lochiiconnectivity/vulnupnp

PoC

Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959

view exploit source poc_in_githubauthor lochiiconnectivitypublished 2013-04-14catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-0229US	high7.8	76.4% (100th)	Exploit	2013-01-31
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafte…
CVE-2012-5958US	high10.0	83.2% (100th)	Exploit	2013-01-31
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK f…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.