Back to feed
EUVD-2021-18602 · Published Apr 25, 2021
The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.
Technologies
Npupnp_Project Npupnp
Weaknesses
CWE-346
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - v2.06.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
