The IT Law Wiki
Advertisement

Definition[]

The Universal Plug-n-Play protocol (UPnP) is

the process when a device remotely connects and communicates on a network automatically without authentication.[1]

Overview[]

"UPnP is designed to self-configure when attached to an IP address, making it vulnerable to exploitation. Cyber actors can change the configuration, and run commands on the devices, potentially enabling the devices to harvest sensitive information or conduct attacks against homes and businesses, or engage in digital eavesdropping. . . ."[2]

References[]

Advertisement