#4516085

HonoredShadow

2013-02-01 12:18

I ran the tool on my D-link router. No problems!

#4516087

WhiteLightning

Moderator

2013-02-01 12:21

"Congratulations! Your router did not respond to a UPnP discovery request. " :D

#4516184

PhazeDelta1

2013-02-01 15:12

I'm good to go.

#4516193

Speed Weed

2013-02-01 15:26

No probs with my router either.

#4516356

kakarot

2013-02-01 18:50

Not sure how accurate that test is but the dlink 655 seems to be safe as well

#4516421

k1net1cs

2013-02-01 20:10

My TP-Link routers are all safe, according to the online test. I just have to wonder, though. They are supposed to be security experts, yet their offline scanning tool requires Java? Moreover, it's recommended for business users? That didn't really register with me.

#4516430

bdub5886

2013-02-01 20:35

I wonder who has this problem because everyone who has posted the UPnP is not enabled. My linksys router did not respond to the request either.

#4516431

CronoGraal

2013-02-01 20:35

wouldn't it be funny if this was the actual attack?

#4516433

mmicrosysm

2013-02-01 20:39

wouldn't it be funny if this was the actual attack?

http://fc08.deviantart.net/fs70/i/2011/091/9/e/ace_attorney____o_face_by_kdthompson-d3cy1co.png Both my routers came back safe.

#4516439

airbud7

2013-02-01 20:46

I'm Safe. "Congratulations! Your router did not respond to a UPnP discovery request." Comcast gateway.

#4516495

The Laughing Ma

2013-02-01 21:47

Virgin Super Hub is also safe.

#4516497

k1net1cs

2013-02-01 21:49

I wonder who has this problem because everyone who has posted the UPnP is not enabled. My linksys router did not respond to the request either.

The thing is, UPnP is always enabled on the routers I use. By the way, guys, the online test only tests one of the three vulnerabilities being discussed in the whitepaper. You have to run the Java-based scanner to scan for all three.

#4516505

kakarot

2013-02-01 22:01

The thing is, UPnP is always enabled on the routers I use. By the way, guys, the online test only tests one of the three vulnerabilities being discussed in the whitepaper. You have to run the Java-based scanner to scan for all three.

Thanks for the heads up, it passed all tests in the app well. I too have noticed upnp being enabled by default on all routers I've ever seen. Edit- Btw, it is fairly safe to have java installed as long as you disable it in the browsers you're using. Also a good av like NIS should block most crap even with the browser plugins enabled

#4516513

PhazeDelta1

2013-02-01 22:10

The thing is, UPnP is always enabled on the routers I use. By the way, guys, the online test only tests one of the three vulnerabilities being discussed in the whitepaper. You have to run the Java-based scanner to scan for all three.

Where is this java based scanner at?

#4516557

kakarot

2013-02-01 22:56

The link next to the online test; "Download ScanNow"

#4516671

Veeshush

2013-02-02 01:38

D-Link DGL-4500 here, no issues.

I just have to wonder, though. They are supposed to be security experts, yet their offline scanning tool requires Java? Moreover, it's recommended for business users? That didn't really register with me.

Same thoughts. Although I think if I remember right most experts recommend disabling upnp anyway, and according to http://upnp-check.rapid7.com/faq I think that also stops it. I had it enabled when I scanned and still had no reports back. But then again I wonder how good the scanner is. Not really losing sleep over it yet either. edit crap, looks like I need to run the java version to be sure. I have 64bit Java 7 installed but it didn't pick it up that I had it, so I'm going to try downloading 32bit. edit2 Yeah I just confirmed it. If you have a 64bit system (everyone here) you'll need to be sure Java 7 32bit is installed for the offline scanner to work. I still didn't get any reports of anything bad.

#4516690

PhazeDelta1

2013-02-02 01:52

The link next to the online test; "Download ScanNow"

Ah thanks. Downloaded it and still good to go.

#4516695

tsunami231

2013-02-02 02:00

NBC News spreads word that a security firm called Rapid7 learned that between 40 million and 50 million home networking devices are vulnerable to attack via a security vulnerability in Universal Plug ... Up to 50 million home networking devices vulnerable with UPnP

i have upnp disabled on my routers and most devices and have had it that way for very long time

#4516706

sykozis

2013-02-02 02:19

Disabling UPnP is the first thing I do on a new router....

#4516780

Lane

2013-02-02 03:31

when i have some problem to trust this info, i have do a scan, no problem at all with a simple ****ty Zyxel VDSL2 router. ( maybe not so ****ty as it cost 250$ )