CVE-2011-4502
Critical
Description
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to execute arbitrary commands via shell metacharacters.
SeverityCritical
CVSS10.0
Exploit probability—
ProductEdimax Br-6104k Router Firmware
PublishedNov 22, 2011
First seenNov 22, 2011
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| edimax br-6104k_router_firmware | 3.21 | — |
| edimax br-6104k | No range specified | — |
| canyon-tech cn-wf512_router_firmware | 1.83 | — |
| canyon-tech cn-wf514_router_firmware | 2.08 | — |
| canyon-tech cn-wf512 | No range specified | — |
| canyon-tech cn-wf514 | No range specified | — |
| edimax 6114wg_router_firmware | 1.83, 2.08 | — |
| edimax 6114wg | No range specified | — |
| sitecom wl-153_router_firmware | 1.31, 1.34 | — |
| sitecom wl-153 | No range specified | — |
| sweex lb000021_router_firmware | 3.15 | — |
| sweex lb000021 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.