Detections
Analytics

ONVIF Get Device User List

info Nessus Plugin ID 103868

Language:

Synopsis

The remote service responded to an ONVIF GetUsers request

Description

Nessus was able to extract a user list from the ONVIF-enabled device by sending a GetUsers SOAP request to the device

Solution

Enable authentication or IP filtering if possible. Disable ONVIF if it isn't in use.

See Also

https://www.onvif.org/

Plugin Details

Severity: Info

ID: 103868

File Name: onvif_get_users.nasl

Version: 1.3

Type: remote

Family: Misc.

Published: 10/17/2017

Updated: 5/16/2018

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: onvif/present