CERT Releases UPnP Security Advisory(us-cert.gov)
us-cert.gov
CERT Releases UPnP Security Advisory
http://www.us-cert.gov/current/#cert_releases_upnp_security_advisory
0 comments
—
http://www.us-cert.gov/current/#cert_releases_upnp_security_advisory
—
US-CERT recommends that affected UPnP device vendors and developers obtain and employ libupnp version 1.6.18, which addresses these vulnerabilities.
US-CERT recommends that users and administrators review CERT Vulnerability Note VU#922681, disable UPnP (if possible), and restrict access to SSDP (1900/udp) and Simple Object Access Protocol (SOAP) services from untrusted networks such as the Internet.