SECURITY ALERT: Universal Plug and Play Vulnerability - Comments Page 2

Unlike some, Rapid 7's router scanner completed sucessfully in about a minute when I ran it. And thankfully, it said Congratulations...... :-)

Thanks for this great article, Bob. Ran both tests with no difficulty and no problems found, so good news there. Can't believe someone would think you would advise your readers to use a program containing malware of any kind. Always find your info useful and reliable. Much appreciated.

Hi Bob. Thanks for the heads-up on this one, once again proving the value of your newsletter.

I Got the congrat's message from the 'Router Scanner' so that looked OK? But the scanNow result showed "Exploitable" (Red cross) '0' and "Identified" (Green tick) '5'. The result details listed all networked equipment; Three PC's, Laptop, printer and the "Router/Hub". All of these were listed by IP address with a red 'X' and '0' under the heading 'Exploitable', and under 'Status' each IP address (including the "Router/Hub") has a Green Tick followed by the word 'Identified'.

In your post you state " If it shows zeros under both Exploitable and Identified, you're in good shape"?

So under Status; what does the 'Green Tick followed by the word 'Identified' indicate? If the lack of a zero here means all is not well, then it would appear that the two Rapid7 checks are giving contradictory results. Your advice would be gratefully appreciated, Bob.

EDITOR'S NOTE: I should have said that if none are Exploitable, you're okay.

No problem whatsoever with Rapid7 Router Security Check: "Congratulations..." received. No problem with ScanNow for UPnP, but it identified one vulnerability. Just contacted my ISP and got directed to their webpage whereby I can access the "ins" and "outs" of my settings. Found UPnP with no problem. Your directions for all this and for the "UPnP Device Host" service were easy to follow and execute. Thanks again for your help!

Thanks Bob for this timely warning. I have run both tests, and I did have to temporarily enable JAVA, and I got good reports. Is this security check something I should run regularly, or after adding any new peripheral, or is this one check sufficient?

EDITOR'S NOTE: If your router is okay, I wouldn't worry further about it.

Rapid7 secouity router check would not work on my new WD Mynet1300ac router. After 5 min of that gear turning I cancelled the test.
Now What???