Universal Plug and Play (UPnP) Protocol Detection

This script is Copyright (C) 2009-2013 Tenable Network Security, Inc.


Synopsis :

The remote device supports UPnP.

Description :

The remote device answered to an SSDP M-SEARCH request. This means that
it supports 'Universal Plug and Play', aka UPnP. This protocol provides
automatic configuration and device discovery. It is primiraly intended
for home networks.

Keep in mind that it could help an intruder discover your network
architecture and speed an attack up.

See also :

http://en.wikipedia.org/wiki/Universal_Plug_and_Play
http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol
http://quimby.gnus.org/internet-drafts/draft-cai-ssdp-v1-03.txt

Solution :

Filter access to this port if desired.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 35711 ()

Bugtraq ID:

CVE ID: