: If you have "Network Discovery" turned on in Windows Sharing settings, this port will likely be open.
WSDAPI, short for Web Services for Devices Application Programming Interface, is a protocol used for discovering and communicating with devices on a network. It's a part of the Web Services for Devices (WSD) standard, which enables devices to advertise their capabilities and services over a network. WSDAPI is commonly used in Windows environments, particularly in Windows Vista and later versions.
Think of it as "Plug and Play" over the network. When you plug a printer into a network, WSD helps Windows automatically discover it without you having to type in an IP address. 5357/tcp open wsdapi
: It is common in office environments where users need to connect to shared resources without manual IP configuration. Security Risks and Implications
On the Windows machine itself, ensure the "Network Discovery" rules are scoped correctly. : If you have "Network Discovery" turned on
The simplest way to close the port is through the Windows UI:
The most effective mitigation is blocking the port at the network boundary. : It is common in office environments where
Port 5357 is the default port used by WSDAPI for communication between devices and clients. When a device or service is configured to use WSDAPI, it will typically listen on port 5357 for incoming requests. This port is used for:
