Test ID:	1.3.6.1.4.1.25623.1.1.2.2022.2613
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for gupnp (EulerOS-SA-2022-2613)
Summary:	The remote host is missing an update for the Huawei EulerOS 'gupnp' package(s) announced via the EulerOS-SA-2022-2613 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'gupnp' package(s) announced via the EulerOS-SA-2022-2613 advisory. Vulnerability Insight: An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.(CVE-2021-33516) Affected Software/OS: 'gupnp' package(s) on Huawei EulerOS V2.0SP3. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-33516 https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536 https://gitlab.gnome.org/GNOME/gupnp/-/issues/24
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.