[FIX] PMS leveraged for amplified dDoS attack (SSDP)

[ChuckPa]

@Aaron-W

I forwarded it in our Security room the moment it was posted.
Plex has staff around the world.

I’m waiting for someone, in the right timezone, to confirm “Yes, it was received”.

OFFICIAL REPLY:

Security: Regarding SSDP Reflection/Amplification DDoS

What is it? We recently became aware of an issue reported by security researchers. It was not disclosed to us prior to the publication. It describes an issue in which Plex Media Server installations in a specific (and uncommon) network position could potentially be used to reflect UDP traffic on certain device-discovery ports as part of a possible DDoS (distributed denial-of-service) attack. Am I affected? The vast majority of Plex Media Server setups are not exposed or affected by this. It sp…