5.28 Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'

Information

Allows UPnP devices to be hosted on this computer.

The recommended state for this setting is: Disabled.

Rationale:

Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and attachment to network devices. Notes that UPnP is different than regular Plug n Play (PnP). Workstations should not be advertising their services (or automatically discovering and connecting to networked services) in a security-conscious enterprise managed environment.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\UPnP Device Host

Impact:

Any hosted UPnP devices will stop functioning and no additional hosted devices can be added.

Default Value:

Manual

See Also

https://workbench.cisecurity.org/files/2700

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: 1a5b648fad338eca2a05dd6e6e4a58aa35a5ead263c6320458bd2ed95bcc5510