CVE-2011-4505: Alcatel Speedtouch 5x6 Router

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

Affected products

• Alcatel Speedtouch 5x6 Router
• Alcatel Speedtouch 5x6 Router Firmware: up to and including 6.2

Published 2011-11-22. Last modified 2026-06-16.