The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an external forwarding vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tg585_router_firmware | Technicolor | * | 7.4 (including) |