

Netscout said that it found amplified Plex Media SSDP (PMSSDP) DDoS attack traffic on abused broadband internet access routers directed towards several targets. By doing so, Plex can then be exploited to reflect and amplify DDoS attacks.
PLEX PORT FORWARDING REGISTRATION
This process exposes a Plex UPnP-enabled service registration responder to the general internet, according to Netscout. When Plex discovers a UPnP gateway, it attempts to use NAT Port Mapping Protocol to implement dynamic NAT forwarding rules on the router. The system also uses Simple Service Discovery Protocol (SSDP) probes to track down Universal Plug and Play (UPnP) gateways on broadband internet routers that have SSDP enabled. In an alert published Wednesday, network monitoring firm Netscout warned of an exploit against Plex Media Server, a media library and streaming system that runs on a variety of platforms, including Windows, macOS, and Linux as well as on such hardware as NAS devices, RAID units, and digital media players.Īs part of its normal operation, Plex scans a local network using a protocol known as G'Day Mate (GDM) in order to find other supported media devices and streaming clients. End user data backup policy (TechRepublic Premium).
PLEX PORT FORWARDING WINDOWS
