UPnP vulnerability

[sat_mad]

Hi,

I've just been listening to the popular Security Now podcast, and thought I'd share a story that was mentioned as no-one seems to have posted anything about it.

There's apparently a security issue with certain makes of routers that makes them vulnerable from an external attack if they have uPnP enabled.

If you have a router by Edimax, Linksys, Sitecom or Thomson (SpeedTouch), it might be worth checking in the admin whether you have it enabled or not. 

UPnP-enabled routers allow attacks on LANs

[Steve]

Thanks, more joy for the Internet user. Although a savvy user will probably use port forwarding rather than UPnP, the rest will be in blissful ignorance.

[Rik]

Sadly true.

[sat_mad]

Indeed so.

Despite it being 'the spawn of the devil' I've been using UPnP to stream video wirelessly to an Archos devices we have.

Will have to see if there's another way of doing that!