CVE-2011-4506

CVE-2011-4506 describes a critical vulnerability in the UPnP IGD implementation of Thomson (Technicolor) TG585 routers running firmware 7.x prior to 7.4.3.2. This flaw allows remote attackers to establish arbitrary port mappings by sending a crafted UPnP AddPortMapping SOAP request to the router's WAN interface, effectively bypassing network security. With a CVSS score of 7.5, this vulnerability is highly severe, requiring no authentication and low attack complexity (AV:N/AC:L/Au:N). A successful exploit could lead to unauthorized access, information disclosure, and denial of service (C:P/I:P/A:P). While there is no evidence of active exploitation, nor are there publicly available Metasploit or Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security professionals. It is not listed in the CISA KEV catalog.