CVE-2011-4504: Genmei Mori Pseudoics

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

Affected products

• Genmei Mori Pseudoics: version 0.1 only; version 0.2 only; version 0.3 only
• Zyxel P-330w Router

Published 2011-11-22. Last modified 2026-06-16.