{"uuid": "ca04a07f-6957-4b68-8e29-2eedcdebafba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-12695", "type": "seen", "source": "https://t.me/sysadm_in_up/452", "content": "CallStranger - check against CallStranger (CVE-2020-12695) vulnerability. An attacker can use this vulnerability for:\n \u2022 Bypassing DLP for exfiltrating data\n \u2022 Using millions of Internet-facing UPnP device as source of amplified reflected TCP DDoS / SYN Flood\n \u2022 Scanning internal ports from Internet facing UPnP devices This script only simulates data exfiltration. You can find detailed information on https://www.callstranger.com https://kb.cert.org/vuls/id/339275 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695 Slightly modified version of https://github.com/5kyc0d3r/upnpy used for base UPnP communication\n\nhttps://github.com/yunuscadirci/CallStranger\n\n#github #tool", "creation_timestamp": "2026-07-30T00:03:08.038975Z"}