CVE-2020-12695

Name: CVE-2020-12695
Creator: NVD / NIST
Published: 2020-06-08T17:15:09.973+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 15.19%

Last modified Jun 17, 2026

CVE-2020-12695 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.. EPSS estimates a 15.19% chance of exploitation in the next 30 days.

Description

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H

EPSS Probability

15.19%

96.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-276

Affected Software

Vendor	Product	Versions
Ui	Unifi Controller	All versions
W1.Fi	Hostapd	< 2.0.0
Asus	Rt-N11	All versions
Broadcom	Adsl	All versions
Canon	Selphy Cp1200	All versions
Cisco	Wap131	All versions
Cisco	Wap150	All versions
Cisco	Wap351	All versions
Dlink	Dvg-N5412sp	All versions
Dell	B1165nfw	All versions
Epson	Ep-101	All versions
Epson	Ew-M970a3t	All versions
Epson	M571t	All versions
Epson	Xp-100	All versions
Epson	Xp-2101	All versions
Epson	Xp-2105	All versions
Epson	Xp-241	All versions
Epson	Xp-320	All versions
Epson	Xp-330	All versions
Epson	Xp-340	All versions
Epson	Xp-4100	All versions
Epson	Xp-4105	All versions
Epson	Xp-440	All versions
Epson	Xp-620	All versions
Epson	Xp-630	All versions
Epson	Xp-702	All versions
Epson	Xp-8500	All versions
Epson	Xp-8600	All versions
Epson	Xp-960	All versions
Epson	Xp-970	All versions
Hp	5020 Z4a69a	All versions
Hp	5030 M2u92b	All versions
Hp	5030 Z4a70a	All versions
Hp	5034 Z4a74a	All versions
Hp	5660 F8b04a	All versions
Hp	Deskjet Ink Advantage 3456 A9t84c	All versions
Hp	Deskjet Ink Advantage 3545 A9t81a	All versions
Hp	Deskjet Ink Advantage 3545 A9t81c	All versions
Hp	Deskjet Ink Advantage 3545 A9t83b	All versions
Hp	Deskjet Ink Advantage 3546 A9t82a	All versions
Hp	Deskjet Ink Advantage 3548 A9t81b	All versions
Hp	Deskjet Ink Advantage 4515	All versions
Hp	Deskjet Ink Advantage 4518	All versions
Hp	Deskjet Ink Advantage 4535 F0v64a	All versions
Hp	Deskjet Ink Advantage 4535 F0v64b	All versions
Hp	Deskjet Ink Advantage 4535 F0v64c	All versions
Hp	Deskjet Ink Advantage 4536 F0v65a	All versions
Hp	Deskjet Ink Advantage 4538 F0v66b	All versions
Hp	Deskjet Ink Advantage 4675 F1h97a	All versions
Hp	Deskjet Ink Advantage 4675 F1h97b	All versions

Showing 50 of 219 affected configurations. See NVD for the full list.

References

http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2020/06/08/2Mailing List, Third Party Advisory
https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/Third Party Advisory
https://github.com/corelight/callstranger-detectorThird Party Advisory
https://github.com/yunuscadirci/CallStrangerThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00011.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00013.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00017.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/Mailing List, Third Party Advisory
https://usn.ubuntu.com/4494-1/Third Party Advisory
https://www.callstranger.comBroken Link
https://www.debian.org/security/2020/dsa-4806Third Party Advisory
https://www.debian.org/security/2021/dsa-4898Third Party Advisory
https://www.kb.cert.org/vuls/id/339275Third Party Advisory, US Government Resource
https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-ofThird Party Advisory
http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2020/06/08/2Mailing List, Third Party Advisory
https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/Third Party Advisory
https://github.com/corelight/callstranger-detectorThird Party Advisory
https://github.com/yunuscadirci/CallStrangerThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00011.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00013.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00017.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/Mailing List, Third Party Advisory
https://usn.ubuntu.com/4494-1/Third Party Advisory
https://www.callstranger.comBroken Link
https://www.debian.org/security/2020/dsa-4806Third Party Advisory
https://www.debian.org/security/2021/dsa-4898Third Party Advisory
https://www.kb.cert.org/vuls/id/339275Third Party Advisory, US Government Resource
https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-ofThird Party Advisory

Timeline

Published: Jun 8, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-12695?

How severe is CVE-2020-12695?

CVE-2020-12695 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 15.19% probability of exploitation in the next 30 days.

How do I fix CVE-2020-12695?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-12695?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST