GeneralInformation

Country	Korea, Republic of
City	Hanam
Organization	SK Broadband Co Ltd
ISP	SK Broadband Co Ltd
ASN	AS9318

WebTechnologies

JavaScript libraries

jQuery

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2022-22707

4.3In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system.

CVE-2019-11072

7.5lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. NOTE: The developer states "The feature which can be abused to cause the crash is a new feature in lighttpd 1.4.50, and is not enabled by default. It must be explicitly configured in the config file (e.g. lighttpd.conf). Certain input will trigger an abort() in lighttpd when that feature is enabled. lighttpd detects the underflow or realloc() will fail (in both 32-bit and 64-bit executables), also detected in lighttpd. Either triggers an explicit abort() by lighttpd. This is not exploitable beyond triggering the explicit abort() with subsequent application exit.

OpenPorts

25 80 443 2000 8080 8081 8291

2085824855 | 2024-05-19T08:27:45.423797

25 / tcp

\x00\x0e@\xcb\x8f\x87\xd9o\xfe\xacl\x00\x00\x00\x00\x00

0 | 2024-05-19T11:23:24.864590

443 / tcp

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4232008918183359359 (0x3abb1db05e9ab37f)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=na, ST=na, L=na, O=na, OU=na, CN=84940744a2dd.sn.mynetname.net
        Validity
            Not Before: Apr 23 07:47:31 2020 GMT
            Not After : Apr 21 07:47:31 2030 GMT
        Subject: C=na, ST=na, L=na, O=na, OU=na, CN=84940744a2dd.sn.mynetname.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:54:7e:08:ba:ce:34:af:88:e5:3b:e1:db:eb:
                    5b:ed:26:15:1c:dc:bc:ed:8d:3f:66:5f:6e:a0:c7:
                    f3:5a:fc:f7:ea:8d:d8:8f:f9:1a:69:4d:8e:0b:37:
                    a7:fd:bf:a6:65:b7:6d:47:86:bd:b0:fb:94:91:3a:
                    66:7c:63:2d:c0:a7:27:7c:b2:e8:6c:fd:33:16:99:
                    6f:56:91:3b:f0:f2:68:3b:00:59:58:4f:5c:8e:49:
                    22:c5:4e:92:30:3c:3c:af:e2:82:e0:e3:4e:a5:6e:
                    5e:e9:22:29:48:ba:a4:df:53:74:aa:cf:3e:cb:b4:
                    16:a4:4d:43:ec:cf:38:c5:ee:58:37:a2:75:17:a7:
                    3d:e7:d2:0d:a2:ac:1a:dd:60:6b:fb:2f:0e:9b:f6:
                    1a:37:71:32:f3:99:5e:ed:42:d0:61:25:ed:95:b6:
                    2f:d0:c5:c0:e2:55:ab:4f:aa:15:46:e0:b8:2d:65:
                    fe:8b:ca:fe:cb:5a:f0:fa:e9:94:59:5b:2b:09:3c:
                    44:52:83:bf:0e:db:b8:44:29:cc:d8:7d:bb:30:fd:
                    82:f6:4d:76:9c:bf:3f:96:6b:68:cc:d4:e8:e5:7f:
                    56:6d:5d:11:a7:22:c4:75:40:be:18:b5:56:aa:c9:
                    cc:9a:8a:ab:d2:69:01:56:91:93:54:3d:e9:3a:51:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                ED:95:D7:BB:6F:45:D7:A6:56:BC:D4:E2:FC:0E:D8:8E:6F:9A:E6:1E
            X509v3 Authority Key Identifier: 
                F2:6A:53:35:82:1D:10:69:17:CC:A6:67:64:8F:46:3E:3E:F5:A1:D7
            Netscape Comment: 
                Generated by RouterOS
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        23:85:1c:f3:bd:eb:38:77:d3:68:f7:47:56:fc:fe:38:55:be:
        aa:5f:ed:47:bf:9e:3b:10:7d:8f:b5:2f:93:94:ea:39:4b:e2:
        95:7b:16:34:df:ca:f8:04:91:b8:de:70:01:af:7b:10:c4:c8:
        c8:04:d2:29:2e:0d:54:e3:57:69:d7:f8:33:16:64:9f:36:fd:
        8c:2e:56:4a:30:c0:90:1b:9b:4d:30:64:d9:de:0e:36:e5:75:
        14:9b:40:aa:8e:e1:67:46:f3:02:7a:b5:31:21:3b:56:63:60:
        54:bf:9e:60:e9:40:65:f0:b5:d9:29:83:0a:c6:e6:0c:5f:0b:
        7d:93:d3:b8:0c:01:f8:5c:77:cb:b0:fb:5a:0b:8c:39:d1:c0:
        1f:cc:30:fc:b9:42:44:e9:6e:a9:40:aa:a3:8c:fb:fd:ed:13:
        73:c3:22:82:82:1d:2b:14:7d:0e:a4:2a:b2:d1:44:b6:bd:6e:
        f4:f3:a5:43:34:3f:20:c2:00:15:df:85:17:79:74:47:bf:80:
        37:48:bd:45:8f:43:cf:5d:0f:69:49:cb:28:d3:45:b3:e6:b6:
        de:fe:e5:fb:1a:72:41:99:56:c1:cb:2d:a0:c9:74:c5:eb:b9:
        37:13:84:77:14:91:6a:6b:b3:65:da:7d:5c:29:e5:5c:6c:2e:
        87:48:db:76

MAC Addresses

84:94:07:44:A2:DD
    Unknown

-1538260461 | 2024-05-19T08:36:42.891593

2000 / tcp

\x01\x00\x00\x00

-1243204105 | 2024-05-19T04:10:53.542588

8080 / tcp

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-type: text/html; charset=utf-8
Content-Length: 3383
Date: Sun, 19 May 2024 13:07:57 GMT
Server: lighttpd/1.4.53

-453248907 | 2024-05-19T05:11:14.537369

8081 / tcp

HTTP/1.1 401 Unauthorized
Content-Length: 0
WWW-Authenticate: Digest realm="IP Webcam", nonce="1716095469", qop="auth"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646067213560 (0x17f414064f8)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=IP Webcam
        Validity
            Not Before: Feb 27 16:53:25 2022 GMT
            Not After : Feb 26 16:53:25 2029 GMT
        Subject: CN=IP Webcam
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:89:85:c9:4b:50:e1:93:e5:4e:ed:9b:a8:
                    5c:05:de:26:52:87:e1:4d:67:4e:27:5b:a1:ba:4e:
                    15:d6:70:35:d7:b8:f8:2d:08:8a:d7:59:24:6c:45:
                    14:a5:ca:d7:6b:72:f4:40:1c:89:56:8a:18:f8:6d:
                    d9:a3:42:b6:4f:11:be:04:19:f2:de:db:a3:ad:63:
                    76:6c:a9:60:4f:3a:e6:04:31:17:54:3a:69:98:dd:
                    24:8b:4d:24:6b:14:6d:f9:df:d3:3a:65:e8:2c:61:
                    db:c8:ba:1e:73:db:fa:f0:91:16:bc:3f:b3:46:c7:
                    ec:37:e7:02:12:37:0c:ee:43:b7:25:a4:da:70:cb:
                    83:74:b7:09:48:04:38:d6:5b:0b:16:2f:20:d0:a3:
                    73:7a:d5:e5:02:f3:54:25:f7:e9:0e:01:54:4e:6d:
                    2f:02:cf:41:65:ca:ee:c8:54:67:58:a4:65:c9:12:
                    4a:14:16:b6:f0:c0:4c:f2:53:ac:fb:58:ed:72:b1:
                    56:39:ed:18:75:4c:ec:f4:49:21:1b:45:ba:f3:d9:
                    98:ee:4b:f3:eb:a4:dc:10:9f:24:a2:d8:8f:19:ff:
                    f9:8f:b9:fd:71:92:c6:f9:21:fd:e2:b5:65:7f:e5:
                    f3:e0:e3:e9:16:ea:a4:27:72:82:b7:6f:22:0f:7f:
                    16:fd
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        34:31:6e:b3:5f:48:80:40:36:c7:b6:1f:12:76:11:96:59:e0:
        4e:32:8a:ec:cf:96:11:94:e9:6a:95:0a:0a:e7:76:38:82:b3:
        8c:74:16:9c:40:0f:fd:61:06:67:40:62:e8:ce:bf:48:6e:f4:
        fd:63:7d:65:1a:de:34:9a:15:0d:7b:aa:86:93:24:8d:61:07:
        a6:c9:30:53:10:d7:de:39:bd:19:ec:6f:38:dc:3a:8e:11:1c:
        28:98:55:91:22:e4:4a:b7:10:26:63:ff:cf:4e:76:c7:0f:65:
        92:f1:2b:d3:67:88:6b:e2:0c:fc:60:d3:65:c0:76:4d:cc:cf:
        b1:ec:21:b8:68:89:01:20:a6:a4:c3:5f:73:61:40:3e:91:c7:
        7d:ef:07:2b:df:29:ab:00:d0:e2:1b:be:de:14:8b:b6:0a:d9:
        16:d5:ae:77:ec:80:48:ba:5b:59:db:a1:b4:78:31:ba:68:89:
        3c:9c:e5:74:ec:29:66:46:83:e1:29:7c:21:33:2b:db:bb:eb:
        f1:28:f4:6e:af:cf:25:19:3c:7d:f4:76:d4:31:ab:df:ea:fd:
        ec:36:52:bf:b9:57:66:3a:05:7e:3f:1f:2e:20:fd:87:84:61:
        a6:94:76:43:19:ff:0d:2c:db:4c:cb:fc:18:74:f2:f2:f8:2b:
        9a:2f:cb:6d

179639630 | 2024-05-19T09:01:42.896726

8291 / tcp

MikroTik Winbox:
  index:
    advtool.dll: 6.49.15
    dhcp.dll: 6.49.15
    hotspot.dll: 6.49.15
    mpls.dll: 6.49.15
    pim.dll: 6.49.15
    ppp.dll: 6.49.15
    roteros.dll: 6.49.15
    roting4.dll: 6.49.15
    secure.dll: 6.49.15
    system.dll: 6.49.15
    wlan6.dll: 6.49.15
  list:
    advtool.jg: 6.49.15
    dhcp.jg: 6.49.15
    hotspot.jg: 6.49.15
    icons.png: 6.49.15
    icons24.png: 
    icons32.png: 
    mpls.jg: 6.49.15
    pim.jg: 6.49.15
    ppp.jg: 6.49.15
    roteros.jg: 6.49.15
    roting4.jg: 6.49.15
    secure.jg: 6.49.15
    wlan6.jg: 6.49.15

210.205.235.22

Last Seen: 2024-05-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

2085824855 | 2024-05-19T08:27:45.423797
25 / tcp

OpenVPN

0 | 2024-05-19T11:23:24.864590
443 / tcp

-1538260461 | 2024-05-19T08:36:42.891593
2000 / tcp

MikroTik bandwidth-test server

-1243204105 | 2024-05-19T04:10:53.542588
8080 / tcp

lighttpd1.4.53

-453248907 | 2024-05-19T05:11:14.537369
8081 / tcp

179639630 | 2024-05-19T09:01:42.896726
8291 / tcp

MikroTik Winbox

Products

Pricing

Contact Us

210.205.235.22

Last Seen: 2024-05-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

2085824855 | 2024-05-19T08:27:45.423797 25 / tcp

OpenVPN

0 | 2024-05-19T11:23:24.864590 443 / tcp

-1538260461 | 2024-05-19T08:36:42.891593 2000 / tcp

MikroTik bandwidth-test server

-1243204105 | 2024-05-19T04:10:53.542588 8080 / tcp

lighttpd1.4.53

-453248907 | 2024-05-19T05:11:14.537369 8081 / tcp

179639630 | 2024-05-19T09:01:42.896726 8291 / tcp

MikroTik Winbox

Products

Pricing

Contact Us

2085824855 | 2024-05-19T08:27:45.423797
25 / tcp

0 | 2024-05-19T11:23:24.864590
443 / tcp

-1538260461 | 2024-05-19T08:36:42.891593
2000 / tcp

-1243204105 | 2024-05-19T04:10:53.542588
8080 / tcp

-453248907 | 2024-05-19T05:11:14.537369
8081 / tcp

179639630 | 2024-05-19T09:01:42.896726
8291 / tcp