Disable Universal Plug and Play - UPnP

MediumLevel 1Manual reviewprinter

Description

UPnP is designed to create a distributed plug-and-play environment over an IP network for the purpose of automatic device discovery, notification, and configuration. It is recommended that UPnP capabilities be disabled to reduce risk introduced by vulnerabilities that are exposed via this mechanism. If the UPnP capabilities of the MFD are mis-configured, a malicious entity may alter the MFD’s configuration which may lead to loss of data integrity, confidentiality, and/or availability.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.6: Disable Universal Plug and Play - UPnP.

How it is fixed

Fix method: Guidance or infrastructure patch

Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.6 to configure: Disable Universal Plug and Play - UPnP.

Properties

Operating systems: Any
Tags: mfdprinter
Reference: CIS Multi-Function Device Benchmark v1.0.0 - 2.1.6 Disable Universal Plug and Play - UPnP