HIGH🇵🇱 Wersja polska

CVE-2020-12695

CVSS 7.5v3.1pub. 2020-06-08upd. 2024-11-21

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H

  • Asus Rt N11

    HW
    Asus
    all versions

  • Broadcom Adsl

    HW
    Broadcom
    all versions

  • Canon Selphy Cp1200

    HW
    Canon
    all versions

  • Cisco Wap131

    HW
    Cisco
    all versions

  • Cisco Wap150

    HW
    Cisco
    all versions

  • Cisco Wap351

    HW
    Cisco
    all versions

  • Dell B1165nfw

    HW
    Dell
    all versions

  • Dlink Dvg N5412sp

    HW
    Dlink
    all versions

  • Epson Ep 101

    HW
    Epson
    all versions

  • Epson Ew M970a3t

    HW
    Epson
    all versions

  • Epson M571t

    HW
    Epson
    all versions

  • Epson Xp 100

    HW
    Epson
    all versions

  • Epson Xp 2101

    HW
    Epson
    all versions

  • Epson Xp 2105

    HW
    Epson
    all versions

  • Epson Xp 241

    HW
    Epson
    all versions

  • Epson Xp 320

    HW
    Epson
    all versions

  • Epson Xp 330

    HW
    Epson
    all versions

  • Epson Xp 340

    HW
    Epson
    all versions

  • Epson Xp 4100

    HW
    Epson
    all versions

  • Epson Xp 4105

    HW
    Epson
    all versions

  • Epson Xp 440

    HW
    Epson
    all versions

  • Epson Xp 620

    HW
    Epson
    all versions

  • Epson Xp 630

    HW
    Epson
    all versions

  • Epson Xp 702

    HW
    Epson
    all versions

  • Epson Xp 8500

    HW
    Epson
    all versions

  • Epson Xp 8600

    HW
    Epson
    all versions

  • Epson Xp 960

    HW
    Epson
    all versions

  • Epson Xp 970

    HW
    Epson
    all versions

  • HP 5020 Z4a69a

    HW
    Hp
    all versions

  • HP 5030 M2u92b

    HW
    Hp
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-23304CRITICAL9.8PL ✓same product

Side-channel attack w EAP-pwd w hostapd i wpa_supplicant (przed 2.10)

CVE-2022-23303CRITICAL9.8PL ✓same product

Atak side-channel na implementację SAE w hostapd i wpa_supplicant

CVE-2021-1400HIGH8.8same product

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2021-1401HIGH8.8same product

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2020-27888HIGH7.5same product

An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0....