CVE-2020-12695

CVSS V2 High 7.8 CVSS V3 High 7.5
Description
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
Overview
  • CVE ID
  • CVE-2020-12695
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2020-06-08T17:15:09
  • Last Modified Date
  • 2021-04-23T00:15:08
Weakness Enumerations
CWE URL
CWE-276 http://cwe.mitre.org/data/definitions/276.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ui:unifi_controller:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:* 1 OR 2.0.0
cpe:2.3:h:asus:rt-n11:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:broadcom:adsl:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:canon:selphy_cp1200:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:d-link:dvg-n5412sp:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:dell:b1165nfw:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:ep-101:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:ew-m970a3t:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:m571t:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-100:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-2101:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-2105:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-241:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-320:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-330:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-340:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-4100:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-4105:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-440:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-620:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-630:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-702:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-8500:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-8600:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-960:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:epson:xp-970:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:5020_z4a69a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:5030_m2u92b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:5030_z4a70a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:5034_z4a74a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:5660_f8b04a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_3456_a9t84c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_3545_a9t81a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_3545_a9t81c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_3545_a9t83b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_3546_a9t82a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_3548_a9t81b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4515:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4518:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4535_f0v64a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4535_f0v64b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4535_f0v64c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4536_f0v65a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4538_f0v66b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4675_f1h97a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4675_f1h97b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4675_f1h97c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4676_f1h98a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_4678_f1h99b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_5575_g0v48b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:deskjet_ink_advantage_5575_g0v48c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_100_cn517a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_100_cn517b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_100_cn517c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_100_cn518a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_100_cn519a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_100_cn519b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_110_cq809a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_110_cq809b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_110_cq809c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_110_cq809d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_110_cq812c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_111_cq810a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_114_cq811a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_114_cq811b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_114_cq812a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_120_cz022a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_120_cz022b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_120_cz022c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4500_a9t80a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4500_a9t80b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4500_a9t89a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4500_d3p93a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4501_c8d05a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4502_a9t85a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4502_a9t87b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4503_e6g71b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4504_a9t88b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4504_c8d04a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4505_a9t86a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4507_e6g70b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4508_e6g72b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4509_d3p94a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4509_d3p94b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4511_k9h50a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4512_k9h49a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4513_k9h51a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4516_k9h52a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4520_e6g67a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4520_e6g67b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4520_f0v63a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4520_f0v63b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4520_f0v69a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4521_k9t10b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4522_f0v67a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4523_j6u60b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4524_f0v71b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4524_f0v72b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4524_k9t01a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4525_k9t09b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4526_k9t05b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4527_j6u61b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_4528_k9t08b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_m2u85a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_m2u85b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_m2u91a:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_m2u91a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_m2u94b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_z4a54a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5000_z4a74a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5020_m2u91b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5530:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5531:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5532:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5534:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5535:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5536:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5539:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5540_f2e72a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5540_g0v47a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5540_g0v51a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5540_g0v52a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5540_g0v53a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5540_k7c85a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5541_k7g89a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5542_k7c88a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5543_n9u88a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5544_k7c89a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5544_k7c93a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5545_g0v50a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5546_k7c90a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5547_j6u64a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5548_k7g87a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5640_b9s56a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5640_b9s58a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5642_b9s64a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5643_b9s63a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5644_b9s65a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5646_f8b05a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5664_f8b08a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_5665_f8b06a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6020_5se16b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6020_5se17a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6020_6wd35a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6020_7cz37a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6052_5se18a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6055_5se16a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_6540_b9s59a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_7640:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_7644_e4w46a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_7645_e4w44a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6200_k7g18a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6200_k7g26b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6200_k7s21b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6200_y0k13d_:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6200_y0k15a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6220_k7g20d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6220_k7g21b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6222_y0k13d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6222_y0k14d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6230_k7g25b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6232_k7g26b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6234_k7s21b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_6252_k7g22a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7100_3xd89a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7100_k7g93a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7100_k7g99a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7100_z3m37a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7100_z3m52a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7120_z3m41d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7155_z3m52a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7164_k7g99a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7800_k7r96a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7800_k7s00a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7800_k7s10d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7800_y0g42d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7800_y0g52b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7822_y0g42d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7822_y0g43d:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_photo_7830_y0g50b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_pro_6420_5se45b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_pro_6420_5se46a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_pro_6420_6wd14a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_pro_6420_6wd16a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_pro_6452_5se47a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:envy_pro_6455_5se45a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4535_f0v64a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4535_f0v64b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4535_f0v64c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4536_f0v65a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4538_f0v66b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4675_f1h97a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4675_f1h97b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4675_f1h97c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4676_f1h98a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_deskjet_ink_advantage_4678_f1h99b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4511_k9h50a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4512_k9h49a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4513_k9h51a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4516_k9h52a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4520_e6g67a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4520_e6g67b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4520_f0v63a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4520_f0v63b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4520_f0v69a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4521_k9t10b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4522_f0v67a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4523_j6u60b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4524_f0v71b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4524_f0v72b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4524_k9t01a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4525_k9t09b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4526_k9t05b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4527_j6u61b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_envy_4528_k9t08b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4650_e6g87a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4650_f1h96a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4650_f1h96b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4652_f1j02a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4652_f1j05b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4652_k9v84b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4654_f1j06b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4654_f1j07b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4655_f1j00a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4655_k9v79a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4655_k9v82b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4656_k9v81b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4657_v6d29b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:hp_officejet_4658_v6d30b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4650_e6g87a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4650_f1h96a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4650_f1h96b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4652_f1j02a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4652_f1j05b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4652_k9v84b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4654_f1j06b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4654_f1j07b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4655_f1j00a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4655_k9v79a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4655_k9v82b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4656_k9v81b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4657_v6d29b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:hp:officejet_4658_v6d30b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:huawei:hg255s:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:huawei:hg532e:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:nec:wr8165n:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:wnhde111:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:ruckussecurity:zonedirector_1200:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:zte:zxv10_w300:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:zyxel:amg1202-t10b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:zyxel:vmg8324-b10a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:xbox_one:10.0.19041.2494:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:N/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.8
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 7.8
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • HIGH
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • CHANGED
  • Confidentiality Impact
  • LOW
  • Availability Impact
  • HIGH
  • Base Score
  • 7.5
  • Base Severity
  • HIGH
  • Exploitability Score
  • 2.2
  • Impact Score
  • 4.7
References
Reference URL Reference Tags
https://www.callstranger.com Third Party Advisory
https://www.kb.cert.org/vuls/id/339275 Third Party Advisory US Government Resource
http://www.openwall.com/lists/oss-security/2020/06/08/2 Mailing List Third Party Advisory
https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of Third Party Advisory
https://github.com/yunuscadirci/CallStranger Third Party Advisory
http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.html Third Party Advisory VDB Entry
https://github.com/corelight/callstranger-detector
https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/
https://lists.debian.org/debian-lts-announce/2020/08/msg00011.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html
https://usn.ubuntu.com/4494-1/
https://www.debian.org/security/2020/dsa-4806
https://lists.debian.org/debian-lts-announce/2020/12/msg00017.html
https://www.debian.org/security/2021/dsa-4898
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2020-12695
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
History
Created Old Value New Value Data Type Notes
2022-05-10 07:14:39 Added to TrackCVE
2022-12-04 17:31:56 2020-06-08T17:15Z 2020-06-08T17:15:09 CVE Published Date updated
2022-12-04 17:31:56 2021-04-23T00:15:08 CVE Modified Date updated
2022-12-04 17:31:56 Modified Vulnerability Status updated