Universal Plug and Play (UPnP) is a set of networking protocols that permits networked devices, such as personal computers, printers, Internet gateways, Wi-Fi access points and mobile devices to seamlessly discover each other’s presence on the network and establish functional network services for data sharing, communications, and entertainment. UPnP is intended primarily for residential networks without enterprise class devices.
While companies like Rapid7 work to battle the cyber criminals the bad guys always come up with ways to exploit and attack law abiding citizens in today’s technology dependent world. UPnP weaknesses provides the latest target for hackers and is a major concern that affects anyone using a UPnP enabled device.
The Department of Homeland security, in conjunction with Rapid7, has issued another warning (Vulnerability Note VU#922681) that everyone using the Internet should be aware of.
What does all of this mean? Simply put, tens of millions of network-enabled devices including routers, printers, media servers, IP cameras, smart TVs and more can be attacked over the Internet because of dangerous flaws in their implementation of the UPnP.
Protect your yourself and test your router. Rapid7 offers free scanning tools that can be downloaded and used to test your router. The results are presented in easy to understand format. For more information click here you will be taken to an article written by Michael Horowitz who is a journalist with ComputerWorld magazine which also includes links to Rapid7 scanning tools.
Until next time Mahalo from your LavaNet support team…….