Plex Media Servers being used to amplify DDOS attacks

[OttoKerner]

Security: Regarding SSDP Reflection/Amplification DDoS

What is it? We recently became aware of an issue reported by security researchers. It was not disclosed to us prior to the publication. It describes an issue in which Plex Media Server installations in a specific (and uncommon) network position could potentially be used to reflect UDP traffic on certain device-discovery ports as part of a possible DDoS (distributed denial-of-service) attack. Am I affected? The vast majority of Plex Media Server setups are not exposed or affected by this. It sp…