The remote host is running a Samsung mobile device.

The remote host is running the Google Android OS.

The remote mobile host is a Samsung mobile device. From the traffic NNM has observed coming from this host, the device model information was obtained.

The remote mobile host is a Google Android device.

The remote host is running a Nokia mobile device.

The remote host is an LG mobile device, and NNM has identified the model information.

The remote mobile host is an Amazon Kindle.

The remote host is an HTC hardware device for mobile networks.  

While monitoring traffic from this host, PVS was able to identify the BlackBerry device model and OS version.

The remote host is running an HP Tablet mobile device.

The remote host is running a DELL mobile device.

The remote host is running the Google Android operating system for mobile devices.

The remote device just accessed the Android Market.  

The remote host is running the BlackBerry operating system.

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS 3.0 through 5.0 are affected by vulnerabilities within the following components :

 - CFNetwork (CVE-2011-3246)
 - CoreGraphics (CVE-2011-3439)
 - Kernel (CVE-2011-3442)
 - libinfo (CVE-2011-3441)
 - Passcode Lock (CVE-2011-3440)

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS 3.0 through 4.3.5 are affected by vulnerabilities within the following components :

 - CalDAV
 - Calendar
 - CFNetwork
 - CoreFoundation
 - CoreGraphics
 - CoreMedia
 - Data Access - Data Security
 - Home security
 - ImageIO
 - Kernel
 - Keyboards
 - libxml
 - OfficeImport
 - Safari
 - Settings
 - UIKit Alerts
 - WebKit
 - WiFi

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS older than 7.0 are affected by vulnerabilities within the following components :

 - Certificate Trust Policy
 - CoreGraphics
 - CoreMedia
 - Data Protection
 - Data Security
 - File Systems
 - IOKit
 - IOKitUser
 - IOSerialFamily
 - IPSec
 - ImageIO
 - Kernel
 - Kext Management
 - Passcode Lock
 - Personal Hotspot
 - Push Notifications
 - Safari
 - Sandbox
 - Social
 - Springboard
 - Telephony
 - Twitter
 - WebKit
 - dyld
 - libxml
 - libxslt

The remote mobile device is running FaceTime, a video calling application from Apple. NNM has observed a FaceTime call taking place. 

Google Android operating system versions 2.3.4 and 3.1 are affected by a cross-application scripting vulnerability that could be exploited to bypass the sandbox.

According to its banner, the remote Apple iOS device is affected by a security bypass vulnerability due to a certificate chain validation issue during the handling of X.509 certificates.  Versions of Apple iOS less than version 4.2.10, or 4.3.x prior to 4.3.5 are potentially affected by this security bypass vulnerability.

The remote mobile host is a using a version of Apple iOS earlier than 4.3.4. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.3.4 contains security fixes for the following components :

  - CoreGraphics

  - IOMobileFrameBuffer

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS 4.2.5 or 4.2.6 are affected by vulnerabilities within the following components :

  - Certificate Trust Policy

  - QuickLook

  - WebKit

The remote mobile host is a using a version of Apple iOS earlier than 4.3.2. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.3.2 contains security fixes for the following components :

  - Certificate Trust Policy

  - libxslt

  - QuickLook

  - WebKit

The remote mobile host is a using a version of Apple iOS earlier than 4.3. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.3 contains security fixes for the following components :

  - CoreGraphics

  - ImageIO

  - libxml

  - Networking

  - Safari

  - WebKit

  - Wi-Fi

Versions of Google Android operating system prior to 2.3 are potentially affected by multiple vulnerabilities :

 - A privilege escalation vulnerability exists in the Zygote/Dalvik virtual machine framework.

 - A denial-of-service issue exists that can cause 'dexdump' to crash (CVE-2011-1001).

The remote mobile host is a using a version of Apple iOS earlier than 4.2. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.2 contains security fixes for the following components :

  - Configuration Policies

  - CoreGraphics

  - FreeType

  - iAd Content Display

  - ImageIO

  - libxml

  - Mail

  - Networking

  - OfficeImport

  - Photos

  - Safari

  - Telephony

  - WebKit

  - Multiple components

The remote mobile host is a using a version of Apple iOS earlier than 4.0. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.0 contains security fixes for the following components :

  - Application Sandbox

  - CFNetwork

  - ImageIO

  - LibSystem

  - libxml

  - Passcode Lock

  - Safari

  - Settings

  - WebKit

The remote mobile host is a using a version of Apple iOS earlier than 3.1.3. Such versions are potentially affected by multiple vulnerabilities : 

  - A buffer overflow exists in the handling of mp4 audio files. (CVE-2010-0036)

  - A buffer underflow exists in ImageIO's handling of TIFF images. (CVE-2009-2285)

  - A memory corruption issue exists in the handling of a certain USB control message. (CVE-2010-0038)

  - Multiple input validation issues exist in WebKit's handling of FTP directory listings. (CVE-2009-3384)

  - When WebKit encounters an HTML 5 Media Element pointing to an external resource, it does not issue a resource load callback to determine if the resource should be loaded. (CVE-2009-2841)

The remote client is running the Google Android operating system.

The remote host is running Pandora, an online music streaming service.

The included browser in versions of BlackBerry OS 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle attackers to deceive a user into believing they are accessing a trusted site.

The remote mobile host is a using a version of Apple iOS earlier than 3.1. Such versions are potentially affected by multiple issues: 

  - An issue in WebKit's handling of the parent and top objects could result in cross-site scripting attacks. (CVE-2009-1724)

  - A memory corruption issue in WebKits's handling of numeric character references. (CVE-2009-1725)

  - The International Domain Name support and Unicode fonts embedded in Safari could be used to create a URL which contains look-alike characters. (CVE-2009-2199)

  - A heap buffer overflow exists in the handling of AAC or MP3 files. (CVE-2009-2206)

  - Spotlight finds and allows access to deleted messages in Mail folders on the device. (CVE-2009-2207)

  - The iPhone OS allows users to specify a 'Require Passcode' setting that may be greater than the 'Maximum Inactivity time lock' setting from Microsoft Exchange servers. (CVE-2009-2794)

  - A heap buffer overflow exists in Recovery Mode command parsing. (CVE-2009-2795)

  - When a character in a password is deleted, and the deletion is undone, the character is briefly made visible. (CVE-2009-2796)

  - Safari includes the user name and password from the original URL in the referer header. (CVE-2009-2797)

  - A null pointer dereference issue exists in the handling of SMS arrival notifications. (CVE-2009-2815)

The remote mobile host is utilizing Apple iOS. Apple iOS is the operating system for devices such as iPods, iPhones, and iPads.

The remote mobile host is an Apple mobile device. From the traffic NNM has observed, the device model information was obtained.

Versions of Apple iOS prior to 1.1.4 use a vulnerable build of the Apple Webkit prior to 420.1, which is affected by a denial of service vulnerability. This flaw exists because of the way the Safari browser handles memory. Specifically, when all memory has been utilized by the browser, it will attempt to close all inactive documents. In the process of closing these documents, a kernel panic and ensuing crash occurs. An attacker exploiting this flaw would need to be able to entice an iOS user to browse to a malicious web server. Successful exploitation would result in the device crashing.

Version 3.0 of Apple iOS is vulnerable to a flaw in the way that it handles malformed SMS text messages. An attacker, exploiting this flaw, would be able to execute arbitrary code on the remote mobile device.

The remote client is a portable device (PDA, laptop, cell phone, etc.) that is managed by a Nokia Intellisync server.

The remote HTTP client is a cellular phone. 

The remote Microsoft Windows host is running Tablet PC Services, which most likely indicates it is a tablet. Tablet PC Services can also be enabled on non-tablet hardware.

The remote mobile host is an Apple mobile device. From the traffic PVS has observed, the device model information was obtained.

The remote host is running a Palm hardware device.

ID	Name	Severity
6083	Samsung Mobile Device Version Detection (deprecated)	info
6082	Google Android Mobile Device Detection	info
6081	Samsung Mobile Device Model Detection	info
6080	Google Android Mobile Device Detection via App Traffic	info
6079	Google Android Mobile Device Detection via Browser	info
6077	Nokia Mobile Device Version Detection	info
6076	LG Mobile Device Model Detection	info
6075	Amazon Kindle Mobile Device Model Detection	info
6074	HTC Mobile Device Model Detection (HTC Windows)	info
6073	HTC Mobile Device Model Detection (HTC Android)	info
8747	BlackBerry OS and Model Detection (Obsolete Versions)	info
6071	HP Tablet Mobile Device Version Detection	info
6070	HP Tablet Mobile Device Version Detection	info
6069	DELL Mobile Device Version Detection	info
6068	BlackBerry OS and Model Detection	info
6067	Google Android Operating System Detection	info
6066	Android Market Detection (deprecated)	info
4545	BlackBerry OS Version Detection	info
6096	Apple iOS < 5.0.1 Multiple Vulnerabilities	high
6041	Apple iOS < 5.0 Multiple Vulnerabilities	high
8013	Apple iOS < 7.0 Multiple Vulnerabilities	critical
5999	Apple FaceTime Detection	info
5997	Google Android Operating System 2.3.4 / 3.1 Sandbox Bypass Vulnerability	low
5993	Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification	high
5986	Apple iOS < 4.3.4 Multiple Vulnerabilities	high
5889	Apple iOS 4.2.5 and 4.2.6 Multiple Vulnerabilities	critical
5888	Apple iOS < 4.3.2 Multiple Vulnerabilities	critical
5814	Apple iOS < 4.3 Multiple Vulnerabilities	critical
5737	Android < 2.3 Multiple Vulnerabilities	high
5715	Apple iOS < 4.2 Multiple Vulnerabilities	critical
5578	Apple iOS < 4.0 Multiple Vulnerabilities	critical
5337	Apple iOS < 3.1.3 Multiple Vulnerabilities	high
5287	Google Android Operating System Version Detection	info
5200	Pandora Mobile Application Detection	info
5189	BlackBerry 4.x Dialog Box Certificate Mismatch	medium
5160	Apple iOS 3.x < 3.1 Multiple Vulnerabilities	high
5074	Apple iOS Base Detection	info
4654	Apple iOS Device Model Detection	info
4425	Apple iOS < 1.1.4 DoS	medium
5110	Apple iOS 3.x < 3.0.1 Buffer Overflow	high
8637	Apple iOS Version Detection	info
3374	Nokia Intellisync Portable Device Detection (deprecated)	info
3495	Cellular Phone Browser Detection (deprecated)	info
3494	Microsoft Windows Tablet PC Services Detection	info
2761	Apple iOS Device Detection	info
5075	Palm Mobile Device Hardware Detection	info

Detections

Analytics

Mobile Devices Family for Nessus Network Monitor

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

high

high

critical

info

low

high

high

critical

critical

critical

high

critical

critical

high

info

info

medium

high

info

info

medium

high

info

info

info

info

info

info