Homeland Security: Disable UPnP

[app103]

Unfortunately, ScanNow requires Java. Kind of ironic to make your system vulnerable one way to find out if you are vulnerable another.  

[Tinman57]

(my fiber connection is 40Mb symetrical).

-Stoic Joker (February 01, 2013, 06:58 AM)

  YOU

Spoiler

DICK!   

[tomos]

Unfortunately, ScanNow requires Java. Kind of ironic to make your system vulnerable one way to find out if you are vulnerable another. 

-app103 (February 02, 2013, 07:20 PM)

is the online router scan enough if you're using a stand-alone machine?
http://upnp-check.rapid7.com/

(I have java uninstalled - a check above gets me "Congratulations! Your router did not respond to a UPnP discovery request.")

[f0dder]

is the online router scan enough if you're using a stand-alone machine?
http://upnp-check.rapid7.com/

-tomos (February 03, 2013, 07:26 AM)

Seems like they do a server-side check to your WAN IP - so you'll get to see whether your router is exploitable from the intarwebs (which is what really matters), but you won't get notified about other devices on your LAN.

[Curt]

How to fix the UPnP security holes Universal Plug and Play has always had security holes. Here's how to plug them. http://www.zdnet.com...ity-holes-7000010584

-Tinman57 (January 31, 2013, 08:02 PM)

thanks for that - unfortunately, it sounds like you've got to be pretty much an expert to figure this stuff out

-tomos (February 01, 2013, 08:47 AM)

-exactly my thought as well. So I wrote Agnitum, because:

So what can you do in the meantime? Just keep that firewall up once and for all against UPnP traffic.

-ZDNet

We've survived UPnP until now, maybe all this is not extremely urgent... I hope for an answer no later than Monday.

-Curt (February 01, 2013, 10:18 AM)

I forgot to post the answer:

Your PC is protected by Outpost default rules:
(Settings - Application rules - svchost.exe - Network rules - block UPnP rule (1900 UDP))

Unfortunately,  Outpost  can´t protect routers as it protects only the PC where the product is installed.

-Agnitum