Universal Plug and Play (UPnP) Protocol Detection

info Nessus Plugin ID 35711

Synopsis

The remote device supports UPnP.

Description

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' (UPnP). This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network architecture.

Solution

Filter access to this port if desired.

See Also

https://en.wikipedia.org/wiki/Universal_Plug_and_Play

https://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol

http://quimby.gnus.org/internet-drafts/draft-cai-ssdp-v1-03.txt

Plugin Details

Severity: Info

ID: 35711

File Name: upnp_search.nasl

Version: 1.14

Type: remote

Published: 2/19/2009

Updated: 9/12/2018

Supported Sensors: Nessus