Universal Plug and Play (UPnP) Protocol Detection

This script is Copyright (C) 2009-2016 Tenable Network Security, Inc.


Synopsis :

The remote device supports UPnP.

Description :

The remote device answered to an SSDP M-SEARCH request. This means
that it supports 'Universal Plug and Play' (UPnP). This protocol
provides automatic configuration and device discovery. It is primarily
intended for home networks.

Keep in mind that it could help an intruder discover your network
architecture and speed an attack up.

See also :

http://en.wikipedia.org/wiki/Universal_Plug_and_Play
http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol
http://quimby.gnus.org/internet-drafts/draft-cai-ssdp-v1-03.txt

Solution :

Filter access to this port if desired.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 35711 ()

Bugtraq ID:

CVE ID:

Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial