CVE-2016-6255

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered…

published March 7, 2017

CVSS

—

EPSS

27%

Percentile

98.0

In the wild

Unconfirmed

What it is

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.26620 · 98.0th percentile
Published: 2017-03-07T16:00Z

EPSS history

Timeline

07 MAR 16:00Z
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered…
cvelistv5