[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

UPnP Device Host (upnphost)

ID: oval:org.secpod.oval:def:81363Date: (C)2022-06-09   (M)2023-12-12
Class: COMPLIANCEFamily: windows




Allows UPnP devices to be hosted on this computer. Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and attachment to network devices. Notes that UPnP is different than regular Plug n Play (PnP). Workstations should not be advertising their services (or automatically discovering and connecting to networked services) in a security-conscious enterprise managed environment Default: Manual. Counter Measure: The recommended state for this setting is Disabled. Potential Impact: Any hosted UPnP devices will stop functioning and no additional hosted devices can be added. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\UPnP Device Host (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost!Start

Platform:
Microsoft Windows 11
Reference:
CCE-97175-4
CPE    1
cpe:/o:microsoft:windows_11:21h2::x64
CCE    1
CCE-97175-4
XCCDF    3
xccdf_org.secpod_benchmark_general_Windows_11
xccdf_org.secpod_benchmark_NIST_800_53_r5_Windows_11
xccdf_org.secpod_benchmark_NIST_800_171_R2_Windows_11

© SecPod Technologies