CVE-2012-5960

Estado: ModificadaAlta (10)—💥 Exploit

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.

CVSS

Versión: 2.0
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Puntuación base: 10

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 33%
Percentil entre todas las CVEs puntuadas: 98
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Publicado en Exploit-DB · Portable UPnP SDK - 'unique_service_name()' Remote Code Execution (Metasploit) (5/2/2013)
Prueba de concepto en GitHub (no verificada) · Lista de pruebas de concepto en GitHub

⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.

Tecnologías afectadas (1)

Portable SDK FOR Upnp Project — Portable SDK FOR Upnp

CWE

CWE-119

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2012-5960",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-01-31T21:55:01.130",
  "references": [
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html",
      "source": "cret@cert.org"
    },
    {
      "url": "http://pupnp.sourceforge.net/ChangeLog",
      "source": "cret@cert.org"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2614",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2615",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/922681",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:098",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/57602",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play",
      "source": "cret@cert.org"
    },
    {
      "url": "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf",
      "source": "cret@cert.org"
    },
    {
      "url": "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb",
      "source": "cret@cert.org"
    },
    {
      "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037",
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.tenable.com/security/research/tra-2017-10",
      "source": "cret@cert.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://pupnp.sourceforge.net/ChangeLog",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2614",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2615",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/922681",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:098",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/57602",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.tenable.com/security/research/tra-2017-10",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en la función de unique_service_name en ssdp/ssdp_server.c en el analizador SSDP en el SDK portátil para dispositivos UPnP (alias libupnp, anteriormente el SDK Intel para dispositivos UPnP) antes de v1.6.18 que permite a atacantes remotos ejecutar código arbitrario a través de un campo long UDN (también conocido como UPnP: rootdevice) en un paquete UDP."
    }
  ],
  "lastModified": "2026-06-16T23:47:38.280",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C455211-D1FA-4C62-A197-EFEFC5C5D01F",
              "versionEndIncluding": "1.6.17"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E662E3C-AEA7-4DCA-BEDC-BDA5ACB0D5D0"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "781D2266-3A9C-4AF5-B7B2-FA274DF54E09"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C552810C-1431-4067-818D-67A8C630D801"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB89AFD4-505B-4FBA-AF47-3C8642553B0B"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5031EDD-7C6F-4275-B1CE-B2CA283BF3FC"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A54D7EF5-A40E-4734-9B4E-A498ABC3584E"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21878D6C-B1F5-49AD-A439-6D7F31188CAC"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.4.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76272224-99C5-46B5-8023-A72125A0EFA9"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "649A0253-0977-41FC-A6A7-BEF9AD0CBBF0"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "632F0203-CC23-4A0C-BC02-C1D7200D0AB4"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "904020BB-3578-46DF-9E72-B05C460BF611"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "515FE369-2B84-48FB-BF7D-2F08DBDC4D6D"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5CCE57C-1231-4AD8-95B0-A475CB4B54D5"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "229CB4BA-3E61-4601-A3F3-F3B0F1118E1E"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20D8B2E3-DA83-406A-A551-BC0D42206676"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D744EE8-25EF-4056-B505-659DBFAED756"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "722AAD13-88B2-47C3-93CF-AFFA9E940584"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0D158B6-D7CE-4183-BF23-D94E551EC383"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFCF65D9-22B0-4CDE-A94F-C7808772715A"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE37CCD0-4D82-4F13-8E9E-B1834BE8ED3A"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E66DAC60-93F0-46E6-AC83-E39626F2BB59"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F126F175-297A-4907-A3E8-85B6139EA1B4"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3788B47-A9E4-4DDF-919A-79E5CEA0824D"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33B8E7C9-7007-48EC-8F53-B4E079207964"
            },
            {
              "criteria": "cpe:2.3:a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.6.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C5DFC03-BA2B-463E-AAA5-10731961B3A6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "Per CERT's advisory additional products may be affected: http://www.kb.cert.org/vuls/id/922681 \"Hundreds of vendors have used the libupnp library in their products, many of which are acting as the home routers for consumer networks. Any application linking to libupnp is likely to be affected\"",
  "sourceIdentifier": "cret@cert.org"
}