Universal Plug and Play (UPnP) Protocol Detection

This script is Copyright (C) 2009-2015 Tenable Network Security, Inc.


Synopsis :

The remote device supports UPnP.

Description :

The remote device answered to an SSDP M-SEARCH request. This means
that it supports 'Universal Plug and Play' (UPnP). This protocol
provides automatic configuration and device discovery. It is primarily
intended for home networks.

Keep in mind that it could help an intruder discover your network
architecture and speed an attack up.

See also :

http://en.wikipedia.org/wiki/Universal_Plug_and_Play
http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol
http://quimby.gnus.org/internet-drafts/draft-cai-ssdp-v1-03.txt

Solution :

Filter access to this port if desired.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 35711 ()

Bugtraq ID:

CVE ID: