Some Older Linksys Routers allow UPnP Configurable from the net

[+Warwagon MVC]

  On 29/08/2011 at 20:49, sc302 said:

very true and that is why you see many routers that have no wireless security and upnp disabled because they kept the defaults.

point being that although it is a flaw, the majority isn't succumed to this flaw being that they don't even know how to get in to it to check it's ip or if it is connected to the internet. the ones who this flaw is subject to are the people who know enough to enable it for whatever reason and should be keeping up on their security and updates.

After researching a little bit on the net. It appears as far back as the WRT54G has UPnP on by default. Now I'm not sure which version of the router finally got UPnP in the firmware or if the firmware has always had it. But which ever one does have it, has it turned on by default.

  Quote

Back to the short story, this ultimately determined that the new camera had a capacity UPnP and UPnP by default. The WRT54G also has UPnP enabled by default.

[xWhiplash]

Doesnt media sharing between console and computer require this to be on, or some other useful sharing? I remember a while back I had this disabled, but I wanted to share with my Xbox 360 (around the first few years it was released) and it had a fit since it was disabled.

[sc302 Veteran]

  On 30/08/2011 at 00:22, warwagon said:

After researching a little bit on the net. It appears as far back as the WRT54G has UPnP on by default. Now I'm not sure which version of the router finally got UPnP in the firmware or if the firmware has always had it. But which ever one does have it, has it turned on by default.

Quite interesting...I have a wrt54g and I can assure u upnp is not on by default. I have to double check to see if it is supported, pretty sure it is not.

[+Warwagon MVC]

  On 30/08/2011 at 00:35, xWhiplash said:

Doesn't media sharing between console and computer require this to be on, or some other useful sharing? I remember a while back I had this disabled, but I wanted to share with my Xbox 360 (around the first few years it was released) and it had a fit since it was disabled.

I don't think it should matter, ports on the router aren't blocked from internal communication just external.

[+Warwagon MVC]

  On 30/08/2011 at 00:40, sc302 said:

Quite interesting...I have a wrt54g and I can assure u upnp is not on by default. I have to double check to see if it is supported, pretty sure it is not.

Yep, go hard reset that bitch and come back with the results :laugh:

[sc302 Veteran]

nope not supported in my router (possibly current firmware) but there have been several occasions that I have had to enable upnp on different routers. not linksys.

[HawkMan]

  On 29/08/2011 at 20:06, warwagon said:

Linksys will more than likely fix this in a firmware update. But now many "Average user" upgrade the firmware of their routers?

How many "Average user" also install custom firmware?

So my guess would be we have millions of average users with linksys routers out there that are non the wiser to this issue.

Bringing us right back to

How many "average users" will share folders and

how many "average" users won't have a firewall activated on their computer.

none. For those average users there's nothing this issue can do anyway, and for those with windows 7 that automatically adds some shares if they go through the home group wizard when they connect to the network, Well that uses home group credentials and aren't accessible anyway.

[+Warwagon MVC]

Windows 7 Home Network (the one most people will use) firewall description

Home Network

  Quote

Choose Home network for home networks or when you know and trust the people and devices on the network. Computers on a home network can belong to a homegroup. Network discovery is turned on for home networks, which allows you to see other computers and devices on the network and allows other network users to see your computer. For more information, see What is network discovery?

[HawkMan]

So? The only difference between home and public is tha public blocks shares. But as I also pointed out, your average users won't have any shares.