CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
DD-WRT UPnP SSDP Buffer Overflow Vulnerability (CVE-2021-27137) Analysis and Mitigation Guide
[Affected Scope] DD-WRT firmware versions before build 45724 with UPnP functionality enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code or cause a Denial of Service (DoS) by sending crafted SSDP M-SEARCH requests, with active exploitation by botnets (e.g., c0xmo) confirmed in the wild [1, 2, references]
[Mitigation] Immediately upgrade DD-WRT firmware to build 45724 or later, and disable UPnP services until the patch is applied [1, references]
D-Link DIR-859 Wi-Fi Router UPnP gena.cgi Remote Command Execution (RCE) Vulnerability (CVE-2019-17621)
[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01
[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service
[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface
Windows UPnP Service COM Object Creation Local Privilege Escalation (CVE-2019-1405) Technical Analysis and Hardening Guide
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 with active UPnP services
[Impact] A local authenticated attacker can exploit improper COM object instantiation to execute arbitrary code with NT AUTHORITY\SYSTEM privileges
[Mitigation] Apply the official Microsoft security updates immediately, or disable the UPnP Device Host service as a temporary workaround
Microsoft Windows UPnP Service Local Privilege Escalation Vulnerability (CVE-2019-1322) Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows operating systems, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local authenticated attacker with low privileges can exploit improper authentication handling in the UPnP service to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft security patches immediately, or disable the UPnP Device Host service and block associated ports as a temporary workaround
Realtek SDK Miniigd SOAP Service Remote Code Execution (RCE) Vulnerability (CVE-2014-8361) Analysis and Mitigation Guide
[Affected Scope] Routers and embedded devices utilizing the Realtek SDK with the miniigd UPnP SOAP service enabled
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted SOAP requests, leading to complete device compromise
[Mitigation] Disable the UPnP service, block external access to port 52869/TCP, and apply the latest firmware updates from the device vendor