CVEvulnerability

CVE-2018-11946

6.5 MEDIUM Published 2018-11-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:C/A:N

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication.

Affected configurations

• google android

References