ThinkPHP, an open source PHP framework, was detected on the remote host.

The remote host is an HP PageWide printer.

It is possible to obtain the product, firmware versions, and more via the web interface.

Detects the web interface for QNAP QTS/QES/QuTS hero on the remote host.

Nacos, an easy-to-use dynamic service discovery, configuration and service management platform for building cloud native applications, is installed on the remote host.

The Trend Micro ServerProtect Information Server is running on the remote host.

The web interface for IBM Cognos Analytics was detected on the remote host.

Nagios XI was detected on the remote host. These applications are used for enterprise monitoring and alerting.

OpenTSDB, a time series database is running on the remote host.

Wind River VxWorks RTOS was detected on the remote host.

The web UI of Kaseya Virtual System Administrator (VSA) was detected on the remote host.

The web console for VMware Carbon Black App Control, formerly known as Cb Protection and Bit9 Parity, was detected on the remote host.

The Keil TCPnet TCP/IP stack was detected on the remote host.

The Nucleus Net TCP/IP stack was detected on the remote host.

The CMX-TCP/IP stack was detected on the remote host.

The emNet TCP/IP stack was detected on the remote host.

The NicheStack TCP/IP stack was detected on the remote host.

The FreeBSD TCP/IP stack was detected on the remote host.

The NetX TCP/IP stack was detected on the remote host.

The emNet TCP/IP stack was detected on the remote host

The lwIP TCP/IP stack was detected on the remote host.

The FNET TCP/IP stack was detected on the remote host.

The Nut/Net TCP/IP stack was detected on the remote host.

The uIP/Contiki TCP/IP stack was detected on the remote host.

The uC/TCP-IP stack was detected on the remote host.

The SSH server on the remote host accepts password authentication.

Detects the web interface for SonicWall Email Security on the remote host.

SaltsSack Salt Minion, a security and configuration management automation platform, is installed on the remote Linux host.

Detects the web interface for JetBrains TeamCity on the remote host.

Junos Space Security Director web interface detected on remote host.

The web interface for SAP Solution Manager was detected on the remote  host.  SAP Solution Manager is application lifecycle management software.

Note: This plugin does not report anything. Instead, it collects information stored in host tags for the future development of this plugin.

VMware Workspace ONE Access, (formerly VMware Identity Manager) an OS virtualization solution that allows the running of multiple operating systems on the same host, is installed on the remote host.

The remote host is a MobileIron Core appliance, the administrative console for security and management policies for the MobileIron Platform.

It is possible to obtain the version and build via the API.

Note that basic HTTP credentials are required to retrieve version information.

The remote host is a MobileIron Core appliance, the administrative console for security and management policies for the MobileIron Platform.

Nessus was able to detect that the remote service supports DTLS  (Datagram Transport Layer Security) by sending a ClientHello and  receiving a HelloVerifyRequest reply.

The remote service accepts connections encrypted using TLS 1.1. This version of TLS is affected by multiple cryptographic flaws. An attacker can exploit these flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected service and clients.

IBM MQ (formerly known as WebSphere MQ) was detected on the remote host.

IBM MQ is a messaging middleware product.

This plugin leverages one of the Ripple20 vulnerabilities (CVE-2020-11909) to determine if the Treck or Kasago TCP/IP stack is running on the remote host. It can be used for discovery of hosts in the environment that utilize the Treck or Kasago TCP/IP stack.
The plugin cannot determine if the patch for Ripple20 vulnerabilities was applied on the host.

Note that this plugin is based on a script provided by JSOF (https://www.jsof-tech.com/).

This plugin sends malformed packets to the remote host and looks for a response that could indicate a Treck/Kasago TCP/IP stack. 

If the remote host fails to respond, the plugin cannot make a determination. 

It's possible that a middle device (i.e., firewall or router) between Nessus and the target detects the malformed packets and does not forward them to the target. In this case, this plugin may not able to detect the Treck/Kasago TCP/IP stack or may produce incorrect results.

For the plugin to function effectively and not be impacted by intermediate devices on the network, the hosts being scanned should be on the same network segment as the scanner.

The Treck/Kasago network stack appears to be running on the remote host.

Note that this plugin is based on detection methods provided by JSOF (https://www.jsof-tech.com/).

This plugin uses additional methods to detect the Treck/Kasago TCP/IP stack. These methods are known to have false positives. Every trigger of the plugin needs to be investigated manually for confirmation.

The remote service accepts connections encrypted using TLS 1.3.

The remote host is running Arista CloudVision Portal, a web-based GUI for the CloudVision platform.

Note: To retrieve patch level information this plugin requires the HTTP credentials of the web console.

The Treck/Kasago network stack appears to be running on the remote  host.

Note that this plugin is based on a detection method provided by JSOF (https://www.jsof-tech.com/).

The plugin sends a special packet to the host and looks for a specific type of ICMP response packet. If the response is not received (for example, the host does not respond to the special packet or the response is blocked by a device between the scanner and the host), the plugin cannot make a determination. Failure to receive the specific type of ICMP packet in the response does not necessarily indicate that the remote host does not use the Treck/Kasago network stack.

The web interface for Citrix ShareFile Storage Zones Controller was detected on the remote host. ShareFile is a secure content collaboration, file sharing and sync solution. Storage Zones Controller provides private data storage, either an on-premises network share that you manage or a supported third-party storage system.

Salt Master for SaltStack, a security and configuration management automation platform, was detected on the remote Linux host.

SaltsSack Salt Master, a security and configuration management automation platform, is installed on the remote Linux host.

The remote service accepts connections encrypted using TLS 1.2.

Trend Micro Deep Security Agent which provides application control, anti-malware, web reputation service, firewall, intrusion prevention, integrity monitoring, and log inspection protection is installed on the remote Linux host.

The Palo Alto Expedition account is using a default password. An unauthenticated, remote attacker can exploit this gain privileged or administrator access to the system.

Multiple cross-site scripting (XSS) vulnerability exists in Palo ALto Expedition Migration Tool in versions less than or equal to 1.1.8 due to improper validation of user-supplied input before returning it to users.

  - An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the User Mapping settings (CVE-2019-1569).

  - An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the LDAP server settings (CVE-2019-1570).

  - An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the Radius server settings (CVE-2019-1571).

ID	Name	Severity
155965	ThinkPHP Detection	info
155862	HP PageWide Printer Web Interface Detection	info
155705	QNAP QTS/QES/QuTS hero - Web Detection	info
154417	Nacos Detection	info
154350	Trend Micro ServerProtect Information Server Detection	info
153487	IBM Cognos Analytics Web Interface Detection	info
153046	Nagios XI Installed (Linux)	info
151490	OpenTSDB HTTP Detection	info
151482	Wind River VxWorks RTOS Detection	info
151372	Kaseya Virtual System Administrator (VSA) Detection	info
151130	VMware Carbon Black App Control Web Console Detection	info
149646	Keil TCPnet TCP/IP Stack - FTP Detection	info
149645	Nucleus Net TCP/IP Stack - FTP Detection	info
149644	CMX-TCP/IP Stack - FTP Detection	info
149643	emNet TCP/IP Stack - FTP Detection	info
149511	NicheStack TCP/IP Stack - HTTP Detection	info
149510	CMX-TCP/IP Stack - HTTP Detection	info
149509	FreeBSD TCP/IP Stack - HTTP Detection	info
149508	NetX TCP/IP Stack - HTTP Detection	info
149501	emNet TCP/IP Stack - HTTP Detection	info
149500	lwIP TCP/IP Stack - HTTP Detection	info
149499	Keil TCPnet TCP/IP Stack - HTTP Detection	info
149498	FNET TCP/IP Stack - HTTP Detection	info
149497	Nut/Net TCP/IP Stack - HTTP Detection	info
149496	uIP/Contiki TCP/IP Stack - HTTP Detection	info
149495	uC/TCP-IP Stack - HTTP Detection	info
149334	SSH Password Authentication Accepted	info
148994	SonicWall Email Security Web Interface Detected	info
148692	SaltStack Salt Minion Installed (Linux)	info
148245	JetBrains TeamCity Web Interface Detection	info
148031	Junos Space Security Director Detection	info
145445	SAP Solution Manager Web Detection	info
143554	VMware Workspace ONE Access HTTP Detection	info
141341	MobileIron Core API Detection	info
141340	MobileIron Core Detection	info
140575	DTLS Service Detection	info
139414	TLS Version 1.1 Protocol Detection (PCI DSS)	high
139005	IBM MQ Service Detection	info
138615	Treck/Kasago Network Stack Detection With IP Option.	info
138614	Treck/Kasago Network Stack Detection	info
138330	TLS Version 1.3 Protocol Detection	info
137855	Arista CloudVision Portal Web Detection	info
137703	Treck/Kasago Network Stack Detection	info
137002	ShareFile Storage Zones Controller Web Detection	info
136734	SaltStack Salt Master Detection	info
136355	SaltStack Salt Master Installed (Linux)	info
136318	TLS Version 1.2 Protocol Detection	info
135408	Trend Micro Deep Security Agent Installed (Linux)	info
135255	Palo Alto Default Credentials	critical
135238	Palo Alto Expedition Cross-Site Scripting	medium

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

high

info

info

info

info

info

info

info

info

info

info

info

critical

medium