UPnP Internet Gateway Device (IGD) Port Mapping Listing

According to its UPnP data, the remote device is a NAT router that supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to list 'port mappings' that redirect ports from the device's external interface to the scanner address. An unauthenticated, remote...

TP-Link Cross Site Request Forgery Vulnerability

This write up goes into detail about how real world cross site request forgery attacks can be used to hijack DNS on TP-Link routers. I. Introduction Today the majority of wired Internet connections is used with an embedded NAT router, which allows using the same Internet connection with several...

STUN Detection

The remote service supports the STUN Session Traversal Utilities for NAT protocol as described in RFC 5389. STUN helps client software behind a NAT router discover the external public address and the behavior of the router. Note that an earlier version of the protocol used a different acronym -...

UPnP Internet Gateway Device (IGD) External IP Address Reachable

According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to retrieve the external IP address of the device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35708;...

UPnP Internet Gateway Device (IGD) Protocol Detection

According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Therefore, the device is potentially vulnerable as the protocol can allow an adjacent attacker to punch holes in your firewall e.g., via a malicious...

UPnP Internet Gateway Device (IGD) Port Mapping Manipulation

According to its UPnP data, the remote device is a NAT router that supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to add 'port mappings' that redirect ports from the device's external interface to the scanner address. An unauthenticated, remote...