CVE-2020-12695

Related Files

Ubuntu Security Notice USN-4494-1

Posted Sep 15, 2020

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4494-1 - It was discovered that GUPnP incorrectly handled certain subscription requests. A remote attacker could possibly use this issue to exfiltrate data or use GUPnP to perform DDoS attacks.

tags | advisory, remote

systems | linux, ubuntu

advisories | CVE-2020-12695

MD5 | 9812b5ed9d7cae11c7449b6333755453

Download | Favorite | View

CallStranger UPnP Vulnerability Checker

Posted Jun 11, 2020

Authored by Yunus Cadirci | Site github.com

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. This tool checks for the vulnerability.

tags | exploit

advisories | CVE-2020-12695

MD5 | a036cedcc6cedbeb209a55f7ef24a4c3

Download | Favorite | View