DDOS Attack Using Plex

[Uncle_9]

Server Version#:1.21.2.3943-a91458577
Player Version#: Roku
Does the potential for using my server as a DDOS attack vector apply if Remote Access is OFF? If not, how do I close this port?

[JuiceWSA]

[FIX] PMS leveraged for amplified dDoS attack (SSDP)

EDIT: plex released a fix to prevent this. Greetings to whom it may concern: Netscout (Arbor) has just published a blog post in which they show / explain / claim how SSDP on the WAN port of a Plex Media Server that uses uPNP/NAT-PNP to expose its port to the internet, can be used to reflect+amplify a dDoS attack. (the attacker sending a forged packet to your plex server, the resulting answer will be sent to the (forged) source IP > the target of the attack) suggested action: Filter incoming…