Forum Home
PC World Chat
 
Thread ID: 129058 2013-01-30 22:18:00 UPnP vulnerable KarameaDave (15222) PC World Chat
Post ID Timestamp Content User
1325754 2013-01-30 22:18:00 Bye bye media server :(

www.h-online.com
KarameaDave (15222)
1325755 2013-01-30 22:36:00 Just as a note, we have an article up about that too - with some tips about how to tell if your router is affected, and what to do.

pcworld.co.nz

general advice: log into your router's web interface and turn UPNP off :(
Zara Baxter (16260)
1325756 2013-01-30 23:33:00 So, you have to weigh up the likelihood of someone actually exploiting this flaw on your home network versus the practicality/convenience of being able to auto-configure devices on your home network....

Would making sure the router firewall was on make a difference?
johcar (6283)
1325757 2013-01-30 23:35:00 Not the first time that there's been issues around the mass implementation of UPnP is it? Chilling_Silence (9)
1325758 2013-01-30 23:36:00 So, you have to weigh up the likelihood of someone actually exploiting this flaw on your home network versus the practicality/convenience of being able to auto-configure devices on your home network....

Would making sure the router firewall was on make a difference?

No - this essentially lets things bypass the firewall. Having a router attached to your modem, where the router has UPNP but the modem doesn't, should be okay, however, because the router is then not exposed directly to the internet.
Zara Baxter (16260)
1325759 2013-01-30 23:37:00 Not the first time that there's been issues around the mass implementation of UPnP is it?

no, but remembering the days before there was UPNP ... <wince> It's such a useful thing for home users. :-/
Zara Baxter (16260)
1325760 2013-01-30 23:47:00 Not sure I've ever had a need for it to be turned on in my router? Chilling_Silence (9)
1325761 2013-01-31 07:59:00 Not the first time that there's been issues around the mass implementation of UPnP is it?
It used to be one of the first services I killed in a Windows installation.
mikebartnz (21)
1325762 2013-01-31 08:33:00 No - this essentially lets things bypass the firewall. Having a router attached to your modem, where the router has UPNP but the modem doesn't, should be okay, however, because the router is then not exposed directly to the internet. My Cable modem is connected to the Router which has UPnP, ran the test you can do, it discovered the Router but was not exploitable according to the result. wainuitech (129)
1325763 2013-01-31 10:01:00 Because I have so absolutely no idea what UPnP is I will shuffle it down my things to worry about list. prefect (6291)
1 2 3