Read the docs
TI-2020-10094 Aliases CVE-2020-12695GHSA-wp9w-2vp9-wg66

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the…

Priority MEDIUM 49CWE-276Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Low · None · High
Fix status
Partial Red Hat: 2 fixed, 3 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

Why it matters now

EPSS 0.15193 96th percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 2 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 220

CPEVersionsRoleVendor
cpe:2.3:a:ui:unifi_controller:-:*:*:*:*:*:*:*not specified by NVDVulnerableUbiquiti
cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*before 2.0.0VulnerableWi-Fi Alliance
cpe:2.3:h:asus:rt-n11:-:*:*:*:*:*:*:*not specified by NVDVulnerableASUS
cpe:2.3:h:broadcom:adsl:-:*:*:*:*:*:*:*not specified by NVDVulnerableBroadcom
cpe:2.3:h:canon:selphy_cp1200:-:*:*:*:*:*:*:*not specified by NVDVulnerableCanon Inc.
cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:dlink:dvg-n5412sp:-:*:*:*:*:*:*:*not specified by NVDVulnerableD-Link Japan K.K.
cpe:2.3:h:dell:b1165nfw:-:*:*:*:*:*:*:*not specified by NVDVulnerableDell
  • cpe:2.3:a:ui:unifi_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ubiquiti
  • cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:* Versions before 2.0.0 Vulnerable ·Wi-Fi Alliance
  • cpe:2.3:h:asus:rt-n11:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ASUS
  • cpe:2.3:h:broadcom:adsl:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Broadcom
  • cpe:2.3:h:canon:selphy_cp1200:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Canon Inc.
  • cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:dlink:dvg-n5412sp:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dell:b1165nfw:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
Show 210 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:epson:ep-101:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:ew-m970a3t:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:m571t:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-100:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-2101:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-2105:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-241:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-320:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-330:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-340:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-4100:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-4105:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-440:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-620:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-630:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-702:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-8500:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-8600:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-960:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:xp-970:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:hp:5020_z4a69a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:5030_m2u92b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:5030_z4a70a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:5034_z4a74a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:5660_f8b04a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_3456_a9t84c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_3545_a9t81a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_3545_a9t81c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_3545_a9t83b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_3546_a9t82a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_3548_a9t81b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4515:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4518:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4535_f0v64a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4535_f0v64b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4535_f0v64c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4536_f0v65a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4538_f0v66b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4675_f1h97a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4675_f1h97b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4675_f1h97c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4676_f1h98a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_4678_f1h99b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_5575_g0v48b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_ink_advantage_5575_g0v48c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_100_cn517a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_100_cn517b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_100_cn517c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_100_cn518a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_100_cn519a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_100_cn519b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_110_cq809a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_110_cq809b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_110_cq809c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_110_cq809d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_110_cq812c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_111_cq810a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_114_cq811a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_114_cq811b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_114_cq812a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_120_cz022a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_120_cz022b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_120_cz022c:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4500_a9t80a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4500_a9t80b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4500_a9t89a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4500_d3p93a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4501_c8d05a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4502_a9t85a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4502_a9t87b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4503_e6g71b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4504_a9t88b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4504_c8d04a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4505_a9t86a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4507_e6g70b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4508_e6g72b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4509_d3p94a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4509_d3p94b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4511_k9h50a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4512_k9h49a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4513_k9h51a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4516_k9h52a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4520_e6g67a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4520_e6g67b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4520_f0v63a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4520_f0v63b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4520_f0v69a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4521_k9t10b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4522_f0v67a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4523_j6u60b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4524_f0v71b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4524_f0v72b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4524_k9t01a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4525_k9t09b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4526_k9t05b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4527_j6u61b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_4528_k9t08b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_m2u85a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_m2u85b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_m2u91a:*:*:*:*:*:*:*:*all versionsVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_m2u91a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_m2u94b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_z4a54a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5000_z4a74a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5020_m2u91b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5530:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5531:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5532:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5534:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5535:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5536:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5539:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5540_f2e72a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5540_g0v47a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5540_g0v51a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5540_g0v52a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5540_g0v53a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5540_k7c85a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5541_k7g89a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5542_k7c88a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5543_n9u88a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5544_k7c89a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5544_k7c93a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5545_g0v50a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5546_k7c90a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5547_j6u64a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5548_k7g87a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5640_b9s56a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5640_b9s58a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5642_b9s64a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5643_b9s63a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5644_b9s65a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5646_f8b05a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5664_f8b08a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_5665_f8b06a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6020_5se16b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6020_5se17a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6020_6wd35a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6020_7cz37a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6052_5se18a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6055_5se16a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_6540_b9s59a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_7640:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_7644_e4w46a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_7645_e4w44a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6200_k7g18a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6200_k7g26b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6200_k7s21b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6200_y0k13d_:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6200_y0k15a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6220_k7g20d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6220_k7g21b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6222_y0k13d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6222_y0k14d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6230_k7g25b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6232_k7g26b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6234_k7s21b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_6252_k7g22a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7100_3xd89a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7100_k7g93a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7100_k7g99a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7100_z3m37a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7100_z3m52a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7120_z3m41d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7155_z3m52a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7164_k7g99a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7800_k7r96a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7800_k7s00a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7800_k7s10d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7800_y0g42d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7800_y0g52b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7822_y0g42d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7822_y0g43d:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_photo_7830_y0g50b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_pro_6420_5se45b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_pro_6420_5se46a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_pro_6420_6wd14a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_pro_6420_6wd16a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_pro_6452_5se47a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:envy_pro_6455_5se45a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4650_e6g87a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4650_f1h96a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4650_f1h96b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4652_f1j02a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4652_f1j05b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4652_k9v84b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4654_f1j06b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4654_f1j07b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4655_f1j00a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4655_k9v79a:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4655_k9v82b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4656_k9v81b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4657_v6d29b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_4658_v6d30b:-:*:*:*:*:*:*:*not specified by NVDVulnerableHewlett Packard Enterprise
cpe:2.3:h:huawei:hg255s:-:*:*:*:*:*:*:*not specified by NVDVulnerableHuawei
cpe:2.3:h:huawei:hg532e:-:*:*:*:*:*:*:*not specified by NVDVulnerableHuawei
cpe:2.3:h:nec:wr8165n:-:*:*:*:*:*:*:*not specified by NVDVulnerableNEC Corporation
cpe:2.3:h:netgear:wnhde111:-:*:*:*:*:*:*:*not specified by NVDVulnerableNETGEAR
cpe:2.3:h:ruckussecurity:zonedirector_1200:-:*:*:*:*:*:*:*not specified by NVDVulnerableRuckussecurity
cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:zte:zxv10_w300:-:*:*:*:*:*:*:*not specified by NVDVulnerableZTE
cpe:2.3:h:zyxel:amg1202-t10b:-:*:*:*:*:*:*:*not specified by NVDVulnerableZyxel
cpe:2.3:h:zyxel:vmg8324-b10a:-:*:*:*:*:*:*:*not specified by NVDVulnerableZyxel
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:xbox_one:10.0.19041.2494:*:*:*:*:*:*:*10.0.19041.2494VulnerableMicrosoft
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*32VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*20.04VulnerableCanonical

Remediation

Red Hat 1 advisory

  • RHSA-2021:1789 Released 2021-05-18 · Red Hat rating Moderate
    gssdp and gupnp security update
    • Red Hat CodeReady Linux Builder (v. 8) gssdp-devel-1.0.5-1.el8, gssdp-docs-1.0.5-1.el8, gupnp-devel-1.0.6-1.el8
    • Red Hat Enterprise Linux AppStream (v. 8) gssdp-1.0.5-1.el8, gupnp-1.0.6-1.el8

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2021:1789
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2021:1789
Not affected: 2 products
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-12695
  2. 2026-10-03 Alias added: GHSA-wp9w-2vp9-wg66

References

Sources