Executive Summary
Summary | |
---|---|
Title | Universal Plug and Play (UPnP) SUBSCRIBE can be abused to send traffic to arbitrary destinations |
Informations | |||
---|---|---|---|
Name | VU#339275 | First vendor Publication | 2020-06-08 |
Vendor | VU-CERT | Last vendor Modification | 2020-07-08 |
Severity (Vendor) | N/A | Revision | M |
Security-Database Scoring CVSS v3
Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H | |||
---|---|---|---|
Overall CVSS Score | 7.5 | ||
Base Score | 7.5 | Environmental Score | 7.5 |
impact SubScore | 4.7 | Temporal Score | 7.5 |
Exploitabality Sub Score | 2.2 | ||
Attack Vector | Network | Attack Complexity | High |
Privileges Required | None | User Interaction | None |
Scope | Changed | Confidentiality Impact | Low |
Integrity Impact | None | Availability Impact | High |
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:C) | |||
---|---|---|---|
Cvss Base Score | 7.8 | Attack Range | Network |
Cvss Impact Score | 7.8 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
|
Original Source
Url : https://kb.cert.org/vuls/id/339275 |
Alert History
Date | Informations |
---|---|
2020-07-10 17:28:11 |
|
2020-07-10 17:17:28 |
|
2020-07-09 00:28:23 |
|
2020-07-09 00:17:29 |
|
2020-07-08 17:28:25 |
|
2020-07-08 17:17:28 |
|
2020-07-07 17:28:16 |
|
2020-07-07 17:17:30 |
|
2020-07-02 17:28:29 |
|
2020-07-02 17:17:29 |
|
2020-06-30 00:28:15 |
|
2020-06-30 00:17:30 |
|
2020-06-26 17:28:15 |
|
2020-06-26 17:17:29 |
|
2020-06-16 17:28:14 |
|
2020-06-16 17:17:27 |
|
2020-06-12 21:28:35 |
|
2020-06-12 21:17:37 |
|
2020-06-12 17:17:28 |
|
2020-06-09 05:17:26 |
|
2020-06-08 21:17:37 |
|