[FIX] PMS leveraged for amplified dDoS attack (SSDP)

[JuiceWSA]

@jebrossard

Nearly useless, as your Internet IP is being port scanned multiple times a day by bad actors who can easily find that port. Just make sure you are only forwarding TCP and not UDP as well.

According to this I have no worries as I meet NONE of conditions that would worry me:

Security: Regarding SSDP Reflection/Amplification DDoS

What is it? We recently became aware of an issue reported by security researchers. It was not disclosed to us prior to the publication. It describes an issue in which Plex Media Server installations in a specific (and uncommon) network position could potentially be used to reflect UDP traffic on certain device-discovery ports as part of a possible DDoS (distributed denial-of-service) attack. Am I affected? The vast majority of Plex Media Server setups are not exposed or affected by this. It sp…

Am I affected?

The vast majority of Plex Media Server setups are not exposed or affected by this. It specifically requires that either:

1. the entire device running Plex Media Server be exposed to the public internet (such as one hosted in a data center or the computer being placed in the public “DMZ” of the network router), or
2. the server administrator has explicitly forwarded UDP traffic on an applicable port from the public internet to the device running Plex Media Server.

Neither of these configurations are typical for normal users. Only a very small portion of Plex Media Server instances will be potentially affected by this.

Therefore - I am not worried.