[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SSDP Discovery (SSDPSRV)

ID: oval:org.secpod.oval:def:81362Date: (C)2022-06-09   (M)2023-12-12
Class: COMPLIANCEFamily: windows




Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and attachment to network devices. Notes that UPnP is different than regular Plug n Play (PnP). Workstations should not be advertising their services (or automatically discovering and connecting to networked services) in a security-conscious enterprise managed environment. Default: Manual. Counter Measure: The recommended state for this setting is Disabled. Potential Impact: SSDP-based devices will not be discovered. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\SSDP Discovery (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV!Start

Platform:
Microsoft Windows 11
Reference:
CCE-97174-7
CPE    1
cpe:/o:microsoft:windows_11:21h2::x64
CCE    1
CCE-97174-7
XCCDF    3
xccdf_org.secpod_benchmark_general_Windows_11
xccdf_org.secpod_benchmark_NIST_800_53_r5_Windows_11
xccdf_org.secpod_benchmark_NIST_800_171_R2_Windows_11

© SecPod Technologies