CVE-2018-11946

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue concerns the UPnP daemon in Android releases, which should not be running by default as it allows port forwarding without authentication.

Recommendations For Android for MSM, consider disabling the UPnP daemon to prevent unauthorized port forwarding. For Firefox OS for MSM, disable the UPnP daemon as a mitigation measure. For QRD Android, restrict access to the UPnP daemon until a proper fix is applied.