CVE-2001-0877: Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of...

Security readout for executives and security teams

This is an old Windows UPnP flaw that can make vulnerable machines generate unwanted traffic and contribute to denial-of-service conditions. Business risk is mainly in legacy environments still running Windows 98, 98SE, ME, or XP with UPnP enabled. There is no KEV listing in the provided data, so active exploitation is not established here. Exposure is most likely where obsolete Windows 98, 98SE, ME, or XP systems remain on networks that allow UPnP or SSDP traffic from untrusted sources. Modern environments without these legacy systems are unlikely to be exposed based on the provided sources. Prioritize this if the organization still operates legacy Windows systems in reachable network segments. For most modern environments, urgency is lower, but unmanaged legacy hosts can still create denial-of-service risk and should be retired, isolated, or controlled. Mitigation focus: Review and apply Microsoft MS01-059 guidance for affected Windows systems.; Disable UPnP where it is not operationally required.; Restrict UPnP and SSDP traffic to trusted network segments..

Prepared

Jul 1, 2026, 07:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.