CVE:CVE-2011-4505
CNNVD:CNNVD-201111-367
Speedtouch是家用的无线Internet路由器。
SpeedTouch 5x6 devices with firmware 6.2.29之前版本的UPnP IGD安装启用中存在漏洞。远程攻击者可通过发送SOAP请求的UPnP AddPortMapping操作到WAN接口建立任意端口映射，该漏洞与 "external forwarding" 漏洞有关。
solution:Upgrade alcatel speedtouch_5x6_router_firmware to a higher version than 6.2,and avoid the version (,6.2]; Upgrade alcatel speedtouch_5x6_router to a higher version than *