Hi Nmap developers,
Following up on my previous submissions (OS fingerprint and NSE script for the
Huawei AX3), I've conducted a full port scan and discovered two additional
services that may help refine the service fingerprint database.
**1. Port 37215/tcp – UPnP**
- Service identified as: `Huawei ATP gateway upnpd`
- This seems to be already correctly matched in `nmap-service-probes`. I just
wanted to confirm its presence.
**2. Port 37443/tcp – SSL/TLS (currently shown as unknown)**
- SSL certificate details (via `ssl-cert` script):
Subject: CN=Master.ws7100-10, O=Huawei Technologies Co., Ltd, ST=Hubei, C=CN
Subject Alternative Name: DNS:mediarouter.home, DNS:mediarouter1.home,
DNS:mediarouter2.home, DNS:mediarouter3.home
Issuer: CN=link.home, ST=Hubei, C=CN
- This certificate is unique to this device and strongly suggests it's the
router's management SSL interface.
- I propose adding a service match rule like:
match ssl m|^.*CN=Master\.ws7100-10.*O=Huawei Technologies Co\.\, Ltd.*$|
p/Huawei AX3 management SSL/
(Alternatively, a more generic rule could match on `Huawei Technologies` if
that's preferred.)
Full `-sV` outputs for both ports:
PORT STATE SERVICE VERSION
37215/tcp open upnp Huawei ATP gateway upnpd
37443/tcp open ssl/unknown
And the certificate info (as above).
Please let me know if you need any further details (e.g., additional probes,
raw packet captures). I'm happy to provide more data.
Thanks,
Liang Xiangan
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/
