Executive Summary
| Summary | |
|---|---|
| Title | Universal Plug and Play (UPnP) SUBSCRIBE can be abused to send traffic to arbitrary destinations |
| Informations | |||
|---|---|---|---|
| Name | VU#339275 | First vendor Publication | 2020-06-08 |
| Vendor | VU-CERT | Last vendor Modification | 2020-07-08 |
| Severity (Vendor) | N/A | Revision | M |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 7.5 | ||
| Base Score | 7.5 | Environmental Score | 7.5 |
| impact SubScore | 4.7 | Temporal Score | 7.5 |
| Exploitabality Sub Score | 2.2 | ||
| Attack Vector | Network | Attack Complexity | High |
| Privileges Required | None | User Interaction | None |
| Scope | Changed | Confidentiality Impact | Low |
| Integrity Impact | None | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.8 | Attack Range | Network |
| Cvss Impact Score | 7.8 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| |
Original Source
| Url : https://kb.cert.org/vuls/id/339275 |
Alert History
| Date | Informations |
|---|---|
| 2020-07-10 17:28:11 |
|
| 2020-07-10 17:17:28 |
|
| 2020-07-09 00:28:23 |
|
| 2020-07-09 00:17:29 |
|
| 2020-07-08 17:28:25 |
|
| 2020-07-08 17:17:28 |
|
| 2020-07-07 17:28:16 |
|
| 2020-07-07 17:17:30 |
|
| 2020-07-02 17:28:29 |
|
| 2020-07-02 17:17:29 |
|
| 2020-06-30 00:28:15 |
|
| 2020-06-30 00:17:30 |
|
| 2020-06-26 17:28:15 |
|
| 2020-06-26 17:17:29 |
|
| 2020-06-16 17:28:14 |
|
| 2020-06-16 17:17:27 |
|
| 2020-06-12 21:28:35 |
|
| 2020-06-12 21:17:37 |
|
| 2020-06-12 17:17:28 |
|
| 2020-06-09 05:17:26 |
|
| 2020-06-08 21:17:37 |
|
