IMPORTANT - you need to test your router NOW

[gb2000ie]

Hi all,

A major security problem affecting literally millions of home routers has been found. You can get the details here: https://community.rapid7.com/commun...s-in-universal-plug-and-play-unplug-dont-play

This flaw affects 9,600 different makes and models of network device, including many big-brand routers including those from Cisco/LinkSys, and ZyXEL. The biggest exception is Apple, their Airport range of routers are not affected by this problem.

You need to test if you are vulnerable ASAP - thankfully that's easy to do, just go to http://refhide.com/?http://upnp-check.rapid7.com/ and click "Scan My Router" - the test takes about 30 seconds and then you'll know where you stand.

If the test fails, you need to log into your router and disable UPnP, then test again. If the test still fails then you have one of the REALLY broken routers that doesn't even obey it's own settings, and you need to get a new one that is not so broken.

ISPs have it in their power to protect all their users from this with a simple firewall rule that blocks UDP traffic on just one port, so if you are vulnerable, another avenue you can peruse is to get your ISP to do the right thing. Mind you, if your ISP is anything like the typical ISP, this is probably not going to be a fruitful avenue, and you'll most likely have to take matters into your own hands and fix your own router.

If you provide tech support to friends of family, send them the link too and make them test their routers ASAP.

This is a really big deal folks - don't ignore this problem!

B.

 

[bigsal]

Thanks for the warning gb2000ie,
I had a scan and my router seems ok.

 

[Tjerk12]

Same to me, seems ok too.

 

[ihno]

The first link doesn't work. Is it wrong or is the site gone?

 

[gb2000ie]

The first link doesn't work. Is it wrong or is the site gone?

Fixed - it seems you can't anonymize a secure link for some reason

B.

 

[tonka]

It's great to have our own gay heaven tech angel.
My router came out ok.

 

[Sinnerr]

Mine one ok as well, thanks.

 

[gorgik9]

My router seems OK.
And thanks a bunch for keeping an eye over us, B.!!!

 

[Jamoo]

thnx for mentoning it for the crowd,
i made this test some days ago on a German Site
Heise UPnP check

it'salso easy to handle for non german readers,
- enter capthcha
- checkmark that you are allowed to scan this IP
Scan:
- checkmark UPnP

and start

Allow me a note regardless what test u are using that it's very important not to use a proxy or VPN for this test, your real IP must be showed there. Otherwise you will get a wrong result.

 

[Cute Prince101]

Thanks gb2000ie:heart: for the security flaw warning regarding about the routers,

I just checked mine and its got a green tick and says Congratulations! Your router did not respond to a UPnP discovery request. Which i guess means my router is safe and ok. I hope :hug:

 

[RefixnarcisM]

Mine is okay too. Thanks for the links and caution. At the first time I thought "Is it gonna work with a mobile phone too?" or "Does this threat will affecting my mobile phone too?" and it was totally work and the result was fine.

 

[SimplyJakeAndAlex]

Thank GB... mine is obviously an Enterprise class router Cisco 2811, however many of my associates are using home routers... so far it checked okay... in fact I never was a fan of UPNP on a simple modem... unless ones host games or websites from their homes... i don't see the use of it for a simple home user.

 

[portugal]

Mine seems fine too. Thanks for the heads up:thumbs up:

 

[Tom]

Mine is fine.

Thanks for this.

 

[petrovic]

ok here, thanks.

 

[BadMan125]

I usually don't bother myself with things like that but I did check just in case and it's fine. Thanks for warning us.

 

[Waltfore]

Cool. My router is safe, it's Tenda btw from which I gather may not be as used as some of the other brands.