CVE-2021-31718

EUVD-2021-18602
The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
npupnp_projectnpupnp
𝑥
< 4.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2021/04/25/2
https://framagit.org/medoc92/npupnp
https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html
http://www.openwall.com/lists/oss-security/2021/04/25/2
https://framagit.org/medoc92/npupnp
https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html