VulnerabilityModified

CVE-2020-12695

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

HIGH 7.5EPSS 15.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 15.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H
EPSS: 15.19% probability · 97th percentile
CISA KEV: Not listed
Weakness: CWE-276
Affected: ui/unifi controller · w1.fi/hostapd · asus/rt-n11 · broadcom/adsl · canon/selphy cp1200 · cisco/wap131 · cisco/wap150 · cisco/wap351 · dlink/dvg-n5412sp · dell/b1165nfw · epson/ep-101 · epson/ew-m970a3t · epson/m571t · epson/xp-100 · epson/xp-2101 · epson/xp-2105 · epson/xp-241 · epson/xp-320 · epson/xp-330 · epson/xp-340 · +40 more
Source: cve@mitre.org

References

http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2020/06/08/2Mailing List, Third Party Advisory
https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/Third Party Advisory
https://github.com/corelight/callstranger-detectorThird Party Advisory
https://github.com/yunuscadirci/CallStrangerThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00011.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00013.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00017.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/Mailing List, Third Party Advisory
https://usn.ubuntu.com/4494-1/Third Party Advisory
https://www.callstranger.comBroken Link
https://www.debian.org/security/2020/dsa-4806Third Party Advisory
https://www.debian.org/security/2021/dsa-4898Third Party Advisory
https://www.kb.cert.org/vuls/id/339275Third Party Advisory, US Government Resource
https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-ofThird Party Advisory
http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2020/06/08/2Mailing List, Third Party Advisory
https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/Third Party Advisory
https://github.com/corelight/callstranger-detectorThird Party Advisory
https://github.com/yunuscadirci/CallStrangerThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00011.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00013.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00017.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/Mailing List, Third Party Advisory
https://usn.ubuntu.com/4494-1/Third Party Advisory
https://www.callstranger.comBroken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.