VA-Pre Vulnerability scan for July-24

Scan Results
July 05, 2024
Report Summary
User Name: IT Support
Login Name: sugen3ts
Company: Solugenix Corporation
User Role: Manager
Address: 1365 N Scottsdale RD Suite 100
City: Scottsdale
State: Arizona
Zip: 85257
Country: United States of America
Created: 07/05/2024 at 04:03:58 AM (GMT-0600)
Launch Date: 07/02/2024 at 05:09:09 AM (GMT-0600)
Active Hosts: 12
Total Hosts: 12
Type: On demand
Status: Finished
Reference: scan/1719918549.26284
Scanner Appliances: SGX_HYD (Scanner 12.18.23-1, Vulnerability Signatures 2.6.85-4)
Duration: 00:54:39
Title: VA-Pre vulnerability Scan for July-24(MS)
Asset Groups: SGX-MindSpace
IPs: 14.194.146.82, 115.242.131.6, 192.168.60.58, 192.168.80.1-192.168.80.2, 192.168.80.5-192.168.80.11
Excluded IPs: -
FQDNs: -
Options Profile: Initial Options
Summary of Vulnerabilities
Vulnerabilities Total 98 Security Risk (Avg) 0.3
by Severity
Severity Confirmed Potential Information Gathered Total
5 0 0 0 0
4 1 0 0 1
3 0 0 2 2
2 0 0 3 3
1 0 0 92 92
Total 1 0 97 98
5 Biggest Categories
Category Confirmed Potential Information Gathered Total
Information gathering 0 0 38 38
TCP/IP 0 0 17 17
General remote services 1 0 16 17
Firewall 0 0 12 12
Web server 0 0 10 10
Total 1 0 93 94
Scan Results page 1

Vulnerabilities by Severity
Operating Systems Detected
Services Detected
Detailed Results
Scan Results page 2

14.194.146.82 (static-82.146.194.14-tataidc.co.in, -)
Information Gathered (9)
3 Remote Access or Management Service Detected
QID: 42017
Category: General remote services
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
Service Modified: 05/20/2024
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
A remote access or remote management service was detected. If such a service is accessible to malicious users it can be used to carry different type of
attacks. Malicious users could try to brute force credentials or collect additional information on the service which could enable them in crafting
further attacks.
The Results section includes information on the remote access service that was found on the target.
Services like Telnet, Rlogin, SSH, windows remote desktop, pcAnywhere, Citrix Management Console, Remote Admin (RAdmin), VNC, OPENVPN
and ISAKMP are checked.
IMPACT:
Consequences vary by the type of attack.
SOLUTION:
Expose the remote access or remote management services only to the system administrators or intended users of the system.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
There is no exploitability information for this vulnerability.
ASSOCIATED MALWARE:
There is no malware information for this vulnerability.
RESULTS:
Service name: ISAKMP on UDP port 500.
1 DNS Host Name
QID: 6
Category: Information gathering
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Scan Results page 3

The fully qualified domain name of this host, if it was obtained from a DNS server, is displayed in the RESULT section.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
IP address Host name
14.194.146.82 static-82.146.194.14-tataidc.co.in
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
A packet filtering device protecting this IP was detected. This is likely to be a firewall or a router using access control lists (ACLs).
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Firewall responded to TCP probes sent to port 2869 with RST packets (hopcount to firewall 2 vs hopcount to target 4).
1 Target Network Information
Scan Results page 4

QID: 45004
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The information shown in the Result section was returned by the network infrastructure responsible for routing traffic from our cloud platform to the
target network (where the scanner appliance is located).
This information was returned from: 1) the WHOIS service, or 2) the infrastructure provided by the closest gateway server to our cloud platform. If your
ISP is routing traffic, your ISP's gateway server returned this information.
IMPACT:
This information can be used by malicious users to gather more information about the network infrastructure that may help in launching attacks
against it.
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
The network handle is: APNIC-14

Network description:
Asia Pacific Network Information Centre
1 Traceroute
QID: 45006
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Traceroute describes the path in realtime from the scanner to the remote host being contacted. It reports the IP addresses of all the routers in
between.
COMPLIANCE:
Scan Results page 5

Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Hops IP Round Trip Time Probe Port
1 192.168.4.1 3.06ms ICMP
2 14.98.165.209 3.37ms ICMP
3 *.*.*.* 0.00ms Other 80
4 14.194.146.82 4.59ms TCP 80
1 Host Scan Time - Scanner
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The Host Scan Time is the period of time it takes the scanning engine to perform the vulnerability assessment of a single target host. The Host Scan
Time for this host is reported in the Result section below.
The Host Scan Time does not have a direct correlation to the Duration time as displayed in the Report Summary section of a scan results report. The
Duration is the period of time it takes the service to perform a scan task. The Duration includes the time it takes the service to scan all hosts, which
may involve parallel scanning. It also includes the time it takes for a scanner appliance to pick up the scan task and transfer the results back to the
service's Secure Operating Center. Further, when a scan task is distributed across multiple scanners, the Duration includes the time it takes to perform
parallel host scanning on all scanners.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Scan duration: 497 seconds
Start time: Tue, Jul 02 2024, 11:11:53 GMT
Scan Results page 6

End time: Tue, Jul 02 2024, 11:20:10 GMT
1 Host Names Found
QID: 45039
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following host names were discovered for this computer using various methods such as DNS look up, NetBIOS query, and SQL server name
query.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Host Name Source
static-82.146.194.14-tataidc.co.in FQDN
1 Scan Activity per Port
QID: 45426
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Scan activity per port is an estimate of the amount of internal process time the scanner engine spent scanning a particular TCP or UDP port. This
information can be useful to determine the reason for long scan times. The individual time values represent internal process time, not elapsed
time, and can be longer than the total scan time because of internal parallelism. High values are often caused by slowly responding services or
Scan Results page 7

services on which requests time out.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Protocol Port Time
UDP 500 0:04:28
1 Open UDP Services List
QID: 82004
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
A port scanner was used to draw a map of all the UDP services on this host that can be accessed from the Internet.
Note that if the host is behind a firewall, there is a small chance that the list includes a few ports that are filtered or blocked by the firewall but
are not actually open on the target host. This (false positive on UDP open ports) may happen when the firewall is configured to reject UDP packets for
most (but not all) ports with an ICMP Port Unreachable packet. This may also happen when the firewall is configured to allow UDP packets for most (but
not all) ports through and filter/block/drop UDP packets for only a few ports. Both cases are uncommon.
IMPACT:
Unauthorized users can exploit this information to test vulnerabilities in each of the open services.
SOLUTION:
Shut down any unknown or unused service on the list. If you have difficulty working out which service is provided by which process or program,
contact your provider's support team. For more information about commercial and open-source Intrusion Detection Systems available for detecting
port scanners of this kind, visit the CERT Web site (http://www.cert.org).
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
Scan Results page 8

RESULTS:
Port IANA Assigned Ports/Services Description Service Detected
500 isakmp isakmp isakmp
115.242.131.6 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
115.242.131.6 No registered hostname
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
Scan Results page 9

PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Some of the ports filtered by the firewall are: 20, 21, 22, 23, 25, 53, 80, 111, 135, 443.
Listed below are the ports filtered by the firewall.

No response has been received when any of these ports are probed.
1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
We have omitted from this list 703 higher ports to keep the report size manageable.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Scan Results page 10

IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Host Name Not Available
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Attempts to obtain the fully-qualified domain name (FQDN) or the Netbios name failed for this host.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
No results available

192.168.60.58 (-, -)
Vulnerabilities (1)
4 SSH Prefix Truncation Vulnerability (Terrapin) port 22/tcp
QID: 38913
Associated CVEs: CVE-2023-48795
Vendor Reference: OpenSSH Advisory
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: Yes
THREAT:
The Terrapin attack exploits weaknesses in the SSH transport layer protocol in combination with newer cryptographic algorithms and encryption
modes introduced by OpenSSH over 10 years ago. Since then, these have been adopted by a wide range of SSH implementations, therefore affecting a
majority of current implementations.
IMPACT:
Successful exploitation of the vulnerability may allow an attacker to downgrade the security of an SSH connection when using SSH extension
negotiation. The impact in practice heavily depends on the supported extensions. Most commonly, this will impact the security of client
authentication when using an RSA public key.
SOLUTION:
Customers are advised to refer to the individual vendor advisory for their operating system and install the patch released by the vendor. For more
information regarding the vulnerability, please refer to Terrapin Vulnerability (https://terrapin-attack.com/)
Patch:
Following are links for downloading patches to fix the vulnerabilities:
OpenWall Security Advisory (https://www.openwall.com/lists/oss-security/2023/12/20/3)
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
packetstorm
Reference: CVE-2023-48795
Description: Terrapin SSH Connection Weakening
Link: https://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
nist-nvd2
Description: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote
attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a
client and server may consequently end up with a connection for which some security features have been downgraded or
disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these
extensions, mishandles the ha
Link: https://www.terrapin-attack.com
nuclei-templates
Description: Nuclei template for CVE-2023-48795
Link:
https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/javascript/cves/2023/CVE-2023-48795.yaml

ASSOCIATED MALWARE:
RESULTS:
SSH Prefix Truncation Vulnerability (Terrapin) detected on port: 22

ChaCha20-Poly1305 Algorithm Support: False
CBC-EtM Algorithm Support: True
Strict Key Exchange algorithm enabled: False
3 Remote Access or Management Service Detected
QID: 42017
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
A remote access or remote management service was detected. If such a service is accessible to malicious users it can be used to carry different type of
attacks. Malicious users could try to brute force credentials or collect additional information on the service which could enable them in crafting
further attacks.
The Results section includes information on the remote access service that was found on the target.
Services like Telnet, Rlogin, SSH, windows remote desktop, pcAnywhere, Citrix Management Console, Remote Admin (RAdmin), VNC, OPENVPN
and ISAKMP are checked.
IMPACT:
Consequences vary by the type of attack.
SOLUTION:
Expose the remote access or remote management services only to the system administrators or intended users of the system.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Service name: SSH on TCP port 22.

Service name: SNMP on UDP port 161.
2 Web Server HTTP Protocol Versions port 443/tcp over SSL
QID: 45266
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -

User Modified: -
Edited: No
PCI Vuln: No
THREAT:
This QID lists supported HTTP protocol (HTTP 1.x or HTTP 2) from remote web server.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Remote Web Server supports HTTP version 2 on 443 port.
2 Web Server HTTP Protocol Versions port 80/tcp
QID: 45266
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:

RESULTS:
Remote Web Server supports HTTP version 1.x on 80 port.GET / HTTP/1.1Remote Web Server supports HTTP version 2 on 80 port.
2 Web Server HTTP Protocol Versions port 443/tcp
QID: 45266
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Remote Web Server supports HTTP version 1.x on 443 port.GET / HTTP/1.1
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:

N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Firewall responded to TCP probes sent to port 2869 with RST packets (hopcount to firewall 2 vs hopcount to target 4).
1 Traceroute
QID: 45006

Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Traceroute describes the path in realtime from the scanner to the remote host being contacted. It reports the IP addresses of all the routers in
between.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Hops IP Round Trip Time Probe Port
1 192.168.4.1 3.48ms ICMP
2 *.*.*.* 0.00ms Other 80
3 *.*.*.* 0.00ms Other 80
4 192.168.60.58 5.01ms TCP 80
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:

N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Scan Activity per Port
QID: 45426
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Scan activity per port is an estimate of the amount of internal process time the scanner engine spent scanning a particular TCP or UDP port. This
information can be useful to determine the reason for long scan times. The individual time values represent internal process time, not elapsed
time, and can be longer than the total scan time because of internal parallelism. High values are often caused by slowly responding services or
services on which requests time out.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Protocol Port Time
TCP 22 0:01:11
TCP 80 3:56:00
TCP 443 3:30:07
TCP 4343 0:02:38

UDP 123 0:01:45
UDP 161 0:02:20
1 SSH Algorithms ChaCha20-Poly1305 or CBC-EtM Detected
QID: 48259
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The ChaCha20-Poly1305 algorithm and the CBC-EtM algorithm are known to be vulnerable to the SSH Prefix Truncation Vulnerability (Terrapin).
IMPACT:
The algorithms are known to be vulnerable to the SSH Prefix Truncation Vulnerability (Terrapin). Successful exploitation of the vulnerability may
allow an attacker to downgrade the security of an SSH connection when using SSH extension negotiation. The impact in practice heavily depends on the
supported extensions. Most commonly, this will impact the security of client authentication when using an RSA public key.
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
SSH Algorithms ChaCha20-Poly1305 or CBC-EtM detected on port: 22

ChaCha20-Poly1305 Algorithm Support: False
CBC-EtM Algorithm Support: True
1 Open UDP Services List
QID: 82004
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:

A port scanner was used to draw a map of all the UDP services on this host that can be accessed from the Internet.
Note that if the host is behind a firewall, there is a small chance that the list includes a few ports that are filtered or blocked by the firewall but
are not actually open on the target host. This (false positive on UDP open ports) may happen when the firewall is configured to reject UDP packets for
most (but not all) ports with an ICMP Port Unreachable packet. This may also happen when the firewall is configured to allow UDP packets for most (but
not all) ports through and filter/block/drop UDP packets for only a few ports. Both cases are uncommon.
IMPACT:
SOLUTION:
Shut down any unknown or unused service on the list. If you have difficulty working out which service is provided by which process or program,
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Port IANA Assigned Ports/Services Description Service Detected
123 ntp Network Time Protocol ntp
161 snmp SNMP snmp
1 Open TCP Services List
QID: 82023
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The port scanner enables unauthorized users with the appropriate tools to draw a map of all services on this host that can be accessed from the
Internet. The test was carried out with a "stealth" port scanner so that the server does not log real connections.
The Results section displays the port number (Port), the default service listening on the port (IANA Assigned Ports/Services), the description of the
service (Description) and the service that the scanner detected using service discovery (Service Detected).
IMPACT:
SOLUTION:
Shut down any unknown or unused service on the list. If you have difficulty figuring out which service is provided by which process or program,
COMPLIANCE:

Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Port IANA Assigned Ports/Services Description Service Detected OS On Redirected Port
22 ssh SSH Remote Login Protocol ssh
80 www-http World Wide Web HTTP http
443 https http protocol over TLS/SSL http over ssl
4343 unicall UNICALL unknown over ssl
1 ICMP Replies Received
QID: 82040
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
ICMP (Internet Control and Error Message Protocol) is a protocol encapsulated in IP packets. ICMP's principal purpose is to provide a protocol layer
that informs gateways of the inter-connectivity and accessibility of other gateways or hosts.
We have sent the following types of packets to trigger the host to send us ICMP replies:
Echo Request (to trigger Echo Reply)
Timestamp Request (to trigger Timestamp Reply)
Address Mask Request (to trigger Address Mask Reply)
UDP Packet (to trigger Port Unreachable Reply)
IP Packet with Protocol >= 250 (to trigger Protocol Unreachable Reply)
Listed in the "Result" section are the ICMP replies that we have received.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
ICMP Reply Type Triggered By Additional Information
Echo (type=0 code=0) Echo Request Echo Reply
Time Stamp (type=14 code=0) Time Stamp Request 00:00:42 GMT
1 Degree of Randomness of TCP Initial Sequence Numbers
QID: 82045
Category: TCP/IP

Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
TCP Initial Sequence Numbers (ISNs) obtained in the SYNACK replies from the host are analyzed to determine how random they are. The average
change between subsequent ISNs and the standard deviation from the average are displayed in the RESULT section. Also included is the degree of
difficulty for exploitation of the TCP ISN generation scheme used by the host.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Average change between subsequent TCP initial sequence numbers is 831531970 with a standard deviation of 547055700. These TCP initial sequence
numbers were triggered by TCP SYN probes sent to the host at an average rate of 1/(5397 microseconds). The degree of difficulty to exploit the
TCP initial sequence number generation scheme is: hard.
1 IP ID Values Randomness
QID: 82046
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The values for the identification (ID) field in IP headers in IP packets from the host are analyzed to determine how random they are. The changes
between subsequent ID values for either the network byte ordering or the host byte ordering, whichever is smaller, are displayed in the RESULT
section along with the duration taken to send the probes. When incremental values are used, as is the case for TCP/IP implementation in many
operating systems, these changes reflect the network load of the host at the time this test was conducted.
Please note that for reliability reasons only the network traffic from open TCP ports is analyzed.
IMPACT:
N/A

SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
IP ID changes observed (network order) for port 22: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

Duration: 28 milli seconds
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Default Web Page port 443/tcp over SSL
QID: 12230
Category: CGI
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No

THREAT:
The Result section displays the default Web page for the Web server.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
GET / HTTP/1.1
Host: 192.168.60.58
Connection: Keep-Alive
<HTML>
<HEAD><TITLE>302 </TITLE></HEAD>
<BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc">
<H4>302 </H4>
<ADDRESS><A HREF="http://www.arubanetworks.com"></A></ADDRESS>
</BODY>
</HTML>
1 Default Web Page ( Follow HTTP Redirection) port 443/tcp over SSL
QID: 13910
Category: CGI
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The Result section displays the default Web page for the Web server following HTTP redirections.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:

ASSOCIATED MALWARE:
RESULTS:
GET / HTTP/1.1
Host: 192.168.60.58
<HTML>
<H4>302 </H4>
</BODY>
</HTML>
1 SSL Server Information Retrieval port 443/tcp over SSL
QID: 38116
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following is a list of supported SSL ciphers.

Note: If a cipher is included in this list it means that it was possible to establish a SSL connection using that cipher. There are some web servers
setups that allow connections to be established using a LOW grade cipher, only to provide a web page stating that the URL is accessible only through
a non-LOW grade cipher. In this case even though LOW grade cipher will be listed here QID 38140 will not be reported.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
CIPHER KEY-EXCHANGE AUTHENTICATION MAC ENCRYPTION(KEY-STRENGTH) GRADE
SSLv2 PROTOCOL IS DISABLED

TLSv1 PROTOCOL IS DISABLED
TLSv1.1 PROTOCOL IS DISABLED
TLSv1.2 PROTOCOL IS ENABLED
TLSv1.2 COMPRESSION METHOD None
ECDHE-RSA-AES128-SHA256 ECDH RSA SHA256 AES(128) MEDIUM
ECDHE-RSA-AES256-SHA384 ECDH RSA SHA384 AES(256) HIGH
ECDHE-RSA-AES128-GCM-SHA256 ECDH RSA AEAD AESGCM(128) MEDIUM
ECDHE-RSA-AES256-GCM-SHA384 ECDH RSA AEAD AESGCM(256) HIGH
1 SSL Session Caching Information port 443/tcp over SSL
QID: 38291
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
SSL session is a collection of security parameters that are negotiated by the SSL client and server for each SSL connection. SSL session caching is
targeted to reduce the overhead of negotiations in recurring SSL connections. SSL sessions can be reused to resume an earlier connection or to
establish multiple simultaneous connections. The client suggests an SSL session to be reused by identifying the session with a Session-ID during
SSL handshake. If the server finds it appropriate to reuse the session, then they both proceed to secure communication with already known security
parameters.
This test determines if SSL session caching is enabled on the host.
IMPACT:
SSL session caching is part of the SSL and TLS protocols and is not a security threat. The result of this test is for informational purposes
only.
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
TLSv1.2 session caching is enabled on the target.
1 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Invalid Protocol Version Tolerance port 443/tcp over SSL
QID: 38597
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -

User Modified: -
Edited: No
PCI Vuln: No
THREAT:
SSL/TLS protocols have different version that can be supported by both the client and the server. This test attempts to send invalid protocol
versions to the target in order to find out what is the target's behavior. The results section contains a table that indicates what was the
target's response to each of our tests.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
my version target version
0304 0303
0399 0303
0400 0303
0499 0303
1 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Key Exchange Methods port 443/tcp over SSL
QID: 38704
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following is a list of SSL/TLS key exchange methods supported by the server, along with their respective key sizes, strengths and ciphers.
IMPACT:
N/A
SOLUTION:
N/A

COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
CIPHER NAME GROUP KEY-SIZE FORWARD-SECRET CLASSICAL-STRENGTH QUANTUM-STRENGTH
TLSv1.2
ECDHE-RSA-AES256-GCM-SHA384 ECDHE secp256r1 256 yes 128 low
ECDHE-RSA-AES256-SHA384 ECDHE secp256r1 256 yes 128 low
1 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Protocol Properties port 443/tcp over SSL
QID: 38706
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following is a list of detected SSL/TLS protocol properties.
IMPACT:
Items include:
Extended Master Secret: indicates whether the extended_master_secret extension is supported or required by the server. This extension enhances
security and is recommended. Applicable to TLSv1, TLSv1.1, TLSv1.2, DTLSv1, DTLSv1.2
Encrypt Then MAC: indicates whether the encrypt_then_mac extension is supported or required by the server. This extension enhances the security
of non-AEAD ciphers and is recommended. Applicable to TLSv1, TLSv1.1, TLSv1.2, DTLSv1, DTLSv1.2
Heartbeat: indicates whether the heartbeat extension is supported. It is not recommended to enable this, except for DTLS. Applicable to TLSv1,
TLSv1.1, TLSv1.2, TLSv1.3, DTLSv1, DTLSv1.2
Truncated HMAC: indicates whether the truncated_hmac extension is supported. This can degrade security and is not recommended. Applicable to
TLSv1, TLSv1.1, TLSv1.2, DTLSv1, DTLSv1.2
Cipher priority: indicates whether client, server or both determine the priority of ciphers. Having the server determine the priority is
recommended. Applicable to SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3, DTLSv1, DTLSv1.2
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:

RESULTS:
NAME STATUS
TLSv1.2
Extended Master Secret no
Encrypt Then MAC no
Heartbeat yes
Truncated HMAC no
Cipher priority controlled by client
OCSP stapling no
SCT extension no
1 TLS Secure Renegotiation Extension Support Information port 443/tcp over SSL
QID: 42350
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS
connection with the target server, injects content of his choice, and then splices in a new TLS connection from a client. The server treats the
client's initial TLS handshake as a renegotiation and thus believes that the initial data transmitted by the attacker is from the same entity as
the subsequent client data. TLS protocol was extended to cryptographically tierenegotiations to the TLS connections they are being performed
over. This is referred to as TLS secure renegotiation extension. This detection determines whether the TLS secure renegotiation extension is
supported by the server or not.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
TLS Secure Renegotiation Extension Status: supported.
1 SSL Certificate - Information port 443/tcp over SSL
QID: 86002

Category: Web server
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
SSL certificate information is provided in the Results section.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
NAME VALUE
(0)CERTIFICATE 0
(0)Version 3 (0x2)
(0)Serial Number 61 (0x3d)
(0)Signature Algorithm sha256WithRSAEncryption
(0)ISSUER NAME
commonName Aruba515-USQMKD559Q
stateOrProvinceName California
organizationName Aruba Networks
organizationalUnitName Instant
countryName US
(0)SUBJECT NAME
commonName securelogin.arubanetworks.com
localityName Sunnyvale
countryName US
(0)Valid From Jun 5 14:03:02 2024 GMT
(0)Valid Till Jun 3 14:03:03 2034 GMT
(0)Public Key Algorithm rsaEncryption
(0)RSA Public Key (2048 bit)
(0) RSA Public-Key: (2048 bit)
(0) Modulus:
(0) 00:df:31:6c:5f:04:66:a0:81:15:dd:a3:7c:4a:f5:
(0) b4:7f:30:7e:03:b0:f6:c9:b3:4f:11:e9:b1:bf:bc:

(0) eb:73:6f:8b:2f:3c:2d:46:8a:bb:f8:56:8f:35:44:
(0) 0d:c1:b3:c4:d8:7e:04:89:a5:df:d0:ea:a0:4a:c8:
(0) 59:43:5c:f8:1e:d1:ce:ef:51:2c:85:e7:68:33:fb:
(0) 6f:5f:9e:20:b6:02:66:2a:0a:52:73:55:65:2b:05:
(0) e6:4e:d9:24:97:49:48:4a:c0:5c:ac:ab:ba:ff:7c:
(0) 17:62:eb:85:63:b3:90:f6:af:9b:78:43:49:23:0b:
(0) 3b:9f:91:a9:6d:54:bf:6b:f1:78:95:83:58:33:3d:
(0) 6d:09:0c:9c:64:46:52:ac:5d:15:5c:bf:d8:b8:27:
(0) 47:f5:62:a3:16:39:f4:86:ab:3a:f4:d1:a9:df:e3:
(0) 27:93:50:11:c2:a8:47:50:41:c4:17:83:5b:b5:ab:
(0) b8:b0:2c:00:26:3a:89:e8:54:53:0a:25:7e:49:39:
(0) 09:66:58:9e:2a:bf:65:b1:c3:92:ab:b1:fb:21:ab:
(0) a4:49:c2:eb:92:ac:a1:aa:81:62:00:73:23:9e:c1:
(0) df:87:81:37:b7:0d:a9:e4:c7:77:2d:7e:47:a6:91:
(0) b3:e1:49:1e:64:b4:0f:c4:56:34:86:bd:dc:b0:a2:
(0) 2b:a9
(0) Exponent: 65537 (0x10001)
(0)X509v3 EXTENSIONS
(0)X509v3 Basic Constraints critical
(0) CA:TRUE
(0)X509v3 Key Usage critical
(0) Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
(0)X509v3 Subject Alternative Name DNS:securelogin.arubanetworks.com
(0)Signature (256 octets)
(0) ab:b6:a8:76:a0:ef:08:82:99:9f:c8:5d:ae:25:5b:4a
(0) b4:7c:09:40:38:78:79:98:9d:15:b4:31:9b:13:4a:19
(0) ba:4f:43:c1:9c:93:f7:fd:bd:85:73:af:ad:a0:74:ff
(0) e5:dd:da:ed:7c:f4:54:83:89:57:29:54:d4:b8:a1:be
(0) 14:e6:7a:57:fa:93:44:54:e8:27:b1:f8:49:b1:fd:01
(0) 06:74:5d:6c:e0:9b:fc:f6:68:8f:66:de:54:f3:c1:fc
(0) 03:de:82:69:c2:32:bf:f1:d2:d9:fe:9f:09:34:1e:d1
(0) 48:ca:9f:56:f0:59:92:36:eb:2e:cb:ab:b5:7a:a5:5c
(0) aa:ab:b0:5b:b8:39:b5:cf:1f:8c:2e:29:27:10:99:03
(0) cc:e9:9c:48:65:49:97:78:41:39:dc:d7:62:89:31:b9
(0) e8:b9:fd:4b:86:c0:85:c0:c1:42:7b:c3:fd:de:65:e1
(0) de:b3:ac:35:db:3d:92:ea:68:00:29:96:d0:41:9c:6f
(0) 0d:1a:1e:c3:17:b5:0f:55:0f:ba:9e:09:a1:31:29:ef
(0) 4b:6d:40:27:44:80:e5:78:d6:b7:ed:78:3a:56:15:86
(0) 23:98:ab:fc:b4:fd:03:17:43:10:95:93:67:4d:50:53
(0) a1:48:75:a8:99:47:5b:e9:80:b9:05:28:e5:df:0b:df
1 SSH daemon information retrieving port 22/tcp
QID: 38047
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:

SSH is a secure protocol, provided it is fully patched, properly configured, and uses FIPS approved algorithms.
For Red Hat ES 4:-

SSH1 supported yes
Supported authentification methods for SSH1 RSA,password
Supported ciphers for SSH1 3des,blowfish
SSH2 supported yes
Supported keys exchange algorithm for SSH2 diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
Supported decryption ciphers for
SSH2 aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-c
tr
Supported encryption ciphers for
SSH2 aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-c
tr
Supported decryption mac for SSH2 hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
Supported encryption mac for SSH2 hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
Supported authentification methods for SSH2 publickey,gssapi-with-mic,password
IMPACT:
Successful exploitation allows an attacker to execute arbitrary commands on the SSH server or otherwise subvert an encrypted SSH channel with
arbitrary data.
SOLUTION:
SSH version 2 is preferred over SSH version 1.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
SSH1 supported no
SSH2 supported yes
Supported key exchange algorithms for SSH2 ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521
Supported host key algorithms for SSH2 rsa-sha2-512, rsa-sha2-256, ecdsa-sha2-nistp256, ssh-ed25519
Supported decryption ciphers for SSH2 aes128-ctr, aes192-ctr, aes256-ctr, aes128-cbc, aes192-cbc, aes256-cbc
Supported encryption ciphers for SSH2 aes128-ctr, aes192-ctr, aes256-ctr, aes128-cbc, aes192-cbc, aes256-cbc
Supported decryption macs for SSH2 hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com,
hmac-sha2-256, hmac-sha2-512
Supported encryption macs for SSH2 hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com,
hmac-sha2-256, hmac-sha2-512
Supported decompression for SSH2 none, zlib@openssh.com
Supported compression for SSH2 none, zlib@openssh.com
Supported authentication methods for SSH2 password
1 SSH Banner port 22/tcp
QID: 38050
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No

THREAT:
Secure Shell is a cryptographic network protocol for operating network services securely over an unsecured network.
IMPACT:
NA
SOLUTION:
NA
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
SSH-2.0-OpenSSH
1 Default Web Page port 80/tcp
QID: 12230
Category: CGI
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The Result section displays the default Web page for the Web server.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:

RESULTS:
GET / HTTP/1.1
Host: 192.168.60.58
<HTML>
<H4>302 </H4>
</BODY>
</HTML>
1 Default Web Page ( Follow HTTP Redirection) port 80/tcp
QID: 13910
Category: CGI
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The Result section displays the default Web page for the Web server following HTTP redirections.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
GET / HTTP/1.1
Host: 192.168.60.58
<HTML>
<H4>302 </H4>
</BODY>
</HTML>

1 HTTP Response Method and Header Information Collected port 80/tcp
QID: 48118
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
This QID prints the information, in the form of a text record, that a web server sends back to a client's browser in response to receiving a single
HTTP GET request.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
HTTP header and method information collected on port 80.
GET / HTTP/1.1
Host: 192.168.60.58
HTTP/1.1 302
Server:
Date: Tue, 02 Jul 2024 11:15:19 GMT
Cache-Control: no-cache,no-store,must-revalidate,post-check=0,pre-check=0
Location: https://192.168.60.53:4343/
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Connection: close
1 Referrer-Policy HTTP Security Header Not Detected port 80/tcp
QID: 48131
Associated CVEs: -
Vendor Reference: Referrer-Policy

Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
No Referrer Policy is specified for the link. It checks for one of the following Referrer Policy in the response headers:
1) no-referrer
2) no-referrer-when-downgrade
3) same-origin
4) origin
5) origin-when-cross-origin
6) strict-origin
7) strict-origin-when-cross-origin
IMPACT:
The Referrer-Policy header controls how much referrer information is sent to a site when navigating to it. Absence of Referrer-Policy header can
lead to leakage of sensitive information via the referrer header.
SOLUTION:
Referrer Policy header improves security by ensuring websites don't leak sensitive information via the referrer header. It's recommended to add
secure Referrer Policies as a part of a defense-in-depth approach.
References:
- https://www.w3.org/TR/referrer-policy/ (https://www.w3.org/TR/referrer-policy/)
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy)
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Referrer-Policy HTTP Header missing on 80 port.

GET / HTTP/1.1
Host: 192.168.60.58
1 HTTP Strict Transport Security (HSTS) Support Detected port 80/tcp
QID: 86137
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:

HTTP Strict Transport Security (HSTS) is an opt-in security enhancement that is specified by a web application through the use of a special
response header. Once a supported browser receives this header that browser will prevent any communications from being sent over HTTP to the
specified domain and will instead send all communications over HTTPS.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 HTTP Service Unavailable Replies Received port 80/tcp
QID: 86383
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
We have received "503 Service Unavailable" replies in response to our HTTP requests. The server is temporarily unable to service your
request due to maintenance downtime or capacity problems.
IMPACT:
The detection of possible Web Server vulnerabilities can be inconsistent as follows.
- Because our scanner could not access to this service,

there are possibility of missing some vulnerabilities which should be detected.
- If the target host is a Windows host, there is a possibility

that some
vulnerabilities for IIS that should be detected were not detected.
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:

ASSOCIATED MALWARE:
RESULTS:
HTTP/1.1 503 Service Unavailable

Server:
Date: Tue, 02 Jul 2024 11:21:12 GMT
Connection: close
<HTML>
<HEAD><TITLE>503 Service Unavailable</TITLE></HEAD>
<H4>503 Service Unavailable</H4>
REST API service is available only on Master IAP
</BODY>
</HTML>
1 List of Web Directories port 80/tcp
QID: 86672
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Based largely on the HTTP reply code, the following directories are most likely present on the host.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Directory Source
/images/ brute force
/core/ brute force
/owa/auth/ brute force
/auth/ brute force
/images/ web page
/styles/ web page
/jscripts/ web page
/jscripts/third_party/ web page

1 Apache Default Foreign Language File Still on Server port 80/tcp
QID: 86743
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Apache installs foreign language files along with index.html. The files are as follows:
index.html.ca
index.html.de
index.html.dk
index.html.ee
An attacker can get additional information about the Web server from these files.
IMPACT:
Sensitive system information may be disclosed, which can be utilized by an attacker to aid further attacks.
SOLUTION:
Apache recommends to remove these files from the Web server.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
GET /index.html.ru.iso-ru HTTP/1.1

Host: 192.168.60.58
1 SSL Server Information Retrieval port 4343/tcp over SSL
QID: 38116
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following is a list of supported SSL ciphers.

Note: If a cipher is included in this list it means that it was possible to establish a SSL connection using that cipher. There are some web servers
setups that allow connections to be established using a LOW grade cipher, only to provide a web page stating that the URL is accessible only through
a non-LOW grade cipher. In this case even though LOW grade cipher will be listed here QID 38140 will not be reported.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
CIPHER KEY-EXCHANGE AUTHENTICATION MAC ENCRYPTION(KEY-STRENGTH) GRADE
TLSv1 PROTOCOL IS DISABLED
TLSv1.2 PROTOCOL IS ENABLED
TLSv1.2 COMPRESSION METHOD None
ECDHE-RSA-AES128-SHA256 ECDH RSA SHA256 AES(128) MEDIUM
ECDHE-RSA-AES256-SHA384 ECDH RSA SHA384 AES(256) HIGH
ECDHE-RSA-AES128-GCM-SHA256 ECDH RSA AEAD AESGCM(128) MEDIUM
ECDHE-RSA-AES256-GCM-SHA384 ECDH RSA AEAD AESGCM(256) HIGH
1 SSL Session Caching Information port 4343/tcp over SSL
QID: 38291
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
SSL session is a collection of security parameters that are negotiated by the SSL client and server for each SSL connection. SSL session caching is
targeted to reduce the overhead of negotiations in recurring SSL connections. SSL sessions can be reused to resume an earlier connection or to
establish multiple simultaneous connections. The client suggests an SSL session to be reused by identifying the session with a Session-ID during
SSL handshake. If the server finds it appropriate to reuse the session, then they both proceed to secure communication with already known security
parameters.
This test determines if SSL session caching is enabled on the host.
IMPACT:
SSL session caching is part of the SSL and TLS protocols and is not a security threat. The result of this test is for informational purposes

only.
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
TLSv1.2 session caching is enabled on the target.
1 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Invalid Protocol Version Tolerance port 4343/tcp over SSL
QID: 38597
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
SSL/TLS protocols have different version that can be supported by both the client and the server. This test attempts to send invalid protocol
versions to the target in order to find out what is the target's behavior. The results section contains a table that indicates what was the
target's response to each of our tests.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
my version target version
0304 0303
0399 0303
0400 0303
0499 0303

1 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Key Exchange Methods port 4343/tcp over SSL
QID: 38704
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following is a list of SSL/TLS key exchange methods supported by the server, along with their respective key sizes, strengths and ciphers.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
CIPHER NAME GROUP KEY-SIZE FORWARD-SECRET CLASSICAL-STRENGTH QUANTUM-STRENGTH
TLSv1.2
1 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Protocol Properties port 4343/tcp over SSL
QID: 38706
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
The following is a list of detected SSL/TLS protocol properties.
IMPACT:

Items include:
Extended Master Secret: indicates whether the extended_master_secret extension is supported or required by the server. This extension enhances
security and is recommended. Applicable to TLSv1, TLSv1.1, TLSv1.2, DTLSv1, DTLSv1.2
Encrypt Then MAC: indicates whether the encrypt_then_mac extension is supported or required by the server. This extension enhances the security
of non-AEAD ciphers and is recommended. Applicable to TLSv1, TLSv1.1, TLSv1.2, DTLSv1, DTLSv1.2
Heartbeat: indicates whether the heartbeat extension is supported. It is not recommended to enable this, except for DTLS. Applicable to TLSv1,
TLSv1.1, TLSv1.2, TLSv1.3, DTLSv1, DTLSv1.2
Truncated HMAC: indicates whether the truncated_hmac extension is supported. This can degrade security and is not recommended. Applicable to
TLSv1, TLSv1.1, TLSv1.2, DTLSv1, DTLSv1.2
Cipher priority: indicates whether client, server or both determine the priority of ciphers. Having the server determine the priority is
recommended. Applicable to SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3, DTLSv1, DTLSv1.2
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
NAME STATUS
TLSv1.2
Extended Master Secret no
Encrypt Then MAC no
Heartbeat yes
Truncated HMAC no
Cipher priority controlled by client
OCSP stapling no
SCT extension no
1 TLS Secure Renegotiation Extension Support Information port 4343/tcp over SSL
QID: 42350
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS
connection with the target server, injects content of his choice, and then splices in a new TLS connection from a client. The server treats the
client's initial TLS handshake as a renegotiation and thus believes that the initial data transmitted by the attacker is from the same entity as
the subsequent client data. TLS protocol was extended to cryptographically tierenegotiations to the TLS connections they are being performed
over. This is referred to as TLS secure renegotiation extension. This detection determines whether the TLS secure renegotiation extension is
supported by the server or not.
IMPACT:

N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
TLS Secure Renegotiation Extension Status: supported.
1 SSL Certificate - Information port 4343/tcp over SSL
QID: 86002
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
SSL certificate information is provided in the Results section.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
NAME VALUE
(0)CERTIFICATE 0
(0)Version 3 (0x2)
(0)Serial Number 46 (0x2e)
(0)Signature Algorithm sha256WithRSAEncryption
(0)ISSUER NAME
commonName Aruba515-USQMKD559Q

countryName US
(0)SUBJECT NAME
commonName setmeup.arubanetworks.com
localityName Sunnyvale
countryName US
(0)Valid From Jun 5 14:03:02 2024 GMT
(0)Valid Till Jun 3 14:03:03 2034 GMT
(0)Public Key Algorithm rsaEncryption
(0)RSA Public Key (2048 bit)
(0) RSA Public-Key: (2048 bit)
(0) Modulus:
(0) 00:df:31:6c:5f:04:66:a0:81:15:dd:a3:7c:4a:f5:
(0) b4:7f:30:7e:03:b0:f6:c9:b3:4f:11:e9:b1:bf:bc:
(0) eb:73:6f:8b:2f:3c:2d:46:8a:bb:f8:56:8f:35:44:
(0) 0d:c1:b3:c4:d8:7e:04:89:a5:df:d0:ea:a0:4a:c8:
(0) 59:43:5c:f8:1e:d1:ce:ef:51:2c:85:e7:68:33:fb:
(0) 6f:5f:9e:20:b6:02:66:2a:0a:52:73:55:65:2b:05:
(0) e6:4e:d9:24:97:49:48:4a:c0:5c:ac:ab:ba:ff:7c:
(0) 17:62:eb:85:63:b3:90:f6:af:9b:78:43:49:23:0b:
(0) 3b:9f:91:a9:6d:54:bf:6b:f1:78:95:83:58:33:3d:
(0) 6d:09:0c:9c:64:46:52:ac:5d:15:5c:bf:d8:b8:27:
(0) 47:f5:62:a3:16:39:f4:86:ab:3a:f4:d1:a9:df:e3:
(0) 27:93:50:11:c2:a8:47:50:41:c4:17:83:5b:b5:ab:
(0) b8:b0:2c:00:26:3a:89:e8:54:53:0a:25:7e:49:39:
(0) 09:66:58:9e:2a:bf:65:b1:c3:92:ab:b1:fb:21:ab:
(0) a4:49:c2:eb:92:ac:a1:aa:81:62:00:73:23:9e:c1:
(0) df:87:81:37:b7:0d:a9:e4:c7:77:2d:7e:47:a6:91:
(0) b3:e1:49:1e:64:b4:0f:c4:56:34:86:bd:dc:b0:a2:
(0) 2b:a9
(0) Exponent: 65537 (0x10001)
(0)X509v3 EXTENSIONS
(0)X509v3 Basic Constraints critical
(0) CA:TRUE
(0)X509v3 Key Usage critical
(0) Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
(0)X509v3 Subject Alternative Name DNS:securelogin.arubanetworks.com
(0)Signature (256 octets)
(0) 06:33:75:1f:4b:93:ef:c5:fd:85:51:c2:0f:6d:c3:a7
(0) 3d:f5:72:86:98:21:24:89:63:fe:97:05:a6:75:c4:13
(0) 1f:8d:60:3c:a3:2a:6a:f5:e6:ea:e1:73:cd:ae:97:3a
(0) ef:6d:26:64:3b:18:6d:39:98:2a:dd:fb:e7:d3:69:fd
(0) 6c:db:03:29:94:fb:c8:7c:42:bf:20:bc:0f:6e:5d:ab
(0) 37:9d:09:30:cf:a8:d1:82:da:e5:25:49:a0:01:fc:0b
(0) 06:67:43:52:bc:f9:14:a9:a7:d9:78:9d:ad:6a:22:25
(0) b6:de:ab:d7:7f:af:e6:fd:e2:aa:7d:9b:b7:a8:64:f3
(0) d3:fe:79:5b:e6:69:48:c6:41:1b:07:c3:e0:15:0c:fb
(0) 6e:a5:5c:5e:ed:34:df:8b:87:b0:53:89:e4:28:23:b0
(0) 8a:af:97:eb:6d:cc:bb:97:45:b4:a7:5b:9e:a8:68:c4
(0) 87:77:f4:3e:7b:74:f1:1a:4c:3c:31:14:48:53:f5:6f
(0) 3f:24:7a:c4:2a:bf:c0:51:bf:8f:bb:d5:b3:ff:e9:5c

(0) 5a:d8:56:69:71:fa:5c:7b:53:b4:b9:00:a8:36:0e:b1
(0) d7:4f:73:1a:e7:f8:cd:59:a7:46:9c:61:02:1d:f4:68
(0) da:e5:90:4b:47:53:97:bc:b9:1c:3e:43:ba:c9:96:0f
1 HTTP Response Method and Header Information Collected port 443/tcp
QID: 48118
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
This QID prints the information, in the form of a text record, that a web server sends back to a client's browser in response to receiving a single
HTTP GET request.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
HTTP header and method information collected on port 443.
GET / HTTP/1.1
Host: 192.168.60.58
HTTP/1.1 302
Server:
Date: Tue, 02 Jul 2024 11:34:36 GMT
Location: https://192.168.60.53:4343/
Connection: close

1 Referrer-Policy HTTP Security Header Not Detected port 443/tcp
QID: 48131
Associated CVEs: -
Vendor Reference: Referrer-Policy
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
No Referrer Policy is specified for the link. It checks for one of the following Referrer Policy in the response headers:
1) no-referrer
2) no-referrer-when-downgrade
3) same-origin
4) origin
5) origin-when-cross-origin
6) strict-origin
7) strict-origin-when-cross-origin
IMPACT:
The Referrer-Policy header controls how much referrer information is sent to a site when navigating to it. Absence of Referrer-Policy header can
lead to leakage of sensitive information via the referrer header.
SOLUTION:
Referrer Policy header improves security by ensuring websites don't leak sensitive information via the referrer header. It's recommended to add
secure Referrer Policies as a part of a defense-in-depth approach.
References:
- https://www.w3.org/TR/referrer-policy/ (https://www.w3.org/TR/referrer-policy/)
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy)
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Referrer-Policy HTTP Header missing on 443 port.

GET / HTTP/1.1
Host: 192.168.60.58
1 HTTP Strict Transport Security (HSTS) Support Detected port 443/tcp
QID: 86137
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No

PCI Vuln: No
THREAT:
HTTP Strict Transport Security (HSTS) is an opt-in security enhancement that is specified by a web application through the use of a special
response header. Once a supported browser receives this header that browser will prevent any communications from being sent over HTTP to the
specified domain and will instead send all communications over HTTPS.
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 HTTP Service Unavailable Replies Received port 443/tcp
QID: 86383
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
We have received "503 Service Unavailable" replies in response to our HTTP requests. The server is temporarily unable to service your
request due to maintenance downtime or capacity problems.
IMPACT:
The detection of possible Web Server vulnerabilities can be inconsistent as follows.
- Because our scanner could not access to this service,

there are possibility of missing some vulnerabilities which should be detected.
- If the target host is a Windows host, there is a possibility

that some
vulnerabilities for IIS that should be detected were not detected.
SOLUTION:
N/A

COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
HTTP/1.1 503 Service Unavailable

Server:
Date: Tue, 02 Jul 2024 11:42:49 GMT
Connection: close
<HTML>
<HEAD><TITLE>503 Service Unavailable</TITLE></HEAD>
<H4>503 Service Unavailable</H4>
REST API service is available only on Master IAP
</BODY>
</HTML>
1 List of Web Directories port 443/tcp
QID: 86672
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Based largely on the HTTP reply code, the following directories are most likely present on the host.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
Directory Source
/images/ brute force
/core/ brute force
/owa/auth/ brute force
/auth/ brute force
/images/ web page

/styles/ web page
/jscripts/ web page
/jscripts/third_party/ web page
1 Apache Default Foreign Language File Still on Server port 443/tcp
QID: 86743
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
Apache installs foreign language files along with index.html. The files are as follows:
index.html.ca
index.html.de
index.html.dk
index.html.ee
An attacker can get additional information about the Web server from these files.
IMPACT:
Sensitive system information may be disclosed, which can be utilized by an attacker to aid further attacks.
SOLUTION:
Apache recommends to remove these files from the Web server.
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
GET /index.html.ru.iso-ru HTTP/1.1

Host: 192.168.60.58
192.168.80.1 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -

User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:

ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
192.168.80.2 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A

SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,

1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No

PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
192.168.80.5 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:

RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -

User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:

ASSOCIATED MALWARE:
RESULTS:
192.168.80.6 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -

User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:

IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

192.168.80.7 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:

N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:

Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
192.168.80.8 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No

PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:

RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
192.168.80.9 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:

Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.

QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:

COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
192.168.80.10 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected

QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:

IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

192.168.80.11 (-, -)
1 DNS Host Name
QID: 6
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
1 Firewall Detected
QID: 34011
Category: Firewall
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:

N/A
SOLUTION:
N/A
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

1-3,5,7,9,11,13,15,17-25,27,29,31,33,35,37-39,41-223,242-246,256-265,
280-282,309,311,318,322-325,344-351,363,369-381,383-581,587,592-593,598,
600,606-620,624,627,631,633-637,666-674,700,704-705,707,709-711,729-731,
740-742,744,747-754,758-765,767,769-777,780-783,786,799-801,860,873,886-888,
900-901,911,950,954-955,990-993,995-1001,1008,1010-1011,1015,1023-1100,
1109-1112,1114,1123,1155,1167,1170,1207,1212,1214,1220-1222,1234-1236,
1241,1243,1245,1248,1269,1313-1314,1337,1344-1559,1561-1625,1636-1705,
1707-1721,1723-1774,1776-1815,1818-1824,1900-1909,1911-1920,1944-1951,
1973,1981,1985-1999,2001-2028,2030,2032-2033,2035,2038,2040-2049,2053,
2065, and more.
QID: 45038
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
IMPACT:
N/A
SOLUTION:
N/A
COMPLIANCE:

Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:
QID: 82056
Category: TCP/IP
Associated CVEs: -
Vendor Reference: -
Bugtraq ID: -
User Modified: -
Edited: No
PCI Vuln: No
THREAT:
COMPLIANCE:
Not Applicable
EXPLOITABILITY:
ASSOCIATED MALWARE:
RESULTS:

Appendix
Hosts Scanned (IP)

14.194.146.82, 115.242.131.6, 192.168.60.58, 192.168.80.1-192.168.80.2, 192.168.80.5-192.168.80.11
Target distribution across scanner appliances

SGX_HYD : 14.194.146.82, 115.242.131.6, 192.168.60.58, 192.168.80.1-192.168.80.2, 192.168.80.5-192.168.80.11
Options Profile
Initial Options
Scan Settings
Ports:
Scanned TCP Ports: Standard Scan
Scanned UDP Ports: Standard Scan
Scan Dead Hosts: Off
Close Vulnerabilities on Dead Hosts Count: Off
Purge old host data when OS changes: Off
Load Balancer Detection: Off
Perform 3-way Handshake: Off
Vulnerability Detection: Complete
Intrusive Checks: Excluded
Excluded Search Lists: Network - Exceptions
Excluded QIDs: 11827 HTTP Security Header Not Detected
13607 Host is Vulnerable to Extended Master Secret TLS Extension (TLS
triple handshake)
38169 SSL Certificate - Self-Signed Certificate
38170 SSL Certificate - Subject Common Name Does Not Match Server FQDN
38171 SSL Certificate - Server Public Key Too Small
38172 SSL Certificate - Improper Usage Vulnerability
38173 SSL Certificate - Signature Verification Failed Vulnerability
38229 Service Stopped Responding
38304 SSH Protocol Version 1 Supported
38433 SIP UDP Transport Supported
38523 SSH Weak Cipher Used
38598 Deprecated Public Key Length
38601 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Use of
Weak Cipher Rivest Cipher 4 (RC4/ARC4/ARCFOUR)
38628 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Server
supports Transport Layer Security (TLSv1.0)
38655 X.509 Certificate SHA1 Signature Collision Vulnerability
38657 Birthday attacks against TLS ciphers with 64bit block size
vulnerability (Sweet32)
38666 SNMP GETBULK Reflected Distributed Denial Of Service (DoS)
Vulnerability
38670 Dropbear SSH Multiple Security Vulnerabilities
38685 SSL Certificate - Invalid Maximum Validity Date Detected
38738 SSH Server Public Key Too Small
38739 Deprecated SSH Cryptographic Settings
38794 Secure Sockets Layer/Transport Layer Security (SSL/TLS) Server
Supports Transport Layer Security (TLSv1.1)
38863 Weak SSL/TLS Key Exchange
38909 SHA1 deprecated setting for SSH
42366 SSLv3.0/TLSv1.0 Protocol Weak CBC Mode Server Side Vulnerability
(BEAST)
42395 Encrypted Management Interfaces Accessible On Cisco Device
45242 Remote Management Service Accepting Unencrypted Credentials
Detected(HTTP)
48168 Remote Management Service Accepting Unencrypted Credentials
Detected (Telnet)
78031 Writeable SNMP Information
82024 UDP Constant IP Identification Field Fingerprinting Vulnerability
82054 TCP Sequence Number Approximation Based Denial of Service
105459 EOL/Obsolete Software: SNMP Protocol Version 1/2c Detected
316187 Cisco Adaptive Security Appliance Remote Code Execution and
Denial of Service Vulnerability (cisco-sa-20180129-asa1)

Password Brute Forcing:
System: Disabled
Custom: Disabled
Authentication:
Windows: Disabled
Unix/Cisco/Network SSH: Disabled
Unix Least Privilege Authentication: Disabled
Oracle: Disabled
Oracle Listener: Disabled
SNMP: Disabled
VMware: Disabled
DB2: Disabled
HTTP: Disabled
MySQL: Disabled
Tomcat Server: Disabled
MongoDB: Disabled
Palo Alto Networks Firewall: Disabled
Jboss Server: Disabled
Oracle WebLogic Server: Disabled
MariaDB: Disabled
InformixDB: Disabled
MS Exchange Server: Disabled
Oracle HTTP Server: Disabled
MS SharePoint: Disabled
Sybase: Disabled
Kubernetes: Disabled
SAP IQ: Disabled
SAP HANA: Disabled
Azure MS SQL: Disabled
Neo4j: Disabled
NGINX: Disabled
Infoblox: Disabled
BIND: Disabled
Cisco_APIC: Disabled
Cassandra: Disabled
Overall Performance: Normal
Additional Certificate Detection:
Authenticated Scan Certificate Discovery: Disabled
Test Authentication: Disabled
Hosts to Scan in Parallel:
Use Appliance Parallel ML Scaling: Off
External Scanners: 15
Scanner Appliances: 30
Processes to Run in Parallel:
Total Processes: 10
HTTP Processes: 10
Packet (Burst) Delay: Medium
Port Scanning and Host Discovery:
Intensity: Normal
Dissolvable Agent:
Dissolvable Agent (for this profile): Disabled
Windows Share Enumeration: Disabled
Windows Directory Search: Disabled

Lite OS Discovery: Disabled
Host Alive Testing: Disabled
Do Not Overwrite OS: Disabled
Perform Partial SSL/TLS Auditing: Enabled
Advanced Settings
Host Discovery: TCP Standard Scan, UDP Standard Scan, ICMP On
Ignore firewall-generated TCP RST packets: Off
Ignore all TCP RST packets: Off
Ignore firewall-generated TCP SYN-ACK packets: Off
Do not send TCP ACK or SYN-ACK packets during host discovery: Off
Report Legend
Vulnerability Levels
A Vulnerability is a design flaw or mis-configuration which makes your network (or a host on your network) susceptible to malicious attacks from local or
remote users. Vulnerabilities can exist in several areas of your network, such as in your firewalls, FTP servers, Web servers, operating systems or CGI bins.
Depending on the level of the security risk, the successful exploitation of a vulnerability can vary from the disclosure of information about the host to a
complete compromise of the host.
Severity Level Description
1 Minimal Intruders can collect information about the host (open ports, services, etc.) and may be
able to use this information to find other vulnerabilities.
2 Medium Intruders may be able to collect sensitive information from the host, such as the
precise version of software installed. With this information, intruders can easily
exploit known vulnerabilities specific to software versions.
3 Serious Intruders may be able to gain access to specific information stored on the host,
including security settings. This could result in potential misuse of the host by
intruders. For example, vulnerabilities at this level may include partial disclosure of
file contents, access to certain files on the host, directory browsing, disclosure of
filtering rules and security mechanisms, denial of service attacks, and unauthorized use
of services, such as mail-relaying.
4 Critical Intruders can possibly gain control of the host, or there may be potential leakage of
highly sensitive information. For example, vulnerabilities at this level may include
full read access to files, potential backdoors, or a listing of all the users on the
host.
5 Urgent Intruders can easily gain control of the host, which can lead to the compromise of your
entire network security. For example, vulnerabilities at this level may include full
read and write access to files, remote execution of commands, and the presence of
backdoors.
Potential Vulnerability Levels
A potential vulnerability is one which we cannot confirm exists. The only way to verify the existence of such vulnerabilities on your network would be to perform
an intrusive scan, which could result in a denial of service. This is strictly against our policy. Instead, we urge you to investigate these potential
vulnerabilities further.
1 Minimal If this vulnerability exists on your system, intruders can collect information about the
host (open ports, services, etc.) and may be able to use this information to find other
vulnerabilities.
2 Medium If this vulnerability exists on your system, intruders may be able to collect sensitive
information from the host, such as the precise version of software installed. With this
information, intruders can easily exploit known vulnerabilities specific to software
versions.
3 Serious If this vulnerability exists on your system, intruders may be able to gain access to
specific information stored on the host, including security settings. This could result
in potential misuse of the host by intruders. For example, vulnerabilities at this level
may include partial disclosure of file contents, access to certain files on the host,
directory browsing, disclosure of filtering rules and security mechanisms, denial of
service attacks, and unauthorized use of services, such as mail-relaying.
4 Critical If this vulnerability exists on your system, intruders can possibly gain control of the
host, or there may be potential leakage of highly sensitive information. For example,

vulnerabilities at this level may include full read access to files, potential backdoors, or a listing of all the users on the host.
5 Urgent If this vulnerability exists on your system, intruders can easily gain control of the
host, which can lead to the compromise of your entire network security. For example,
vulnerabilities at this level may include full read and write access to files, remote
execution of commands, and the presence of backdoors.
Information Gathered
Information Gathered includes visible information about the network related to the host, such as traceroute information, Internet Service Provider (ISP), or a
list of reachable hosts. Information Gathered severity levels also include Network Mapping data, such as detected firewalls, SMTP banners, or a list of open
TCP services.
1 Minimal Intruders may be able to retrieve sensitive information related to the host, such as
open UDP and TCP services lists, and detection of firewalls.
2 Medium Intruders may be able to determine the operating system running on the host, and view banner versions.
3 Serious Intruders may be able to detect highly sensitive data, such as global system user lists.
CONFIDENTIAL AND PROPRIETARY INFORMATION.

Qualys provides the QualysGuard Service "As Is," without any warranty of any kind. Qualys makes no warranty that the information contained in this
report is complete or error-free. Copyright 2024, Qualys, Inc.

VA-Pre Vulnerability scan for July-24

Uploaded by

Copyright:

Available Formats

You might also like

VA-Pre Vulnerability scan for July-24

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

VA-Pre Vulnerability scan for July-24

Uploaded by

Copyright:

Available Formats

Scan Results

July 05, 2024

Vulnerabilities Total 98 Security Risk (Avg) 0.3

Scan Results page 1

Operating Systems Detected

Scan Results page 2

Information Gathered (9)

3 Remote Access or Management Service Detected

Consequences vary by the type of attack.

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

Service name: ISAKMP on UDP port 500.

1 DNS Host Name

Scan Results page 3

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

1 Target Network Information

Scan Results page 4

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

The network handle is: APNIC-14

Scan Results page 5

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

1 Host Scan Time - Scanner

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

Scan duration: 497 seconds

Start time: Tue, Jul 02 2024, 11:11:53 GMT

Scan Results page 6

1 Host Names Found

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

1 Scan Activity per Port

Scan Results page 7

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

1 Open UDP Services List

There is no exploitability information for this vulnerability.

Scan Results page 8

Information Gathered (4)

1 DNS Host Name

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

Scan Results page 9

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

Listed below are the ports filtered by the firewall.

1 Host Scan Time - Scanner

Scan Results page 10

There is no exploitability information for this vulnerability.

There is no malware information for this vulnerability.

Scan duration: 474 seconds

Start time: Tue, Jul 02 2024, 11:11:53 GMT

End time: Tue, Jul 02 2024, 11:19:47 GMT

1 Host Name Not Available

There is no exploitability information for this vulnerability.