{"id":640700,"date":"2013-01-31T05:06:29","date_gmt":"2013-01-31T10:06:29","guid":{"rendered":"http:\/\/betanews.com\/?p=127383"},"modified":"2013-01-31T05:06:29","modified_gmt":"2013-01-31T10:06:29","slug":"scannow-for-universal-plug-and-play-warns-if-your-network-is-vulnerable-to-the-latest-security-flaws","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/640700","title":{"rendered":"ScanNow for Universal Plug and Play warns if your network is vulnerable to the latest security flaws"},"content":{"rendered":"

\"\"Rapid7 — the security company behind vulnerability scanner Metasploit — has released details on three security flaws affecting some Universal Plug and Play implementations. And their research indicates that 40 to 50 million IPs are vulnerable to at least one of those vulnerabilities, which the company says<\/a> is exposing users “to remote attacks that could result in the theft of sensitive information”.<\/p>\n

Could you be vulnerable? Fortunately Rapid7 has provided a free Windows-based tool, ScanNow for Universal Plug and Play<\/a>, to help you find out.<\/p>\n

The program is portable, as you\u2019d expect — no need for installation here. And it\u2019s relatively easy to use. After registering your use of the program by providing your email address, all you have to do is provide the IP range you\u2019d like to scan (ScanNow detects and provides sensible defaults) and then wait as it checks your network.<\/p>\n

\"\"Once the process has finished you\u2019ll see the ScanNow report. This starts by detailing the vulnerabilities it\u2019s been looking for, so you\u2019ll need to scroll down to the more interesting “Overview of Results”, which will reveal the number of network devices detected and how many of these were flagged as “Exploitable”.<\/p>\n

And the “Result Details” section then lists which IP addresses have a detected device, and which of these appears to be vulnerable to the new security holes.<\/p>\n

If it turns out you have an exploitable device then don\u2019t panic just yet, it\u2019s not necessarily a total disaster. If the device can\u2019t be accessed from outside of your network, for instance, then it\u2019s not going to get hacked.<\/p>\n

When a device is facing the internet, though, you should definitely look at disabling its UPnP implementation. And arguably if you don\u2019t need the technology then it\u2019s a good idea to do this anyway (UPnP has had plenty of vulnerabilities discovered before, and we\u2019ve no doubt others will appear in the future). Check your hardware documentation for more details.<\/p>\n

And it may also be worth monitoring your network hardware manufacturer\u2019s websites over the next few days to pick up on any response. Right now, for instance, Cisco have posted a Security Advisory<\/a> for Cisco products, and a Knowledge Base article<\/a> which details Linksys products known to be affected, and what to do about this. And we\u2019ve no doubt that further responses will be appearing very soon. <\/strong><\/p>\n

Photo credit:<\/strong> Andrea Danti<\/a>\/Shutterstock<\/a><\/p>\n

\n<\/img><\/a> <\/img><\/a>\n<\/div>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Rapid7 — the security company behind vulnerability scanner Metasploit — has released details on three security flaws affecting some Universal Plug and Play implementations. And their research indicates that 40 to 50 million IPs are vulnerable to at least one of those vulnerabilities, which the company says is exposing users “to remote attacks that could […]<\/p>\n","protected":false},"author":7429,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-640700","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/640700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/7429"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=640700"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/640700\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=640700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=640700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=640700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}