Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[sheddyian]

I've just been reading a short post http://nakedsecurity.sophos.com/2013/02/05/upnp-flaws-turn-millions-of-firewalls-into-doorstops/ on the Sophos security website about potential security issues with Universal Plug and Play (uPNP) devices on your network.

It seems that many (possibly older) devices are vulnerable to attack.  This includes modems/routers.

It's worth following and reading the links in that article, but in summary there are two checks provided :

To see if the external facing side of your modem/router is open to uPNP attack, visit this web site and run the online check http://upnp-check.rapid7.com/

To scan all devices on your internal network, you can download a (Windows only) program from here : http://www.rapid7.com/resources/free-security-software-downloads/universal-plug-and-play-jan-2013.jsp

that you can run on your computer, and give it an address range to scan.  (This would typically be 192.168.1.1 to 192.168.1.254 but your setup may vary).  << Needs Java to be installed on your computer!

It will detect devices, see which ones it recognises, and tell you if any of them are vulnerable.

I'm pleased to say all my kit passed  8)

Ian

[roseway]

Thanks for the warning. My kit passed too (and I do have uPnP enabled on the HG622 modem/router).

[kitz]

I seem to recall many years ago (2003ish?) that it wasnt recommended to have uPNP enabled and you port forwarded for every app you wanted to use... which was a PITA and even then some progs were difficult to use certainly those that required direct file transfers.

Im pretty sure that M$ released some uPNP patches in about 2005/2006 which plugged most of uPNP vulnerabilities, and to TBH since then (until now) I cant recall ever seeing any concerns over uPNP.   

Ive just run both tests on my TG582n. 

Test 1 returned "Congratulations! Your router did not respond to a UPnP discovery request."
The Windows test identified uPNP on my router but returned 0 exploitable.

[sevenlayermuddle]

I got the same 'congratulations...' and the same '0 exploitable'.  It didn't warn me about identifying uPNP, but I have it disabled, so I suppose that's OK

I don't have any specific concerns over uPNP (though there have been in the past), it's just that I strive to have no firewall ports at all open on thevrouter.  To fulfill that goal, I need to prevent any software apps fom opening firewall ports without my knowledge, even the reasons for doing so are valid.