Jump to content

Old UPNP?


Recommended Posts

  • 192.168.1.1: this device provided a valid device description via its UPnP URL. This description, viewable here, contains the following information about this gateway:
    • Name: XR500 (Gateway)
    • Manufacturer: NETGEAR, Inc.
    • Manufacturer URL: http://www.netgear.com
    • Model name: XR500 Nighthawk® Pro Gaming WiFi
    • Model number: XR500
    • Model URL: http://www.netgear.com/npg/
    • Model Description: NETGEAR XR500 Nighthawk® Pro Gaming WiFi
  • This device appears to run "XR500 UPnP/1.0 miniupnpd/1.0". This system may be vulnerable to CVE-2013-0230

Is this old? Something to worry about? Can we get it updated?

Link to comment
Share on other sites

  • Administrators

Hi - I’ve not seen this before. I should think it’s fine, but if you’re worried, get in touch with Netgear support and they can help further:

https://www.netgear.com/support/contact.aspx

Alternatively, you could disable UPNP on your router but I wouldn’t recommend doing that in general as it can make it harder to connect to things like games, teammates and other applications. 

Link to comment
Share on other sites

Guest Killhippie
8 hours ago, Sunaikinti said:
  • 192.168.1.1: this device provided a valid device description via its UPnP URL. This description, viewable here, contains the following information about this gateway:
    • Name: XR500 (Gateway)
    • Manufacturer: NETGEAR, Inc.
    • Manufacturer URL: http://www.netgear.com
    • Model name: XR500 Nighthawk® Pro Gaming WiFi
    • Model number: XR500
    • Model URL: http://www.netgear.com/npg/
    • Model Description: NETGEAR XR500 Nighthawk® Pro Gaming WiFi
  • This device appears to run "XR500 UPnP/1.0 miniupnpd/1.0". This system may be vulnerable to CVE-2013-0230

Is this old? Something to worry about? Can we get it updated?

Its Netgear not updating their software properly, this has been patched though in previous firmwares for other routers like the R7800 so the patch covers routers like the XR500, so its safe, but Netgear didn't bother actually updating miniupnd1.0 which is about 13 years old. Lazy coding tbh.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...