CVE-2013-0230
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the...
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
- Record
CVE-2013-0230- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
- Record
CVE-2013-0230- Updated
- 2026-11-02
EUVDEUVD-2013-0264 No score
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
- Record
EUVD-2013-0264- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v9m6-5wqp-m9mc No score
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the...
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
- Record
GHSA-v9m6-5wqp-m9mc- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MiniUPnPd 1.0 - Remote Stack Buffer Overflow Remote Code Execution (Metasploit) | 2013-06-05 |
| Exploit-DB | MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series | 2015-04-27 |
| Exploit-DB | INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service | 2015-07-07 |
| Metasploit | UPnP SSDP M-SEARCH Information Discovery | |
| Metasploit | MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution | 2013-03-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0230 is a high vulnerability (CVSS 10.0) in Miniupnp Project Miniupnpd, published January 31, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 69.2%, the 99th percentile. No source names a fixed version.
References
community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
securityfocus.com/bid/57608
exploit-db.com/exploits/36839
nvd.nist.gov/vuln/detail/CVE-2013-0230
github.com/advisories/GHSA-v9m6-5wqp-m9mc