CVE:CVE-2011-4499
CNNVD:CNNVD-201111-361
Cisco Linksys WRT54G多个版本的Broadcom UPnP栈的UPnP IGD安装启用中存在漏洞。远程攻击者可通过发送SOAP请求的UPnP AddPortMapping操作到WAN接口建立任意端口映射，该漏洞与 "external forwarding" 漏洞有关。 这些版本包括：Cisco Linksys WRT54G with firmware 4.30.5之前版本, WRT54GS v1至v3 with firmware 4.71.1之前版本以及WRT54GS v4 with firmware 1.06.1之前版本。
solution:Upgrade cisco linksys_wrt54g_router_firmware to a higher version than 4.20.8,3.03.9,4.20.7,and avoid the version (,4.20.8],3.03.9,4.20.7; Upgrade linksys wrt54g to a higher version than *,2.2,and avoid the version 2.2; Upgrade cisco linksys_wrt54gs_router_firmware to a higher version than 4.70.6,2.09.1,1.06,and avoid the version (,4.70.6],2.09.1,(,1.06]; Upgrade linksys wrt54gs to a higher version than 1.0,2.0,3.0,4.0,and avoid the version 1.0,2.0,3.0,4.0