Port 5070BFCP
Binary Floor Control Protocol (BFCP) facilitates the management of additional media streams, such as content sharing, during SIP-based video conferencing sessions. Standardized as RFC 4582, it allows participants to coordinate multiple video channels by establishing speaker or content presentation privileges, enhancing collaboration capabilities in environments that require structured media control. This port is also utilized as a preferred port for SIP PUBLISH messages to Cisco Unified Presence Servers (CUPS)..
- transport
- tcp
- in transit
- cleartext
- assignment
- unofficial
- risk
- 4/10
- lookups
- 15,162
single transport
payload readable on path
used by convention
caution
rank 214 of 993 · top 21%
Technical Details
what runs on :5070Binary Floor Control Protocol (BFCP), standardized in RFC 4582, is primarily designed to facilitate sharing of supplementary video streams alongside the primary channel in SIP-based multimedia conferences. By managing 'floor' requests, BFCP supports coordinated access control, enabling participants to take turns presenting content or controlling the session flow seamlessly. BFCP commonly operates over TCP on port 5070, supporting reliable delivery of session coordination messages.
BFCP is integrated with SIP signaling, where it establishes a secondary media control channel to manage conferencing resources dynamically. This coordination is necessary to avoid conflicts when multiple participants request control simultaneously, enhancing interactive experiences in collaborative environments. In addition to conferencing, the port is often designated as the preferred endpoint for SIP PUBLISH methods, particularly when deploying solutions such as Cisco's Unified Presence, which manage real-time presence information over SIP trunks.
The design of BFCP prioritizes low latency and reliable content synchronization during collaboration. While the protocol itself does not inherently encrypt communications, it may be encapsulated in secure transports such as TLS when integrated into broader SIP security frameworks. Its usage scope includes enterprise video conferencing systems, telepresence solutions, and unified communication platforms seeking structured content sharing management.
Security Information
exposure of :5070risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
network services averages 3.9 across 604 ports — this one sits 0.1 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
unofficial
used by convention, not registered — what answers here varies by deployment
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
Common vulnerabilities associated with BFCP over port 5070 include:
- Eavesdropping: Because BFCP typically operates without encryption, session information can be intercepted, revealing conferencing details or sensitive shared content.
- Unauthorized access: Without strict authentication controls, malicious actors may attempt to hijack the floor control process or inject unauthorized requests to disrupt sessions.
- Denial-of-service (DoS) attacks: Attackers may flood the port, overwhelming conferencing services and degrading performance.
Mitigations commonly recommended are:
- Encryption: Wrap BFCP traffic in TLS tunnels where supported to prevent interception and tampering.
- Access controls: Employ strong SIP authentication (e.g., Digest Authentication) to ensure only authorized users can initiate or control conferences.
- Firewalls and ACLs: Restrict access to port 5070 to trusted devices and networks, minimizing exposure.
- Rate limiting and intrusion detection: Implement mechanisms to identify and limit abusive traffic patterns targeting this port.
- Regular patching: Keep video conferencing and unified messaging platforms updated to mitigate known vulnerabilities. These measures help maintain the integrity and confidentiality of conferencing communications relying upon BFCP.
Related Ports
the 8 most looked-up other ports in network services — 604 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted