The remote server is configured to use NTP. This protocol is used to keep a system synched with time servers. 

The remote client is configured to use NTP. This protocol is used to keep a system synched with time servers. 

The remote host has just made a connection to an NTP server.

The remote host is running the TLS protocol.

The remote host is running the TLS protocol.  Further, the host allows export-grade key exchanges during session setup.  Export-grade key exchanges have been shown to be vulnerable to man-in-the-middle attacks.

The remote host is running the Symantec Web Security Gateway. The web security gateway is a traffic filtering appliance which sits between the end-user and the internet, preventing or allowing access to certain sites. It offers an administrative portal via TCP/443 for remote management of the web traffic filters. Traffic passed over port 443/TCP is encrypted using TLS/SSL.

The remote host is running the Fortinet FortiMail secure email server.  Fortinet FortiMail is an email security appliance which filters email for spam and other malware.  Fortinet FortiMail utilizes port 80/TCP as an administrative portal for remote management of the secure email server.  The connection does not utilize any network encryption.

The remote host is running the Fortinet FortiMail secure email server.  Fortinet FortiMail is an email security appliance which filters email for spam and other malware.  Fortinet FortiMail utilizes port 443/TCP as an administrative portal for remote management of the secure email server.  Traffic passed over port 443/TCP is encrypted using TLS/SSL.

The remote host is running FortiWeb 4.x / 5.x prior to 5.0.3.  It is, therefore, affected by multiple vulnerabilities :

 - FortiWeb is affected by a cross-site scripting vulnerability due to a failure to sanitize user-supplied input. (CVE-2014-1955)
 - FortiWeb is affected by an unspecified HTTP header injection vulnerability. (CVE-2014-1956)
 - FortiWeb is affected by an unspecified privilege escalation vulnerability. (CVE-2014-1957)

The remote host is running FortiWeb 5.x prior to 5.0.4.  It is, therefore, affected by a cross-site scripting vulnerability in the webUI.  An attacker could potentially exploit this vulnerability to execute arbitrary JavaScript in the context of the end-user's browser.

The remote host running FortiWeb prior to 5.2.0. It is, therefore, affected by multiple cross-site request forgery (XSRF) vulnerabilities in the web UI due to a lack of XSRF token protection.  A remote, unauthenticated attacker could potentially exploit this vulnerability to perform administrative actions.

The remote host is running FortiWeb 5.x prior to 5.2.1.  It is, therefore, affected by multiple cross-site scripting (XSS) vulnerabilities in the web management interface URLs '/user/ldap_user/check_dlg' and '/user/radius_user/check_dlg' due to insufficient parameter input validation.  Under specific conditions, a remote attacker could execute arbitrary JavaScript code within an administrative browser session.

The remote host is running FortiWeb 5.x prior to 5.1.0. It is, therefore, affected by a cross-site scripting vulnerability in the webUI due to a failure to sanitize user-supplied input to the 'filter' parameter in the '/user/ldap_user/add' script.  An attacker could potentially exploit this vulnerability to execute arbitrary JavaScript in the context of the end-user's browser.

The remote host is running the Fortinet FortiWEB application.  Fortinet FortiWEB is an application layer firewall which is typically deployed on a network in front of one or more web servers.  Fortinet FortiWEB detects and blocks application-layer attacks in realtime.

The remote host is running the Fortinet FortiWEB firewall.  Fortinet FortiWEB is an application layer firewall.

The remote client has just initiated an SMB connection with the following UserID.

The remote SMB client has just attempted to connect to a network service, and the SMB account has been detected.

Notepad++ version 6.6.9 is vulnerable to a potential buffer overflow issue related to handling XML files, which could result in arbitrary code execution; other earlier versions may be vulnerable.

The client supports SSL version 3.  SSL version 3 is an older protocol which should not be used in most instances as TLS is widely supported for encryption between client and server.   

Firmware version 140916 is vulnerable to the following issues:

  - Stored cross-site scripting via injecting javascript code into the DHCP hostname field, which will execute when the administrator visits the DHCP clients panel.

  - A denial of service vulnerability that can be triggered when sending an extra overly long HTTP header field to the device's web server.

The remote host is running the STUN (simple traversal of UDP through NAT) protocol.  This protocol allows the client to discover the presence of Network Address Translation (NAT) firewalls and proxy devices.

The remote host is running the TN3270 telnet protocol.  This protocol is typically used by older systems such as mainframes.

The remote host is running the TN3270E telnet protocol.  This protocol is typically used by older systems such as mainframes.

The remote host utilizes the following SNMP community string

The server on this port is tunneling traffic through DTLS version 1.0.

The server on this port is tunneling traffic through DTLS, an implementation of TLS for Datagram/UDP security. 

An SSL/TLS certificate for the remote host has been observed, and the certificate validity dates have been retrieved.

The operating system of the remote host has been detected via DHCP information.

The server on this port is tunneling traffic through DTLS, an implementation of TLS for Datagram/UDP security.  The remote server has just terminated a connection with the following error code :

The remote host is a TLS/SSL client and has just terminated a session with the following error code :

The remote SSL server has just abruptly ended a session with the following error code :

The remote host, which is an SSL client, has terminated a connection and the error code has been observed.

The remote host, which is an SSL server, has terminated a connection, and the error code has been observed.

The remote host is running the PC Duo software.  PC Duo is a remote administration platform which allows users to connect to the machine over a variety of different protocols.

The remote host is running the multicast source discovery protocol.  This protocol is used to connect PIM spare-mode (PIM-SM) domains.

The remote host has is an OpenVPN server.  The server is running OpenSSL version 1.2

The remote host has is an OpenVPN server.  The server is running OpenSSL version 1.1

The remote host has is an OpenVPN server.  The server is running OpenSSL version 1.0

ID	Name	Severity
8828	NTP Server Detection	info
8827	NTP Client Detection	info
7171	NTP Client Connection Detection	info
8774	TLS Server Detection	info
7169	TLS Export-Grade Key Exchange Detection (Client)	medium
7168	TLS Export-Grade Key Exchange Detection	low
8755	Symantec Web Security Gateway Detection via SSL/TLS	info
8737	Fortinet FortiMail Server Detection via HTTP	info
8736	Fortinet FortiMail Server Detection via SSL/TLS	info
8670	FortiWeb 4.x / 5.x < 5.0.3 Multiple Vulnerabilities	low
8669	FortiWeb 5.x < 5.0.4 XSS	low
8668	FortiWeb < 5.2.0 Multiple XSRF Vulnerabilities	medium
8667	FortiWeb 5.x < 5.2.1 Multiple XSS Vulnerabilities	low
8650	FortiWeb 5.x < 5.1.0 XSS	low
8648	Fortinet FortiWEB Version Detection	info
8647	Fortinet FortiWEB Detection via Telnet	info
8646	Fortinet FortiWEB Detection via SSL/TLS	info
8627	SMB UserID Detection	info
7166	SMB Account Enumeration	info
8605	Notepad++ 6.6.9 Unspecified Buffer Overflow Vulnerability	medium
8549	SSLv3 Protocol Detection	info
8548	SSLv3 Server Detection	info
8396	TP-LINK WDR4300 Multiple Vulnerabilities	high
8390	STUN Protocol Detection	info
8389	STUN Protocol Detection	info
8379	Telnet TN3270 Protocol Detection	info
8378	Telnet TN3270E Protocol Detection	info
8351	SNMP community detection	info
8319	DTLS v1.0 Traffic Negotiation Detection	info
8318	DTLS v1.0 Traffic Negotiation Detection	info
8317	DTLS Detection	info
7126	SSL/TLS Certificate Validity Dates Detection	info
7120	OS Fingerprinting via DHCP	info
8311	Windows OS Detection Via DHCP	info
8310	OS Detection Via DHCP (deprecated)	info
8286	DTLS Error Detection	info
8285	SSL Client Error Detection	info
8284	SSL Server Error Detection	info
7117	SSL Client Error Code Detection	info
7116	SSL Server Error Code Detection	info
8281	PC Duo Detection	info
8280	PC Duo Detection	info
8279	Multicast Source Discovery Protocol Client Detection	info
3551	Multicast Source Discovery Protocol Client Detection	info
3550	OpenVPN server OpenSSL version detection	info
3549	OpenVPN server OpenSSL version detection	info
3548	OpenVPN server OpenSSL version detection	info
3547	OpenVPN server OpenSSL version detection	info
3546	OpenVPN server OpenSSL version detection	info
3545	OpenVPN server OpenSSL version detection	info

Detections

Analytics

Generic Family for Nessus Network Monitor

info

info

info

info

medium

low

info

info

info

low

low

medium

low

low

info

info

info

info

info

medium

info

info

high

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info