FYI…

Cisco Linksys router WRT54G WRT54GX UPnP vuln …
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2011-4499
Last revised: 11/22/2011
CVSS v2 Base Score: 7.5 (HIGH)
"… Cisco Linksys WRT54G* with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1.."

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2011-4500
Last revised: 11/22/2011
CVSS v2 Base Score: 7.5 (HIGH)
"… Cisco Linksys WRT54GX* with firmware 2.00.05, when UPnP is enabled…"

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2011-4501
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2011-4502
"… Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15…"

- http://www.kb.cert.org/vuls/id/357851
Last Updated: 2011-10-07 - "… Workarounds: Disable UPnP* on the device…"

* http://192.168.1.1/Manage.htm
… Administration - UPnP: > Disable…

- http://www.upnp-hacks.org/devices.html#linksys
___

- http://h-online.com/-1329727
24 August 2011

:ph34r: :ph34r: