CVE-2020-25988

Name of the Vulnerable Software and Affected Versions Genexis Platinum 4410 Router version V2.1 (P4410-V2–1.34H)

Description The UPNP Service listening on port 5555 has an action X GetAccess which leaks the credentials of the admin account, provided that the attacker is network adjacent.

Recommendations For Genexis Platinum 4410 Router version V2.1 (P4410-V2–1.34H), as a temporary workaround, consider disabling the X GetAccess action in the UPNP Service until a patch is available. Restrict access to the UPNP Service on port 5555 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.