Vulnerabilityhigh

UPnP-enabled connected devices still vulnerable to cyber attacks

Security Affairsby @securityaffairsMar 7, 2019 · 09:56 UTC (Mar 7, 2019)4 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2017-7494 CVE-2013-0230 CVE-2013-0229 CVE-2017-1000494 CVE-2007-1204

Tags: cve-2017-7494 cve-2013-0230 cve-2013-0229 cve-2017-1000494 cve-2007-1204 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-1000494	Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service…	7.8	<1%	PoC	Jan 3, 2018
CVE-2017-7494	Unauthenticated RCE in Samba via malicious shared library upload (SambaCry)	9.8	99%	KEVRansomware	May 30, 2017 KEV Mar 30, 2023

From the original article

4 min read at securityaffairs.com

UPnP-enabled devices running outdated software are exposed to a wide range of attacks exploiting known flaws in UPnP libraries.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.