[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SSDP Discovery (SSDPSRV)

ID: oval:org.secpod.oval:def:81417Date: (C)2022-06-13   (M)2023-12-12
Class: COMPLIANCEFamily: windows




Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. Universal Plug n Play (UPnP) is a real security risk - it allows automatic discovery and attachment to network devices. Notes that UPnP is different than regular Plug n Play (PnP). Workstations should not be advertising their services (or automatically discovering and connecting to networked services) in a security-conscious enterprise managed environment. Default: Manual. Counter Measure: The recommended state for this setting is Disabled. Potential Impact: SSDP-based devices will not be discovered. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\SSDP Discovery (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV!Start

Platform:
Microsoft Windows Server 2022
Reference:
CCE-98103-5
CPE    1
cpe:/o:microsoft:windows_server_2022:::x64
CCE    1
CCE-98103-5
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_Server_2022

© SecPod Technologies