CVE-2006-2561
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct...
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
Exploit likelihood
What each source reports
NVD Score used
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
- Record
CVE-2006-2561- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
- Record
CVE-2006-2561- Updated
- 2026-11-02
EUVDEUVD-2006-2561 No score
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
- Record
EUVD-2006-2561- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4j9x-p2vg-432h No score
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct...
Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
- Record
GHSA-4j9x-p2vg-432h- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2561 is a high vulnerability (CVSS 7.5) in Edimax Br 6104k, published May 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
References
secunia.com/advisories/20169
securityview.org/how-does-the-upnp-flaw-works.html
vupen.com/english/advisories/2006/1911
exchange.xforce.ibmcloud.com/vulnerabilities/26709
nvd.nist.gov/vuln/detail/CVE-2006-2561
github.com/advisories/GHSA-4j9x-p2vg-432h