Broadcom UPnP implementation also contains critical vulnerability, researchers say

Security researchers from Croatia-based security firm DefenseCode claim to have found a critical remote code execution vulnerability in the UPnP (Universal Plug and Play) implementation developed by Broadcom. If exploited correctly, the vulnerability allows an unauthenticated attacker to execute arbitrary code with root (administrator) privileges on the device. Cisco already developed a fix for the vulnerability reported in the WRT54GL model and is working with DefenseCode to validate it, a Cisco representative said Friday via email.”]

Source: https://www.csoonline.com/article/2132870/broadcom-upnp-implementation-also-contains-critical-vulnerability–researchers-say.html