy 5547 | ||
| HP Envy 5548 | ||
| HP Envy 5640 | ||
| HP Envy 5640 | ||
| HP Envy 5642 | ||
| HP Envy 5643 | ||
| HP Envy 5644 | ||
| HP Envy 5646 | ||
| HP Envy 5664 | ||
| HP Envy 5665 | ||
| HP Envy 6020 | ||
| HP Envy 6020 | ||
| HP Envy 6020 | ||
| HP Envy 6020 | ||
| HP Envy 6052 | ||
| HP Envy 6055 | ||
| HP Envy 6540 | ||
| HP Envy 7640 | ||
| HP Envy 7644 | ||
| HP Envy 7645 | ||
| HP Envy Photo 6200 | ||
| HP Envy Photo 6200 | ||
| HP ENVY Photo 6200 | ||
| HP Envy Photo 6200 | ||
| HP Envy Photo 6200 | ||
| HP Envy Photo 6220 | ||
| HP Envy Photo 6220 | ||
| HP Envy Photo 6222 | ||
| HP Envy Photo 6222 | ||
| HP Envy Photo 6230 | ||
| HP Envy Photo 6232 | ||
| HP Envy Photo 6234 | ||
| HP Envy Photo 6252 | ||
| HP Envy Photo 7100 | ||
| HP Envy Photo 7100 | ||
| HP Envy Photo 7100 | ||
| HP ENVY Photo 7100 | ||
| HP ENVY Photo 7100 | ||
| HP Envy Photo 7120 | ||
| HP Envy Photo 7155 | ||
| HP Envy Photo 7164 | ||
| HP Envy Photo 7800 | ||
| HP Envy Photo 7800 | ||
| HP ENVY Photo 7800 | ||
| HP ENVY Photo 7800 | ||
| HP Envy Photo 7800 | ||
| HP Envy Photo 7822 | ||
| HP Envy Photo 7822 | ||
| HP Envy Photo 7830 | ||
| HP Envy Pro 6420 | ||
| HP Envy Pro 6420 | ||
| HP Envy Pro 6420 | ||
| HP Envy Pro 6420 | ||
| HP Envy Pro 6452 | ||
| HP Envy Pro 6455 | ||
| HP DeskJet Ink Advantage 4535 | ||
| HP DeskJet Ink Advantage 4535 | ||
| HP DeskJet Ink Advantage 4535 | ||
| HP DeskJet Ink Advantage 4536 | ||
| HP DeskJet Ink Advantage 4538 | ||
| HP DeskJet Ink Advantage 4675 | ||
| HP DeskJet Ink Advantage 4675 | ||
| HP DeskJet Ink Advantage 4675 | ||
| HP DeskJet Ink Advantage 4676 | ||
| HP DeskJet Ink Advantage 4678 | ||
| HP Envy 4511 | ||
| HP Envy 4512 K9H49A | ||
| HP Envy 4513 | ||
| HP Envy 4516 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4520 | ||
| HP Envy 4521 | ||
| HP Envy 4522 | ||
| HP Envy 4523 | ||
| HP Envy 4524 | ||
| HP Envy 4524 | ||
| HP Envy 4524 | ||
| HP Envy 4525 | ||
| HP Envy 4526 | ||
| HP Envy 4527 | ||
| HP Envy 4528 | ||
| HP OfficeJet 4650 | ||
| HP OfficeJet 4650 | ||
| HP OfficeJet 4650 | ||
| HP OfficeJet 4652 | ||
| HP OfficeJet 4652 | ||
| HP OfficeJet 4652 | ||
| HP OfficeJet 4654 | ||
| HP OfficeJet 4654 | ||
| HP OfficeJet 4655 | ||
| HP OfficeJet 4655 | ||
| HP OfficeJet 4655 | ||
| HP OfficeJet 4656 | ||
| HP OfficeJet 4657 | ||
| HP OfficeJet 4658 | ||
| HP OfficeJet 4650 | ||
| HP OfficeJet 4650 | ||
| HP OfficeJet 4650 | ||
| HP OfficeJet 4652 | ||
| HP OfficeJet 4652 | ||
| HP OfficeJet 4652 | ||
| HP OfficeJet 4654 | ||
| HP OfficeJet 4654 | ||
| HP OfficeJet 4655 | ||
| HP OfficeJet 4655 | ||
| HP OfficeJet 4655 | ||
| HP OfficeJet 4656 | ||
| HP OfficeJet 4657 | ||
| HP OfficeJet 4658 | ||
| Huawei Hg255s Firmware | ||
| Huawei HG532e | ||
| NEC Aterm WR8165N | ||
| Netgear WNHDE111 | ||
| Ruckus Wireless ZoneDirector 1200 | ||
| TP-Link Archer C50 V3 | ||
| ZTE ZXV10 W300 Firmware | ||
| Zyxel AMG1202-T10B | ||
| Zyxel VMG8324-B10A | ||
| Windows 10 | ||
| Xbox | =10.0.19041.2494 | |
| Red Hat Fedora | =31 | |
| Red Hat Fedora | =32 | |
| Debian Linux | =9.0 | |
| Debian Linux | =10.0 | |
| Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://security-tracker.debian.org/tracker/CVE-2020-12695
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
- https://sourceforge.net/p/minidlna/git/ci/06ee114731612462eb1eb1266f0431ccf59269d2
- https://security-tracker.debian.org/tracker/CVE-2020-28926
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976594
- http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.html
- http://www.openwall.com/lists/oss-security/2020/06/08/2
- https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/
- https://github.com/corelight/callstranger-detector
- https://github.com/yunuscadirci/CallStranger
- https://lists.debian.org/debian-lts-announce/2020/08/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html
- https://lists.debian.org/debian-lts-announce/2020/12/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/
- https://usn.ubuntu.com/4494-1/
- https://www.callstranger.com
- https://www.debian.org/security/2020/dsa-4806
- https://www.debian.org/security/2021/dsa-4898
- https://www.kb.cert.org/vuls/id/339275
- https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of
- https://launchpad.net/bugs/cve/CVE-2020-12695
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/
- https://w1.fi/security/2020-1/upnp-subscribe-misbehavior-wps-ap.txt
- https://w1.fi/security/2020-1/0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch
- https://w1.fi/security/2020-1/0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch
- https://w1.fi/security/2020-1/0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch
- https://github.com/pupnp/pupnp/commit/5f76bf2858dd601bd985bf37a1db9f262c0ff7bf
- https://github.com/pupnp/pupnp/commit/7b3f0f5f497f9f493c82307af495b87fa9ebdacb
- https://nvd.nist.gov/vuln/detail/CVE-2020-12695
- https://ubuntu.com/security/CVE-2020-12695
Frequently Asked Questions
What is the severity of CVE-2020-12695?
CVE-2020-12695 is rated as high severity due to the potential for unauthorized access to system resources through a cross-network attack.
How do I fix CVE-2020-12695?
To remediate CVE-2020-12695, update the affected software packages to versions that have addressed this vulnerability.
What software is affected by CVE-2020-12695?
CVE-2020-12695 impacts several software packages including minidlna, gupnp, and others as listed in the vulnerability report.
What are the consequences of exploitation of CVE-2020-12695?
Exploitation of CVE-2020-12695 could allow an attacker to receive event notifications intended for other devices, potentially leading to information leakage.
Is there a specific patch for CVE-2020-12695?
Yes, specific patches are available for the affected software, which should be applied to prevent exploitation of CVE-2020-12695.
- collector/debian-bugs
- alias/CVE-2020-12695
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/weakness
- agent/remedy
- agent/severity
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- package-manager/debian
- vendor/ui
- canonical/ubiquiti unifi controller
- vendor/w1.fi
- canonical/hostapd
- vendor/asus
- canonical/asus rt-n11
- vendor/broadcom
- canonical/broadcom adsl
- vendor/canon
- canonical/canon selphy cp1200
- vendor/cisco
- canonical/cisco wap131 firmware
- canonical/cisco wap150
- canonical/cisco wap351 firmware
- vendor/dlink
- canonical/d-link dvg-n5412sp
- vendor/dell
- canonical/dell b1165nfw
- vendor/epson
- canonical/epson ep-101
- canonical/epson ew-m970a3t
- canonical/epson m571t
- canonical/epson xp-100
- canonical/epson xp-2101
- canonical/epson xp-2105
- canonical/epson xp-241
- canonical/epson xp-320
- canonical/epson xp-330
- canonical/epson xp-340
- canonical/epson expression home xp-4100
- canonical/epson xp-4105
- canonical/epson expression premium xp-440
- canonical/epson xp-620
- canonical/epson xp-630
- canonical/epson xp-702
- canonical/epson expression premium xp-8500
- canonical/epson xp-8600
- canonical/epson expression premium xp-960
- canonical/epson xp-970
- vendor/hp
- canonical/hp 5020
- canonical/hp 5030
- canonical/hp 5034
- canonical/hp 5660
- canonical/hp deskjet ink advantage 3456
- canonical/hp deskjet ink advantage 3545
- canonical/hp deskjet ink advantage 3546
- canonical/hp deskjet ink advantage 3548
- canonical/hp deskjet ink advantage 4515
- canonical/hp deskjet ink advantage 4518
- canonical/hp deskjet ink advantage 4535
- canonical/hp deskjet ink advantage 4536
- canonical/hp deskjet ink advantage 4538
- canonical/hp deskjet ink advantage 4675
- canonical/hp deskjet ink advantage 4676
- canonical/hp deskjet ink advantage 4678
- canonical/hp deskjet ink advantage 5575
- canonical/hp envy 100
- canonical/hp envy 110
- canonical/hp envy 111 cq810a
- canonical/hp envy 114
- canonical/hp envy 120
- canonical/hp envy 4500
- canonical/hp envy 4501
- canonical/hp envy 4502
- canonical/hp envy 4503
- canonical/hp envy 4504
- canonical/hp envy 4505
- canonical/hp envy 4507
- canonical/hp envy 4508
- canonical/hp envy 4509
- canonical/hp envy 4511
- canonical/hp envy 4512
- canonical/hp envy 4513
- canonical/hp envy 4516
- canonical/hp envy 4520
- canonical/hp envy 4521
- canonical/hp envy 4522
- canonical/hp envy 4523
- canonical/hp envy 4524
- canonical/hp envy 4525
- canonical/hp envy 4526
- canonical/hp envy 4527
- canonical/hp envy 4528
- canonical/hp envy 5000 m2u85a firmware
- canonical/hp envy 5000 m2u85b firmware
- canonical/hp envy 5000 m2u91a firmware
- canonical/hp envy 5000 firmware
- canonical/hp envy 5000 z4a74a firmware
- canonical/hp envy 5020
- canonical/hp envy 5530
- canonical/hp envy 5531
- canonical/hp envy 5532
- canonical/hp envy 5534
- canonical/hp envy 5535
- canonical/hp envy 5536
- canonical/hp envy 5539
- canonical/hp envy 5540
- canonical/hp envy 5541
- canonical/hp envy 5542 all-in-one printer
- canonical/hp envy 5543
- canonical/hp envy 5544
- canonical/hp envy 5545
- canonical/hp envy 5546
- canonical/hp envy 5547
- canonical/hp envy 5548
- canonical/hp envy 5640
- canonical/hp envy 5642
- canonical/hp envy 5643
- canonical/hp envy 5644
- canonical/hp envy 5646
- canonical/hp envy 5664
- canonical/hp envy 5665
- canonical/hp envy 6020
- canonical/hp envy 6052
- canonical/hp envy 6055
- canonical/hp envy 6540
- canonical/hp envy 7640
- canonical/hp envy 7644
- canonical/hp envy 7645
- canonical/hp envy photo 6200
- canonical/hp envy photo 6220
- canonical/hp envy photo 6222
- canonical/hp envy photo 6230
- canonical/hp envy photo 6232
- canonical/hp envy photo 6234
- canonical/hp envy photo 6252
- canonical/hp envy photo 7100
- canonical/hp envy photo 7120
- canonical/hp envy photo 7155
- canonical/hp envy photo 7164
- canonical/hp envy photo 7800
- canonical/hp envy photo 7822
- canonical/hp envy photo 7830
- canonical/hp envy pro 6420
- canonical/hp envy pro 6452
- canonical/hp envy pro 6455
- canonical/hp envy 4512 k9h49a
- canonical/hp officejet 4650
- canonical/hp officejet 4652
- canonical/hp officejet 4654
- canonical/hp officejet 4655
- canonical/hp officejet 4656
- canonical/hp officejet 4657
- canonical/hp officejet 4658
- vendor/huawei
- canonical/huawei hg255s firmware
- canonical/huawei hg532e
- vendor/nec
- canonical/nec aterm wr8165n
- vendor/netgear
- canonical/netgear wnhde111
- vendor/ruckussecurity
- canonical/ruckus wireless zonedirector 1200
- vendor/tp-link
- canonical/tp-link archer c50 v3
- vendor/zte
- canonical/zte zxv10 w300 firmware
- vendor/zyxel
- canonical/zyxel amg1202-t10b
- canonical/zyxel vmg8324-b10a
- vendor/microsoft
- canonical/windows 10
- canonical/xbox
- version/xbox/10.0.19041.2494
- vendor/fedoraproject
- canonical/red hat fedora
- version/red hat fedora/31
- version/red hat fedora/32
- vendor/debian
- canonical/debian linux
- version/debian linux/9.0
- version/debian linux/10.0
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/20.04