What’s Vulnerable › Vulnerabilities

CVE-2018-15506

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-19 · updated 2026-06-17
• Weakness: CWE-611

Description

In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running BubbleUPnP, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack the cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains.

Affected products

• Bubblesoftapps Bubbleupnp: 0.9-update_30

References

• https://www.bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html
• https://www.bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html

Get alerted when CVE-2018-15506 or the next vulnerability affects your stack