[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248585

 
 

909

 
 

195621

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SSDP Discovery (SSDPSRV)

ID: oval:org.secpod.oval:def:80621Date: (C)2022-06-02   (M)2023-12-13
Class: COMPLIANCEFamily: windows




Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and attachment to network devices. Notes that UPnP is different than regular Plug n Play (PnP). Workstations should not be advertising their services (or automatically discovering and connecting to networked services) in a security-conscious enterprise managed environment. Default: Manual. Counter Measure: The recommended state for this setting is Disabled. Potential Impact: SSDP-based devices will not be discovered. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\SSDP Discovery (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV!Start

Platform:
Microsoft Windows 10
Reference:
CCE-98529-1
CPE    1
cpe:/o:microsoft:windows_10
CCE    1
CCE-98529-1
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_10

© SecPod Technologies