Forum Home
PC World Chat
 
Thread ID: 129058 2013-01-30 22:18:00 UPnP vulnerable KarameaDave (15222) PC World Chat
Post ID Timestamp Content User
1325764 2013-01-31 10:16:00 Turned it on, in my Gargoyle router. Came up fine. Turned it back off again though.

Same for my Onkyo receiver, also not exploitable. Thanks for the link to the app Zara! :)
Chilling_Silence (9)
1325765 2013-01-31 10:25:00 Because I have so absolutely no idea what UPnP is I will shuffle it down my things to worry about list.
Universal Pug and Play (en.wikipedia.org)
mikebartnz (21)
1325766 2013-01-31 20:10:00 I like it, would not want to turn it off. In the old days before uPnP I had all kinds of problems setting up port forwarding for various games and programs only to have to do it again when the next one came out. Since uPnP became common I've never had to do anything to get software working through the router and can use DHCP without the need for static IPs. It makes life for the average user so much easier. dugimodo (138)
1325767 2013-01-31 20:50:00 My Cable modem is connected to the Router which has UPnP, ran the test you can do, it discovered the Router but was not exploitable according to the result.

I ran the test too (Telstra cable) and got the same result - just picked up 192.168.0.1 or something like that. So the test checks vulnerability by looking at my network from the outside? It doesn't look at all the devices on my network (from the perspective of my computer) to check what sort of firmware they run? I was wondering why no other IP addresses were detected

(and thank you Zara for the link to the lists. I note that WDTV Live HD media player is not on any of them)
BBCmicro (15761)
1325768 2013-01-31 21:02:00 nothing exploitable for me GameJunkie (72)
1325769 2013-01-31 21:33:00 Since uPnP became common I've never had to do anything to get software working through the router and can use DHCP without the need for static IPs. It makes life for the average user so much easier.

What games?

I think you'll find that a lot of new games simply "Host" them in a way which doesn't require port-forwarding these days...
Chilling_Silence (9)
1325770 2013-01-31 22:58:00 I thought I would check my router (NetComm NB6Plus4Wn) for the current setting. Logged in successfully, but on the uPnP setting I get "400 Bad Request. No request found."

Does that mean that in the past I have turned this off so this is the safe(st) setting?
John H (8)
1325771 2013-01-31 23:45:00 Download the scanner linked in Zaras PCW post and test :) Chilling_Silence (9)
1325772 2013-02-01 00:03:00 Thanks Chill. I did that, and there are no vulnerabilities on this PC. I will have to check the laptop and my wife's computer, just in case... John H (8)
1325773 2013-02-01 01:44:00 It scans your whole network? I had to enter the start / finish IP addresses in my network range and it scanned the lot of them, no need to run it on multiple PCs :) Chilling_Silence (9)
1 2 3