ID: MEDIUM-09

Title: UPnP enabled by default

Severity: Medium

CVSS Score: 6.5

CVSS Vector String: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description: Universal Plug and Play (UPnP) is enabled by default on the device, as confirmed by the web interface under Forwarding → UPnP and corroborated by the open ports identified during network scanning (ports 1900, 49152, 49153). UPnP allows any device on the LAN to programmatically modify router configuration, including creating and deleting port forwarding rules, without any authentication or user approval. This means any LAN-connected device, including malware or a compromised host, can silently alter the router’s network configuration.

Remediation: Disable UPnP by default and require the user to explicitly enable it if needed. If UPnP is offered, restrict it to the LAN interface only and consider implementing an access control mechanism.

More information: See Web Interface Analysis and UPnP Testing chapters.