The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-16,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| genmei_mori | pseudoics | 0.3 |
| genmei_mori | pseudoics | 0.2 |
| genmei_mori | pseudoics | 0.1 |
| zyxel | p-330w_router | * |