CVE-2020-12695

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a…

published June 8, 2020

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15193 · 96.7th percentile
Published
2020-06-08T16:45Z
EPSS history
Timeline
  • 08 JUN 16:45Z
    The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a…
    cvelistv5