NAT-PMP Detection (local network)

info Nessus Plugin ID 73125

Synopsis

It is possible to create mappings to the local network.

Description

The remote device has the NAT-PMP protocol enabled. This protocol allows any application on the local subnet to request port mappings from the outside to the inside.

Make sure the use of this service is done in accordance to your security policy. Letting any application create dynamic mappings is usually not recommended.

Solution

Filter incoming traffic to UDP port 5351.

Plugin Details

Severity: Info

ID: 73125

File Name: nat_pmp_local.nasl

Version: Revision: 1.1

Type: remote

Published: 3/20/2014

Updated: 3/21/2014

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: Services/udp/nat-pmp