Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-5958

88
FAUCET Score

CVE-2012-5958 describes a critical stack-based buffer overflow in the unique_service_name function of the libupnp SDK (versions prior to 1.6.18), allowing remote attackers to execute arbitrary code via a crafted UDP packet. This vulnerability carries a CVSS score of 10.0, indicating maximum severity with network-based exploitation, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not on CISA's KEV catalog, exploit modules are publicly available in Metasploit, and an ExploitDB entry exists, suggesting a high potential for exploitation despite limited community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.6.17CPE matchmatch criteria
cpe:2.3:a:libupnp_project:libupnp:*:*:*:*:*:*:*:*
1.4.0CPE matchmatch criteria
cpe:2.3:a:libupnp_project:libupnp:1.4.0:*:*:*:*:*:*:*
1.4.1CPE matchmatch criteria
cpe:2.3:a:libupnp_project:libupnp:1.4.1:*:*:*:*:*:*:*
1.4.2CPE matchmatch criteria
cpe:2.3:a:libupnp_project:libupnp:1.4.2:*:*:*:*:*:*:*
1.4.3CPE matchmatch criteria
cpe:2.3:a:libupnp_project:libupnp:1.4.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
82.81%
Probability of exploitation in next 30 days
EPSS Percentile
99.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Metasploit: Portable UPnP SDK unique_service_name() Remote Code Execution · Jan 29, 2013
ExploitDB: EDB-49119 · Nov 27, 2020
This CVE's current EPSS score of 0.8281 is in the 100th percentile among its peer group of 51,466 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

beegovendor investigatingvia llm_extracted
lexmarkvendor investigatingvia llm_extracted
libreofficevendor investigatingvia llm_extracted
postgresqlvendor investigatingvia llm_extracted

Vendor Advisories (5)

beegollm-beego-5edcbbd68defa25eCRITICAL

[R1] Debian MediaTomb (fork) Multiple Remote Vulnerabilities

Mar 13, 2017
postgresqlllm-postgresql-b781023a47ce749dCRITICAL

[R1] Debian MediaTomb (fork) Multiple Remote Vulnerabilities

Mar 13, 2017
lexmarkllm-lexmark-fac052076c03cea6CRITICAL

[R1] Debian MediaTomb (fork) Multiple Remote Vulnerabilities

Mar 13, 2017
libreofficellm-libreoffice-2011f31b38c5d0e4CRITICAL

[R1] Debian MediaTomb (fork) Multiple Remote Vulnerabilities

Mar 13, 2017
redhatCVE-2012-5958Important

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Jan 29, 2013

References

lists.opensuse.org / opensuse-updates/2013-02/msg00013.html
packetstormsecurity.com / files/160242/libupnp-1.6.18-Denial-Of-Service.html
pupnp.sourceforge.net / ChangeLog
community.rapid7.com / community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
community.rapid7.com / servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
community.rapid7.com / servlet/servlet.FileDownload
wiki.mageia.org / en/Support/Advisories/MGASA-2013-0037
tenable.com / security/research/tra-2017-10
tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
tsd.dlink.com.tw / temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
tsd.dlink.com.tw / temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf
tsd.dlink.com.tw / temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf
tsd.dlink.com.tw / temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf
debian.org / security/2013/dsa-2614
debian.org / security/2013/dsa-2615
kb.cert.org / vuls/id/922681
PatchUS Government Resource
mandriva.com / security/advisories
securityfocus.com / bid/57602
Exploit