Broadband Tech > Security > Security > Security Flaws in Universal Plug-n-Play: Unplug, Don't Play

reply to Cabal

broadcom upnp remote preauth root code

It's not the chipset that makes a particular router vulnerable or not. It's the software/firmware that drives it.

I noted mine is not on the list, and I doubt that the list at defensecode covers every router manufacturer out there with the specific chipset either.
Understand what you are saying, however I have sent an email to support to ask the question.
They could say "no it has good firmware" but that could still only be them politely telling me to go away.
I wonder if there will be an Internet based tool for all this - and works. At present, Berkeley's needs java, rapid7's tool doesn't seem to function and I'm doubting GRC's test is specific to the UPNP issue discussed here.

Anyone else know of anything that can test?
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke