Description (CNA)
The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://framagit.org/medoc92/npupnp
- https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html
- http://www.openwall.com/lists/oss-security/2021/04/25/2
ADP enrichment
No English description supplied.