CVE-2011-4499

HIGH 7.5CVE-2011-4499 · Published 22/11/2011 · updated 16/06/2026

In short

CVE-2011-4499 is a HIGH (CVSS 7.5) vulnerability affecting linksys wrt54g router firmware (cisco), linksys wrt54gs router firmware (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
linksys wrt54g router firmware cisco	`= 3.03.9= 4.20.7≤ 4.20.8`	No fix yet
linksys wrt54gs router firmware cisco	`= 2.09.1≤ 1.06≤ 4.70.6`	No fix yet

Description

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

References

kb.cert.org/vuls/id/357851 · US Government Resource
upnp-hacks.org/devices.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free