{"version": "https://jsonfeed.org/version/1", "title": "/dev/posts/ - Tag index - upnp", "home_page_url": "https://www.gabriel.urdhr.fr", "feed_url": "/tags/upnp/feed.json", "items": [{"id": "http://www.gabriel.urdhr.fr/2022/03/15/dns-rebinding-readymedia/", "title": "DNS rebinding on ReadyMedia/minidlna v1.3.0 and below", "url": "https://www.gabriel.urdhr.fr/2022/03/15/dns-rebinding-readymedia/", "date_published": "2022-03-15T00:00:00+01:00", "date_modified": "2022-03-15T00:00:00+01:00", "tags": ["computer", "security", "upnp", "dns-rebinding", "vulnerability"], "content_html": "<p>A DNS rebinding vulnerability I found\nin <a href=\"https://sourceforge.net/projects/minidlna/\">ReadyMedia</a> (formerly MiniDLNA)\nv1.3.0 and below.\nThis is <a href=\"https://nvd.nist.gov/vuln/detail/CVE-2022-26505\">CVE-2022-26505</a>.</p>\n"}, {"id": "http://www.gabriel.urdhr.fr/2021/06/24/gupnp-dns-rebinding/", "title": "DNS rebinding vulnerability in GUPnP", "url": "https://www.gabriel.urdhr.fr/2021/06/24/gupnp-dns-rebinding/", "date_published": "2021-06-24T00:00:00+02:00", "date_modified": "2021-07-05T18:50:55+02:00", "tags": ["computer", "security", "upnp", "dns-rebinding", "vulnerability"], "content_html": "<p>GUPnP, a GNOME library for Universal Plug and Play (UPnP),\nwas vulnerable to <a href=\"https://www.gabriel.urdhr.fr/2021/06/02/dns-rebinding-explained/\">DNS rebinding</a> attacks.\nThis is <a href=\"https://nvd.nist.gov/vuln/detail/CVE-2021-33516\">CVE-2021-33516</a>\nand <a href=\"https://gitlab.gnome.org/GNOME/gupnp/-/issues/24\">GUPnP issue #24</a>.\nThis <a href=\"https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536/3\">was fixed</a>\nin GUPnP 1.0.7 and GUPnP 1.2.5.</p>\n"}, {"id": "http://www.gabriel.urdhr.fr/2021/06/12/pupnp-dns-rebinding/", "title": "DNS rebinding vulnerability in pupnp and npupnp", "url": "https://www.gabriel.urdhr.fr/2021/06/12/pupnp-dns-rebinding/", "date_published": "2021-06-12T00:00:00+02:00", "date_modified": "2021-06-12T00:00:00+02:00", "tags": ["computer", "security", "upnp", "dns-rebinding", "vulnerability"], "content_html": "<p>I found that <a href=\"https://github.com/pupnp/pupnp\">pupnp</a> was vulnerable to DNS rebinding attacks.\n<a href=\"https://framagit.org/medoc92/npupnp\">npupnp</a>, a fork a pupnp, was impacted as well.\nThis is demonstrated using Gerbera a UPnP MediaServer.</p>\n"}, {"id": "http://www.gabriel.urdhr.fr/2021/03/22/introduction-to-upnp/", "title": "Introduction to UPnP", "url": "https://www.gabriel.urdhr.fr/2021/03/22/introduction-to-upnp/", "date_published": "2021-03-22T23:24:42+01:00", "date_modified": "2021-03-22T23:24:42+01:00", "tags": ["computer", "network", "upnp", "security", "csrf", "dns-rebinding"], "content_html": "<p>This post gives simple explanations of how UPnP (Universal Plug-and-Play) works,\nespecially with the goal of testing the security devices\nsuch as <a href=\"https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/\">routers</a>,\n<a href=\"https://www.gabriel.urdhr.fr/samsung-tv-upnp-dns-rebinding/\">smart TVs</a>, etc.</p>\n"}, {"id": "http://www.gabriel.urdhr.fr/2021/03/22/samsung-tv-upnp-dns-rebinding/", "title": "DNS rebinding vulnerability in Samsung SmartTV UPnP", "url": "https://www.gabriel.urdhr.fr/2021/03/22/samsung-tv-upnp-dns-rebinding/", "date_published": "2021-03-22T23:15:29+01:00", "date_modified": "2021-03-22T23:15:29+01:00", "tags": ["computer", "security", "vulnerability", "dns-rebinding", "upnp"], "content_html": "<p>I found\na DNS rebinding vulnerability on the Universal Plug-and-Play (UPnP)\ninterface of the Samsung TV UE40F6320 (v1.0), from 2011.\nThis could be used, for example, to change the channel, to know\nwhich channel is currently used or open the builtin browser to any URI.</p>\n"}, {"id": "http://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/", "title": "DNS rebinding vulnerabilities in Freebox", "url": "https://www.gabriel.urdhr.fr/2020/09/23/dns-rebinding-freebox/", "date_published": "2020-09-23T00:00:00+02:00", "date_modified": "2020-09-23T00:00:00+02:00", "tags": ["computer", "security", "vulnerability", "web", "upnp", "dns-rebinding", "csrf", "device", "privacy"], "content_html": "<p>I found some <a href=\"https://nitter.net/RedTeamPT/status/1318165465429061633\">DNS rebinding</a> vulnerabilities in <a href=\"https://www.free.fr/freebox/\">Freebox</a> devices\n(<a href=\"https://nvd.nist.gov/vuln/detail/CVE-2020-24374\">CVE-2020-24374</a>,\n<a href=\"https://nvd.nist.gov/vuln/detail/CVE-2020-24375\">CVE-2020-24375</a>,\n<a href=\"https://nvd.nist.gov/vuln/detail/CVE-2020-24376\">CVE-2020-24376</a>,\n<a href=\"https://nvd.nist.gov/vuln/detail/CVE-2020-24377\">CVE-2020-24377</a>)\nas well as a Cross Site Request Forgery (CSRF) vulnerability\n(<a href=\"https://nvd.nist.gov/vuln/detail/CVE-2020-24373\">CVE-2020-24373</a>).\nThese vulnerabilities were <a href=\"https://dev.freebox.fr/blog/?p=10222\">fixed in 2020-08-05</a>.</p>\n"}]}