Unrated severityNVD Advisory· Published May 24, 2006· Updated Jun 16, 2026

CVE-2006-2560

Description

Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sitecom/Wl 1532 versions
cpe:2.3:h:sitecom:wl-153:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:sitecom:wl-153:-:*:*:*:*:*:*:*
- (no CPE)range: <1.38
Sitecom/Wl 153 Router Firmware2 versions
cpe:2.3:o:sitecom:wl-153_router_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sitecom:wl-153_router_firmware:*:*:*:*:*:*:*:*range: <=1.34
- cpe:2.3:o:sitecom:wl-153_router_firmware:1.31:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

secunia.com/advisories/20183nvdVendor Advisory
www.securityview.org/dutch-student-finds-a-bug-in-upnp.htmlnvdURL Repurposed
www.securityview.org/how-does-the-upnp-flaw-works.htmlnvdURL Repurposed
www.vupen.com/english/advisories/2006/1912nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000