UPnP Security Exploits

Post a reply

Smilies
:D :) :( :o :-? 8) :lol: :x :P :oops: :cry: :evil: :roll: :wink:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: UPnP Security Exploits

Re: UPnP Security Exploits

by Lowlander » Wed Feb 06, 2013 11:11 am

I wonder if UPnP (the DLNA kind allowing media sharing) is the same as UPnP (auto-port configuration in router kind). I doubt it, in other words disabling UPnP (which is the topic of the article) in the router won't affect UPnP Media Sharing.

Re: UPnP Security Exploits

by mcow » Wed Feb 06, 2013 12:18 am

One thing about this that I have not seen stressed enough: UPnP is not dangerous within your local network. I guess there are some routers that open the UPnP ports to the internet by default, but even if you have that, it doesn't mean you have to shut UPnP down; but you really should close those ports.

That does mean: if you're out of the house, you won't be able to stream your library to your phone. UPnP wasn't intended for the public internet, it's designed as a LAN service.

You can check your exposure using the ShieldsUp tool at GRC Labs.

UPnP Security Exploits

by aardvaark » Tue Feb 05, 2013 6:59 pm

This just came out today and I thought I'd pass it along as a public service to the MM community...

http://nakedsecurity.sophos.com/2013/02 ... 2Bsecurity

Top