75 replies to this topic

[+warwagon]

As of recently it has been discovered that most routers expose UPnP to the outside world, which is not good at all. This allows attackers "from the internet" to open ports in your routers.

https://community.ra...nplug-dont-play

It is recommended you DISABLE UPnP in your router. Below is a test to see if your router is vulnerable. Steve Gibson, the creator of the very popular "Shields-up" which scans your IP for open ports in your router has recently added a test for the upnp vulnerability. Simply click the link then click the "proceed" button. You will then see a button for the UPnP test. Good luck!


The Test

https://www.grc.com/x/ne.dll?bh0bkyd2

[MiniMeSorinel]

Quote

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

Guess that's a good thing...

[tsupersonic]

MiniMeSorinel, on 03 February 2013 - 18:15, said:

Guess that's a good thing...

Got the same results

[+warwagon]

Yes.. Those are good results

[Detection]

I have uPnP enabled but still fine (Expected as much with DD-WRT though)

[LUTZIFER]

Been a long time since I've last been to that site. It's been around for many many years.

I tried that test...

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

[pes2013]

warwagon, on 03 February 2013 - 18:08, said:

It is recommended you DISABLE UPnP in your router.

No; It is recommened that you get a good router. I have UPnP on my router enabled and

Quote

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

So either I have a good router or the test sucks.

[nyolc8]

I have UPnP enabled all the time and the result is:

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

[+warwagon]

Detection, on 03 February 2013 - 18:20, said:

I have uPnP enabled but still fine (Expected as much with DD-WRT though)

Correct this is a route test, not a computer test.

[Livin in a box]

THE EQUIPMENT AT THE TARGET IP ADDRESS
ACTIVELY REJECTED OUR UPnP PROBES!

Yay!

[ajua]

It's only recommended to disable UPnP on your routers if they don't pass that test, which means they are exposing you to the outer world.

Just passed the test on three touters with UPnP enabled. Two of them are running DD-WRT.

[Pupik]

upnp enabled on wr841nd.
"THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!"

[+warwagon]

I disable it anyway. The fact that UPnP, by design, lets any application communicate with the router and open ports should make any security conscious user uneasy.

[TPreston]

THE EQUIPMENT AT THE TARGET IP ADDRESS
ACTIVELY REJECTED OUR UPnP PROBES!

Cisco IOS FTW

[trek]

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

Why would you disable uPnP anyways? It allows internal hosts to dynamically open ports like XBL or PSN for gaming and voice. Without it you'd have to manually open every single port those services and similar ones use. Just keep your internal hosts clean.