CVE Daily

CVE-2018-11946

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from C...

Medium CVSS 6.5

Overview

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication.

CWE: N/A Published: 2018-11-27T16:29:01.193
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags