CVE-2012-5962

portable SDK for UPnP Devices 1.3.1 - Remote Code Execution via SSDP DeviceType Field

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-5962.

AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the unique_service_name() function of libupnp's SSDP processor, allowing remote code execution. It targets specific devices like Supermicro IPMI and stages the payload over a secondary TCP connection due to size limitations.

Description

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.

Exploits (1)

exploitdb WORKING POC
rubyremoteunix
https://www.exploit-db.com/exploits/24455

This Metasploit module exploits a buffer overflow in the unique_service_name() function of libupnp's SSDP processor, allowing remote code execution. It targets specific devices like Supermicro IPMI and stages the payload over a secondary TCP connection due to size limitations.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Portable UPnP SDK (libupnp) 1.3.1
No auth needed
Prerequisites: Network access to the target device on port 1900 (SSDP) · Target device must be running a vulnerable version of libupnp
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (15)

Core 15
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/57602
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:098
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2615
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2614
Product x_refsource_confirm
http://pupnp.sourceforge.net/ChangeLog
Patch, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/922681
Third Party Advisory x_refsource_confirm
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037

Scores

EPSS 0.7013
EPSS Percentile 98.7%

Details

CWE
CWE-119
Status published
Products (1)
portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.3.1
Published Jan 31, 2013
Tracked Since Feb 18, 2026