5357/tcp Open Wsdapi ^new^ Jun 2026
| Action | Context | | :--- | :--- | | | Is it a Windows PC, Server, Printer, or IoT device? | | Identify the Location | Is it a public IP or internal IP? | | If Public IP | Block immediately. This is a critical misconfiguration. | | If Internal IP | Verify VLAN segmentation. Is it crossing firewall zones? | | Verify Scope | Is the host firewall rule set to Any instead of LocalSubnet ? | | Patch Management | Ensure the host is patched against historical WSDAPI RCEs (CVE-2010-0020). |
The wmiquery.py or specific DPWS tools within the Impacket suite can sometimes interact with these services, though WSD is often distinct from WMI. 5357/tcp open wsdapi
Port 5357 is used by the Web Services for Devices API (WSDAPI). This is a Microsoft implementation of the DPWS (Devices Profile for Web Services) standard. | Action | Context | | :--- |