HIGH🇵🇱 Wersja polska

CVE-2011-4501

CVSS 10.0v2.0pub. 2011-11-22upd. 2026-04-29

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Canyon Tech Cn Wf512

    HW
    Canyon-Tech
    all versions

  • Canyon Tech Cn Wf512 Router Firmware

    OS
    Canyon-Tech
    1.83

  • Canyon Tech Cn Wf514

    HW
    Canyon-Tech
    all versions

  • Canyon Tech Cn Wf514 Router Firmware

    OS
    Canyon-Tech
    2.08

  • Edimax 6114wg

    HW
    Edimax
    all versions

  • Edimax 6114wg Router Firmware

    OS
    Edimax
    1.832.08

  • Edimax Br 6104k

    HW
    Edimax
    all versions

  • Edimax Br 6104k Router Firmware

    OS
    Edimax
    3.21

  • Sitecom Wl 153

    HW
    Sitecom
    all versions

  • Sitecom Wl 153 Router Firmware

    OS
    Sitecom
    1.311.34

  • Sweex Lb000021

    HW
    Sweex
    all versions

  • Sweex Lb000021 Router Firmware

    OS
    Sweex
    3.15
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2011-4502HIGH10.0same product

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg...

CVE-2006-2560HIGH7.5same product

Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct u...

CVE-2025-1316CRITICAL9.3⚠ KEVPL ✓same vendor

Edimax IC-7100: Command Injection umożliwiający zdalny RCE

CVE-2026-32841CRITICAL9.2PL ✓same vendor

Edimax GS-5008PL — pominięcie uwierzytelnienia w interfejsie zarządzania

CVE-2020-37125CRITICAL9.3PL ✓same vendor

RCE bez uwierzytelnienia w Edimax EW-7438RPn Mini przez endpoint /goform/mp