IDNetters Forums

Technical News & Discussion => Networking & Routers => Topic started by: sat_mad on Aug 27, 2011, 16:16:06

Title: UPnP vulnerability
Post by: sat_mad on Aug 27, 2011, 16:16:06
Hi,

I've just been listening to the popular Security Now podcast, and thought I'd share a story that was mentioned as no-one seems to have posted anything about it.

There's apparently a security issue with certain makes of routers that makes them vulnerable from an external attack if they have uPnP enabled.

If you have a router by Edimax, Linksys, Sitecom or Thomson (SpeedTouch), it might be worth checking in the admin whether you have it enabled or not.  :-\

UPnP-enabled routers allow attacks on LANs (http://www.h-online.com/security/news/item/UPnP-enabled-routers-allow-attacks-on-LANs-1329727.html)
Title: Re: UPnP vulnerability
Post by: Steve on Aug 27, 2011, 16:21:59
Thanks, more joy for the Internet user. Although a savvy user will probably use port forwarding rather than UPnP, the rest will be in blissful ignorance.
Title: Re: UPnP vulnerability
Post by: Rik on Aug 27, 2011, 16:45:48
Sadly true.
Title: Re: UPnP vulnerability
Post by: sat_mad on Aug 28, 2011, 10:03:07
Indeed so.

Despite it being 'the spawn of the devil' I've been using UPnP to stream video wirelessly to an Archos devices we have.

Will have to see if there's another way of doing that!  ::)