Internet Gateway Device WAN Interface UPnP Access

medium Nessus Plugin ID 35710

Synopsis

The remote IGD router can be configured on its WAN interface.

Description

Nessus was able to add 'port mappings' to the remote IGD router by sending a SOAP request to its external interface.

Solution

Restrict external access to this device.

Plugin Details

Severity: Medium

ID: 35710

File Name: upnp_igd_wan_reachable.nasl

Version: Revision: 1.8

Type: remote

Family: Misc.

Published: 2/19/2009

Updated: 10/13/2016

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: upnp/igd_add_port_mapping