CVE-2013-0230: Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service...

Security readout for executives and security teams

CVE-2013-0230 is a remote code execution risk in MiniUPnPd 1.0. A malformed, overly long SOAPAction method can overflow stack memory in the HTTP service. If exposed to untrusted networks, a vulnerable service could let an attacker run code on the affected host or device. Exposure is most likely on systems or devices running MiniUPnPd 1.0 with the UPnP HTTP service reachable by untrusted clients. The bundle does not identify downstream vendors or specific device models, so product-level exposure requires local inventory and vendor mapping. Prioritize discovery first, then urgent remediation for exposed instances. The business risk is highest where UPnP is reachable from untrusted networks because the stated impact is arbitrary code execution. Evidence is incomplete for affected vendors and active exploitation. Mitigation focus: Identify assets running MiniUPnPd 1.0 or bundled MiniUPnPd components.; Restrict UPnP HTTP service access to trusted networks only.; Disable UPnP where it is not operationally required..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.