Threats tagged 'ghsa-g78m-w5rq-g992'

A newline injection vulnerability exists in the UPnP service of Archer BE805 version 1. An adjacent attacker on the local network can supply newline characters in a UPnP port-mapping description due to improper input sanitization. This can result in injection of unintended content into UPnP port-mapping data, allowing modification of runtime UPnP port-mapping information and creation of spoofed entries. The vulnerability affects the integrity of UPnP mapping data but does not allow code execution or privilege escalation.