Is your router’s UPNP still enabled?

We’ve known for several years that almost all internet routers which support universal plug and play have some nasty security issues, including the one you probably use at home.

A big problem for home users is that the router manufacturers almost always configure UPNP to be enabled when it ships out of their factory. While I can understand the really old routers shipping in this insecure state, I was very surprised that Virgin would allow their Globersurfer II wireless router to be still configured this badly, as recently as only a few months ago.

But irrespective of who provides your internet service or which make and model router you use, you need to make sure that UPNP is disabled. Otherwise, you’re a sitting duck.

Oh, and if you’re not sure just how UPNP was supposed to benefit mankind, read this article.

Posted in Security by Ivan