Universal Plug and Play (UPnP) Protocol Detection

This script is Copyright (C) 2009-2017 Tenable Network Security, Inc.


Synopsis :

The remote device supports UPnP.

Description :

The remote device answered an SSDP M-SEARCH request. Therefore, it
supports 'Universal Plug and Play' (UPnP). This protocol provides
automatic configuration and device discovery. It is primarily intended
for home networks. An attacker could potentially leverage this to
discover your network architecture.

See also :

https://en.wikipedia.org/wiki/Universal_Plug_and_Play
https://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol
http://quimby.gnus.org/internet-drafts/draft-cai-ssdp-v1-03.txt

Solution :

Filter access to this port if desired.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 35711 ()

Bugtraq ID:

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now