CVE-2021-31718

High

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading…

mitre·CWE-346·Published 2021-04-25

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

165 chars

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

NVDen

165 chars

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

El servidor en npupnp versiones anteriores a 4.1.4, esta afectado por el reenlace de DNS en el servidor web integrado (incluyendo los endpoints UPnP SOAP y GENA), conllevando a una ejecución de código remota

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H