Published: 31/01/2013 Updated: 08/10/2015

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 790

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd prior to 1.4 allows remote malicious users to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.

Vulnerable Product	Search on Vulmon	Subscribe to Product
miniupnp project miniupnpd
miniupnp project miniupnpd 1.2
miniupnp project miniupnpd 1.1
miniupnp project miniupnpd 1.0

#!/usr/bin/perl # # miniupnpd/10 remote denial of service exploit # # Copyright 2015 (c) Todor Donev # todordonev@gmailcom # wwwethical-hackerorg/ # wwwfacebookcom/ethicalhackerorg # # The SSDP protocol can discover Plug & Play devices, # with uPnP (Universal Plug and Play) SSDP is HTTP # like protocol and work ...

source: wwwsecurityfocuscom/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities Attackers can exploit these issues to cause denial-of-service conditions MiniUPnP versions prior to 14 are vulnerable M-SEARCH * HTTP/11 Host:239255255250:1900 ST:uuid:schemas:device:MX:3< no CRLF > ...

Lupusec XT1 alarm system version 1080 suffers from cross site request forgery, cross site scripting, insecure transit, and denial of service vulnerabilities ...

MiniUPNPd version 10 remote denial of service exploit ...

Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959

vulnupnp Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959

NVD-CWE-noinfo https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb https://nvd.nist.gov https://github.com/lochiiconnectivity/vulnupnp https://www.exploit-db.com/exploits/37517/

CVE-2013-0229

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect