UPnP security Issues

Comments

  • Rusli
    Rusli Posts: 1,005 Influencer

    Please do not delete this message.

     

    Please take note of this... this is very important.

     

    CERT Releases UPnP Security Advisory

    added Tuesday, January 29, 2013 at 4:46 pm

    Multiple vulnerabilities have been announced in libupnp, the open source portable SDK for UPnP devices. Libupnp is employed by hundreds of vendors for UPnP-enabled devices. Information is also available in CERT Vulnerability Note VU#922681.
    US-CERT recommends that affected UPnP device vendors and developers obtain and employ libupnp version 1.6.18, which addresses these vulnerabilities.
    US-CERT recommends that users and administrators review CERT Vulnerability Note VU#922681, disable UPnP (if possible), and restrict access to SSDP (1900/udp) and Simple Object Access Protocol (SOAP) services from untrusted networks such as the Internet.

     

    Refer this to hardware vulnerabiity such as Wifi Routers, etc.

     

    http://www.kb.cert.org/vuls/id/922681

     

    Like
  • Rusli
    Rusli Posts: 1,005 Influencer

    Please goto www.grc.com sheildsup and select for uPnP (Universal Plug and Play) security vulnerability issues.

     

    See if your computer or router is having this issues.

     

     

    Like
This discussion has been closed.

Categories