CVE-2021-33516
Published: 24 May 2021
Summary
CVE-2021-33516 is a high-severity an unspecified weakness vulnerability in Gnome Gupnp. Its CVSS base score is 8.1 (High).
Operationally, ranked at the 47.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-20208
Vulnerability details
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using…
more
this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.