#IoT

UPnP Command Injection Explained: When Your Gateway Trusts the Network Too Much

UPnP was supposed to make devices play nice automatically. Instead it often hands attackers a SOAP endpoint, a password, and a shell. Here's how a diagnostic service turns into remote code execution.