Is CVE-2011-4499 being actively exploited?

CVE-2011-4499 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2011-4499?

CVE-2011-4499 has a CVSS 2.0 base score of 7.5 (HIGH).

CVE-2011-4499

HIGH · CVSS 7.5EPSS 1.3%EU EUVD

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

Key facts

CVSS score: 7.5 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-16
EPSS score: 1.3% (71th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2011-4425)
Published: November 22, 2011
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2011-4425 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.

View on the EU Vulnerability Database

Affected products

cisco / linksys wrt54g router firmware
cisco / linksys wrt54g router firmware
cisco / linksys wrt54g router firmware
cisco / linksys wrt54gs router firmware
cisco / linksys wrt54gs router firmware
linksys / wrt54g
linksys / wrt54g
linksys / wrt54gs
linksys / wrt54gs
linksys / wrt54gs
linksys / wrt54gs

References

http://www.kb.cert.org/vuls/id/357851(US Government Resource)
http://www.upnp-hacks.org/devices.html

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain