Americasbodega

Scan Report
December 13, 2022
Summary
This document reports on the results of an automatic security scan. All dates are dis-
played using the timezone Coordinated Universal Time, which is abbreviated UTC. The
task was AmericasBodega. The scan started at Tue Dec 13 16:13:48 2022 UTC and ended
at Tue Dec 13 16:43:45 2022 UTC. The report rst summarises the results found. Then, for
each host, the report describes every issue found. Please consider the advice given in each
description, in order to rectify the issue.
Contents
1 Result Overview 2
1.1 Host Authentications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
2 Results per Host 2

2.1 192.168.88.250 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
2.1.1 High 445/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2.1.2 High 9/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.1.3 Medium 17/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.1.4 Medium 135/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.1.5 Medium 19/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.1.6 Medium 7/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
2.1.7 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
2.2 192.168.88.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
2.2.1 High general/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
2.2.2 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
2.2.3 Low general/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
2.3 192.168.88.253 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.3.1 Medium 80/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.3.2 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.4 192.168.88.254 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.4.1 Low general/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.4.2 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
1
1 RESULT OVERVIEW 2
1 Result Overview
Host High Medium Low Log False Positive

192.168.88.250 2 4 1 0 0
192.168.88.1 1 0 2 0 0
192.168.88.253 0 2 1 0 0
192.168.88.254 0 0 2 0 0
Total: 4 3 6 6 0 0
Vendor security updates are not trusted.

Overrides are o. Even when a result has an override, this report uses the actual threat of the
result.
Information on overrides is included in the report.
Notes are included in the report.
This report might not show details of all issues that were found.
Issues with the threat level Log are not shown.
Issues with the threat level Debug are not shown.
Issues with the threat level False Positive are not shown.
Only results with a minimum QoD of 70 are shown.
This report contains all 15 results selected by the ltering described above. Before ltering
there were 110 results.
1.1 Host Authentications
Host Protocol Result Port/User

192.168.88.250 SMB Success Protocol SMB, Port 445, User
2 Results per Host

2.1 192.168.88.250
Host scan start Tue Dec 13 16:14:26 2022 UTC

Host scan end Tue Dec 13 16:38:20 2022 UTC
Service (Port) Threat Level

445/tcp High
9/tcp High
17/tcp Medium
135/tcp Medium
19/tcp Medium
7/tcp Medium
. . . (continues) . . .
2 RESULTS PER HOST 3
. . . (continued) . . .
general/icmp Low
2.1.1 High 445/tcp
High (CVSS: 7.5)

NVT: Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability
Summary
Microsoft Windows is prone to an authentication bypass vulnerability via SMB/NETBIOS.
Vulnerability Detection Result

It was possible to login at the share 'IPC$' with an empty login and password.
Impact
Successful exploitation could allow attackers to use shares to cause the system to crash.
Solution:
Solution type: WillNotFix
No known solution was made available for at least one year since the disclosure of this vulnera-
bility. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.
A workaround is to,
- Disable null session login.
- Remove the share.
- Enable passwords on the share.
Aected Software/OS
- Microsoft Windows 95
- Microsoft Windows NT
- Microsoft Windows in other implementations / versions might be aected as well
Vulnerability Insight
The aw is due to an SMB share, allows full access to Guest users. If the Guest account is
enabled, anyone can access the computer without a valid user account or password.
Vulnerability Detection Method

Details: Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability
OID:1.3.6.1.4.1.25623.1.0.801991
Version used: 2022-03-03T10:23:45Z
References
cve: CVE-1999-0519
. . . continues on next page . . .
. . . continued from previous page . . .

url: http://xforce.iss.net/xforce/xfdb/2
url: http://seclab.cs.ucdavis.edu/projects/testing/vulner/38.html
[ return to 192.168.88.250 ]
2.1.2 High 9/tcp
High (CVSS: 10.0)

NVT: Check for discard Service
Summary
The remote host is running a 'discard' service. This service typically sets up a listening socket
and will ignore all the data which it receives.
This service is unused these days, so it is advised that you disable it.

The discard service was detected on the target host.
Solution:
Solution type: Mitigation
- Under Unix systems, comment out the 'discard' line in /etc/inetd.conf and restart the inetd
process
- Under Windows systems, set the following registry key to 0:
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpDiscard
Then launch cmd.exe and type:
net stop simptcp
net start simptcp
To restart the service.

Checks if a vulnerable version is present on the target host.
Details: Check for discard Service
OID:1.3.6.1.4.1.25623.1.0.11367
Version used: 2020-10-01T11:33:30Z
References
cve: CVE-1999-0636
[ return to 192.168.88.250 ]
2.1.3 Medium 17/tcp

Medium (CVSS: 5.0)

NVT: Check for Quote of the Day (qotd) Service (TCP)
Summary
The Quote of the Day (qotd) service is running on this host.

Vulnerability was detected according to the Vulnerability Detection Method.
Impact
An easy attack is 'pingpong' which IP spoofs a packet between two machines running qotd. This
will cause them to spew characters at each other, slowing the machines down and saturating the
network.
Solution:
- Under Unix systems, comment out the 'qotd' line in /etc/inetd.conf and restart the inetd
process
- Under Windows systems, set the following registry keys to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpQotd
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpQotd
Then launch cmd.exe and type :
net stop simptcp
net start simptcp
A server listens for TCP connections on TCP port 17. Once a connection is established a short
message is sent out the connection (and any data received is thrown away). The service closes
the connection after sending the quote.
Remark: NIST don't see 'conguration issues' as software aws so the referenced CVE has a
severity of 0.0. The severity of this VT has been raised by Greenbone to still report a conguration
issue on the target.

Details: Check for Quote of the Day (qotd) Service (TCP)
OID:1.3.6.1.4.1.25623.1.0.10198
Version used: 2021-10-20T09:03:29Z
References
cve: CVE-1999-0103
[ return to 192.168.88.250 ]
2.1.4 Medium 135/tcp

Medium (CVSS: 5.0)

NVT: DCE/RPC and MSRPC Services Enumeration Reporting
Summary
Distributed Computing Environment / Remote Procedure Calls (DCE/RPC) or MSRPC ser-
vices running on the remote host can be enumerated by connecting on port 135 and doing the
appropriate queries.

Here is the list of DCE/RPC or MSRPC services running on this host via the TCP p
,→rotocol:
Port: 49664/tcp
UUID: 12345778-1234-abcd-ef00-0123456789ac, version 1
Endpoint: ncacn_ip_tcp:192.168.88.250[49664]
Named pipe : lsass
Win32 service or process : lsass.exe
Description : SAM access
UUID: 51a227ae-825b-41f2-b4a9-1ac9557a1018, version 1
Annotation: Ngc Pop Key Service
UUID: 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b, version 1
Annotation: Ngc Pop Key Service
UUID: b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86, version 2
Annotation: KeyIso
Port: 49665/tcp
UUID: d95afe70-a6d5-4259-822e-2c84da1ddb0d, version 1
Port: 49666/tcp
UUID: f6beaff7-1e19-4fbb-9f8f-b89e2018337c, version 1
Annotation: Event log TCPIP
Port: 49667/tcp
UUID: 3a9ef155-691d-4449-8d05-09ad57031823, version 1
UUID: 86d35949-83c9-4044-b424-db363231fd0c, version 1
Port: 49668/tcp
UUID: 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1, version 1
UUID: 12345678-1234-abcd-ef00-0123456789ab, version 1
Named pipe : spoolss
Win32 service or process : spoolsv.exe
Description : Spooler service
UUID: 4a452661-8290-4b36-8fbe-7f4093a94978, version 1

UUID: 76f03f96-cdfd-44fc-a22c-64950a001209, version 1
UUID: ae33069b-a2a8-46ee-a235-ddfd339be281, version 1
Port: 49669/tcp
UUID: 6b5bdd1e-528c-422c-af8c-a4079be4fe48, version 1
Annotation: Remote Fw APIs
Port: 49673/tcp
UUID: 367abb81-9844-35f1-ad32-98f038001003, version 2
Note: DCE/RPC or MSRPC services running on this host locally were identified. Re
,→porting this list is not enabled by default due to the possible large size of
,→this list. See the script preferences to enable this reporting.
Impact
An attacker may use this fact to gain more knowledge about the remote host.
Solution:
Filter incoming trac to this ports.

Details: DCE/RPC and MSRPC Services Enumeration Reporting
OID:1.3.6.1.4.1.25623.1.0.10736
Version used: 2022-06-03T10:17:07Z
[ return to 192.168.88.250 ]
2.1.5 Medium 19/tcp
Medium (CVSS: 5.0)

NVT: Check for Chargen Service (TCP)
Summary
The remote host is running a 'chargen' service.

Impact
An easy attack is 'ping-pong' in which an attacker spoofs a packet between two machines running
chargen. This will cause them to spew characters at each other, slowing the machines down and
saturating the network.
Solution:
- Under Unix systems, comment out the 'chargen' line in /etc/inetd.conf and restart the inetd
process
- Under Windows systems, set the following registry keys to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpChargen
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpChargen
Then launch cmd.exe and type :
net stop simptcp
net start simptcp
When contacted, chargen responds with some random characters (something like all the char-
acters in the alphabet in a row). When contacted via TCP, it will continue spewing characters
until the client closes the connection.
The purpose of this service was to mostly to test the TCP/IP protocol by itself, to make sure
that all the packets were arriving at their destination unaltered. It is unused these days, so it
is suggested you disable it, as an attacker may use it to set up an attack against this host, or
against a third party host using this host as a relay.

Details: Check for Chargen Service (TCP)
OID:1.3.6.1.4.1.25623.1.0.10043
Version used: 2021-10-20T09:03:29Z
References
cve: CVE-1999-0103
[ return to 192.168.88.250 ]
2.1.6 Medium 7/tcp
Medium (CVSS: 5.0)

NVT: echo Service Reporting (TCP + UDP)
Summary
An echo Service is running at this Host via TCP and/or UDP.


Solution:
Disable the echo Service.
The echo service is an Internet protocol dened in RFC 862. It was originally proposed for testing
and measurement of round-trip times in IP networks. While still available on most UNIX-like
operating systems, testing and measurement is now performed with the Internet Control Message
Protocol (ICMP), using the applications ping and traceroute.

Details: echo Service Reporting (TCP + UDP)
OID:1.3.6.1.4.1.25623.1.0.100075
Version used: 2021-10-20T09:03:29Z
References
cve: CVE-1999-0635
[ return to 192.168.88.250 ]
2.1.7 Low general/icmp
Low (CVSS: 2.1)

NVT: ICMP Timestamp Reply Information Disclosure
Summary
The remote host responded to an ICMP timestamp request.

Solution:
Various mitigations are possible:
- Disable the support for ICMP timestamp on the remote host completely
- Protect the remote host by a rewall, and block ICMP packets passing through the rewall in
either direction (either completely or only for untrusted networks)


The Timestamp Reply is an ICMP message which replies to a Timestamp message. It consists of
the originating timestamp sent by the sender of the Timestamp as well as a receive timestamp and
a transmit timestamp. This information could theoretically be used to exploit weak time-based
random number generators in other services.

Details: ICMP Timestamp Reply Information Disclosure
OID:1.3.6.1.4.1.25623.1.0.103190
Version used: 2022-11-18T10:11:40Z
References
cve: CVE-1999-0524
url: http://www.ietf.org/rfc/rfc0792.txt
cert-bund: CB-K15/1514
dfn-cert: DFN-CERT-2014-0658
[ return to 192.168.88.250 ]
2.2 192.168.88.1


general/tcp High
general/icmp Low
general/tcp Low
2.2.1 High general/tcp
High (CVSS: 7.5)

NVT: MikroTik RouterOS < 6.46.7, <= 6.47.3, 7.x DoS Vulnerability
Product detection result

cpe:/o:mikrotik:routeros:7.6
Detected by MikroTik RouterOS Detection Consolidation (OID: 1.3.6.1.4.1.25623.1.
,→0.810608)
Summary
MikroTik RouterOS is prone to a denial of service vulnerability in the SMB server.

Installed version: 7.6
Fixed version: None
Solution:
Solution type: VendorFix
Update to version 6.46.7 (long-term version)
Aected Software/OS
MikroTik RouterOS version 6.47.3 and prior and 7.x.
An array index error in MikroTik RouterOS allows an unauthenticated remote attacker to crash
the SMB server via modied setup-request packets, aka SUP-12964.

Details: MikroTik RouterOS < 6.46.7, <= 6.47.3, 7.x DoS Vulnerability
OID:1.3.6.1.4.1.25623.1.0.144572
Version used: 2021-07-22T11:01:40Z
Product Detection Result

Product: cpe:/o:mikrotik:routeros:7.6
Method: MikroTik RouterOS Detection Consolidation
OID: 1.3.6.1.4.1.25623.1.0.810608)
References
cve: CVE-2020-11881
url: https://github.com/botlabsDev/CVE-2020-11881
url: https://forum.mikrotik.com/viewtopic.php?f=2&t=166137
[ return to 192.168.88.1 ]
Low (CVSS: 2.1)

Summary


Solution:

OID:1.3.6.1.4.1.25623.1.0.103190
Version used: 2022-11-18T10:11:40Z
References
cve: CVE-1999-0524
[ return to 192.168.88.1 ]
2.2.3 Low general/tcp
Low (CVSS: 2.6)

NVT: TCP timestamps
Summary
The remote host implements TCP timestamps and therefore allows to compute the uptime.

It was detected that the host implements RFC1323/RFC7323.
The following timestamps were retrieved with a delay of 1 seconds in-between:
Packet 1: 2578662491
Packet 2: 2578663632
Impact

A side eect of this feature is that the uptime of the remote host can sometimes be computed.
Solution:
To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps = 0' to
/etc/sysctl.conf. Execute 'sysctl -p' to apply the settings at runtime.
To disable TCP timestamps on Windows execute 'netsh int tcp set global timestamps=disabled'
Starting with Windows Server 2008 and Vista, the timestamp can not be completely disabled.
The default behavior of the TCP/IP stack on this Systems is to not use the Timestamp options
when initiating TCP connections, but use them if the TCP peer that is initiating communication
includes them in their synchronize (SYN) segment.
See the references for more information.
Aected Software/OS
TCP implementations that implement RFC1323/RFC7323.
The remote host implements TCP timestamps, as dened by RFC1323/RFC7323.

Special IP packets are forged and sent with a little delay in between to the target IP. The
responses are searched for a timestamps. If found, the timestamps are reported.
Details: TCP timestamps
OID:1.3.6.1.4.1.25623.1.0.80091
Version used: 2020-08-24T08:40:10Z
References
url: https://web.archive.org/web/20151213072445/http://www.microsoft.com/en-us/d
,→ownload/details.aspx?id=9152
[ return to 192.168.88.1 ]
2.3 192.168.88.253


80/tcp Medium
general/icmp Low
2.3.1 Medium 80/tcp

Medium (CVSS: 6.1)

NVT: jQuery < 1.9.0 XSS Vulnerability
Summary
jQuery is vulnerable to Cross-site Scripting (XSS) attacks.

Installed version: 1.7.1
Fixed version: 1.9.0
Installation
path / port: /doc/script/LAB.min.js"></script>
<script>
$LAB
.script("doc/script
Solution:
Solution type: VendorFix
Update to version 1.9.0 or later.
Aected Software/OS
jQuery prior to version 1.9.0.
The jQuery(strInput) function does not dierentiate selectors from HTML in a reliable fashion.
In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<'
character anywhere in the string, giving attackers more exibility when attempting to construct
a malicious payload. In xed versions, jQuery only deems the input to be HTML if it explic-
itly starts with the '<' character, limiting exploitability only to attackers who can control the
beginning of a string, which is far less common.

Details: jQuery < 1.9.0 XSS Vulnerability
OID:1.3.6.1.4.1.25623.1.0.141636
Version used: 2021-06-11T08:43:18Z
References
cve: CVE-2012-6708
url: https://bugs.jquery.com/ticket/11290
Medium (CVSS: 4.8)

NVT: Cleartext Transmission of Sensitive Information via HTTP


Summary
The host / application transmits sensitive information (username, passwords) in cleartext via
HTTP.

The following URLs requires Basic Authentication (URL:realm name):
http://192.168.88.253/ISAPI/Security/sessionLogin:"DVRNVRDVS"
http://192.168.88.253/ISAPI/Security:"DVRNVRDVS"
http://192.168.88.253/ISAPI:"DVRNVRDVS"
http://192.168.88.253/SDK:"DVRNVRDVS"
Impact
An attacker could use this situation to compromise or eavesdrop on the HTTP communication
between the client and the server using a man-in-the-middle attack to get access to sensitive data
like usernames or passwords.
Solution:
Solution type: Workaround
Enforce the transmission of sensitive data via an encrypted SSL/TLS connection. Additionally
make sure the host / application is redirecting all users to the secured SSL/TLS connection
before allowing to input sensitive data into the mentioned functions.
Aected Software/OS
Hosts / applications which doesn't enforce the transmission of sensitive data via an encrypted
SSL/TLS connection.

Evaluate previous collected information and check if the host / application is not enforcing the
transmission of sensitive data via an encrypted SSL/TLS connection.
The script is currently checking the following:
- HTTP Basic Authentication (Basic Auth)
- HTTP Forms (e.g. Login) with input eld of type 'password'
Details: Cleartext Transmission of Sensitive Information via HTTP
OID:1.3.6.1.4.1.25623.1.0.108440
Version used: 2020-08-24T15:18:35Z
References
url: https://www.owasp.org/index.php/Top_10_2013-A2-Broken_Authentication_and_Se
,→ssion_Management
url: https://www.owasp.org/index.php/Top_10_2013-A6-Sensitive_Data_Exposure
url: https://cwe.mitre.org/data/definitions/319.html
[ return to 192.168.88.253 ]

Low (CVSS: 2.1)

Summary

Solution:

OID:1.3.6.1.4.1.25623.1.0.103190
Version used: 2022-11-18T10:11:40Z
References
cve: CVE-1999-0524
[ return to 192.168.88.253 ]
2.4 192.168.88.254


general/tcp Low
general/icmp Low
2.4.1 Low general/tcp

Low (CVSS: 2.6)

NVT: TCP timestamps
Summary
The remote host implements TCP timestamps and therefore allows to compute the uptime.

It was detected that the host implements RFC1323/RFC7323.
The following timestamps were retrieved with a delay of 1 seconds in-between:
Packet 1: 103129896
Packet 2: 103130010
Impact
A side eect of this feature is that the uptime of the remote host can sometimes be computed.
Solution:
To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps = 0' to
/etc/sysctl.conf. Execute 'sysctl -p' to apply the settings at runtime.
To disable TCP timestamps on Windows execute 'netsh int tcp set global timestamps=disabled'
Starting with Windows Server 2008 and Vista, the timestamp can not be completely disabled.
The default behavior of the TCP/IP stack on this Systems is to not use the Timestamp options
when initiating TCP connections, but use them if the TCP peer that is initiating communication
includes them in their synchronize (SYN) segment.
See the references for more information.
Aected Software/OS
TCP implementations that implement RFC1323/RFC7323.
The remote host implements TCP timestamps, as dened by RFC1323/RFC7323.

Special IP packets are forged and sent with a little delay in between to the target IP. The
responses are searched for a timestamps. If found, the timestamps are reported.
Details: TCP timestamps
OID:1.3.6.1.4.1.25623.1.0.80091
Version used: 2020-08-24T08:40:10Z
References
url: https://web.archive.org/web/20151213072445/http://www.microsoft.com/en-us/d
,→ownload/details.aspx?id=9152
[ return to 192.168.88.254 ]
Low (CVSS: 2.1)

Summary

Solution:

OID:1.3.6.1.4.1.25623.1.0.103190
Version used: 2022-11-18T10:11:40Z
References
cve: CVE-1999-0524
[ return to 192.168.88.254 ]
This le was automatically generated.

Americasbodega

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Americasbodega

Uploaded by

Copyright:

Available Formats

Scan Report

December 13, 2022

2 Results per Host 2

2.1.1 High 445/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

2.1.2 High 9/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

2.1.3 Medium 17/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

2.1.4 Medium 135/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

2.1.5 Medium 19/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2.1.6 Medium 7/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

2.1.7 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

2.2.1 High general/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

2.2.2 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2.3 Low general/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2.3.1 Medium 80/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.3.2 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.4.1 Low general/tcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

2.4.2 Low general/icmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Host High Medium Low Log False Positive

Vendor security updates are not trusted.

1.1 Host Authentications

Host Protocol Result Port/User

2 Results per Host

Host scan start Tue Dec 13 16:14:26 2022 UTC

Service (Port) Threat Level

2.1.1 High 445/tcp

High (CVSS: 7.5)

Vulnerability Detection Result

Vulnerability Detection Method

. . . continued from previous page . . .

2.1.2 High 9/tcp

High (CVSS: 10.0)

Vulnerability Detection Result

Vulnerability Detection Method

2.1.3 Medium 17/tcp

Medium (CVSS: 5.0)

Vulnerability Detection Result

Vulnerability Detection Method

2.1.4 Medium 135/tcp

Medium (CVSS: 5.0)

Vulnerability Detection Result

. . . continued from previous page . . .

Vulnerability Detection Method

2.1.5 Medium 19/tcp

Medium (CVSS: 5.0)

Vulnerability Detection Result

. . . continued from previous page . . .

Vulnerability Detection Method

2.1.6 Medium 7/tcp

Medium (CVSS: 5.0)

Vulnerability Detection Result

. . . continued from previous page . . .

Vulnerability Detection Method

2.1.7 Low general/icmp

Low (CVSS: 2.1)

Vulnerability Detection Result

. . . continues on next page . . .

. . . continued from previous page . . .

Vulnerability Detection Method

Host scan start Tue Dec 13 16:14:26 2022 UTC

Service (Port) Threat Level

2.2.1 High general/tcp

High (CVSS: 7.5)

Product detection result

This le was automatically generated.