CVE:CVE-2011-4504
CNNVD:CNNVD-201111-366
ZyXEL P-330W是一款无线宽带路由器。
ZyXEL P-330W的Pseudo ICS UPnP软件的UPnP IGD安装启用中存在漏洞。远程攻击者可通过发送SOAP请求的UPnP AddPortMapping操作到WAN接口建立任意端口映射，该漏洞与 "external forwarding" 漏洞有关。
solution:Upgrade genmei_mori pseudoics to a higher version than 0.1,0.2,0.3,and avoid the version 0.1,0.2,0.3; Upgrade zyxel p-330w_router to a higher version than *