3 ms·

Anyone know if dd-wrt is vulnerable to this? I would happily disable UPnP but it would break a ton of stuff including online games etc.

• vy8vWJlco 14y ago
  As of 2 years ago it was, so your's might be depending on the version, and the ticket doesn't look like it went anywhere so it might still be open: http://svn.dd-wrt.com/ticket/1909 http://svn.dd-wrt.com/ticket/1909 If you're concerned and can't merely disable the service, you should scan it from another system with something like Nessus. Edit: UPnP uses UDP port 1900 and TCP port 2869, so you should be able to add something like the following (untested; assumes WAN interface = vlan1) to the startup script (Administration>Commands), atleast for IPv4 (and unless they clobber additional rules somehow during the course of normal operation): iptables -I INPUT 1 -i vlan1 -p tcp --dport 2869 -j DROP iptables -I INPUT 1 -i vlan1 -p udp --dport 1900 -j DROP