Descent BB

 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

   Descent BB Forum Index > Tech Forum > UPnP: Unplug, Don't Play Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
Grendel
Ninja Admin




PostPosted: Wed Jan 30, 2013 12:34 am View user's profile Reply with quote Send private message

Whitepaper: Security Flaws in Universal Plug and Play: Unplug, Don't Play.

Quote:
This whitepaper details research conducted by Rapid7, which reveals that around 40-50 million network-enabled devices are at risk due to vulnerabilities found in the Universal Plug and Play (UPnP) protocol. UPnP enables devices such as routers, printers, network-attached storage (NAS), media players and smart TVs to communicate with each other. The paper investigates how three groups of security flaws relating to the UPnP protocol are exposing millions of users to attacks that could lead to a remote compromise of the vulnerable device.

We strongly recommend people to check whether they may be vulnerable, and if so, disable the UPnP protocol in any affected devices. Further details on mitigation strategies are included in the executive summary section at the front of the attached whitepaper. The document also includes details on the methodology of the research, breakdown and analysis of the findings and insights into the implications.


See also Rapid7 blog and US-CERT.

_________________
Borders? I have never seen one. But I have heard they exist in the minds of some people. -- Thor Heyerdahl
Durch einen Stich bereits geschafft, erschlafft und ohne Saft und Kraft! -- Donald, examining a Deflator Dextrospirillus
Foil
2*pi*r




PostPosted: Wed Jan 30, 2013 9:19 am View user's profile Reply with quote Send private message

Wow. I've had my router's UPnP turned off for a while now (didn't play well with WHS v1). Good to know, thanks!

_________________
"You seem a decent fellow. I hate to kill you."
"You seem a decent fellow. I hate to die."
View previous topic :: View next topic  
All times are GMT - 6 Hours
Post new topic   Reply to topic
Jump to:  
   Descent BB Forum Index > Tech Forum > UPnP: Unplug, Don't Play

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Image hosting by postimage.org Powered by phpBB © 2001, 2005 phpBB Group