CVE-2011-4500

CVE-2011-4500 describes a critical vulnerability in the UPnP IGD implementation of the Cisco Linksys WRT54GX router with firmware 2.00.05. When UPnP is enabled, the device's SOAP server listens on the WAN port, exposing it to external networks. This allows unauthenticated remote attackers to administer the firewall via SOAP requests, potentially leading to full compromise of the device. The vulnerability has a CVSS score of 7.5, indicating high severity. Its attack vector is network-based with low attack complexity and no authentication required, making it easily exploitable. The potential impact includes complete loss of confidentiality, integrity, and availability of the affected router. There is no evidence of active exploitation for this CVE, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting limited public awareness or interest in this specific vulnerability.