SSDP Discovery (SSDPSRV)ID: oval:org.secpod.oval:def:80621 | Date: (C)2022-06-02 (M)2023-12-13 |
Class: COMPLIANCE | Family: windows |
Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer.
Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and
attachment to network devices. Notes that UPnP is different than regular Plug n Play (PnP).
Workstations should not be advertising their services (or automatically discovering and
connecting to networked services) in a security-conscious enterprise managed
environment.
Default: Manual.
Counter Measure:
The recommended state for this setting is Disabled.
Potential Impact:
SSDP-based devices will not be discovered.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\SSDP Discovery
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV!Start
Platform: |
Microsoft Windows 10 |