Lucene search
+L

Deep Sea Electronics DSE 855 Generator Controller - Detect

🗓️ 28 Jul 2026 11:27:38Reported by KittySploitType 
kittysploit
 kittysploit
🔗 kittysploit.com👁 1 Views

Deep Sea Electronics DSE 855 has an unauthenticated HTTP web server on port 8090.

Refs
Code
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Deep Sea Electronics DSE 855 is a generator/mains automatic transfer switch (ATS) controller with a built-in H."""

from kittysploit import *
from lib.protocols.http.http_client import Http_client


class Module(Scanner, Http_client):
    __info__ = {
        'name': 'Deep Sea Electronics DSE 855 Generator Controller - Detect',
        'description': 'Deep Sea Electronics DSE 855 is a generator/mains automatic transfer switch (ATS) controller with a built-in HTTP web server for remote monitoring and configuration of generator control systems. The interface is commonly exposed on port 8090 and requires no authentication by default.',
        'author': ['KittySploit Team'],
        'severity': 'info',
        'tags': ['web', 'scanner', 'panel', 'tech', 'dse', 'ics', 'generator', 'energy', 'scada'],
        'agent': {
            'risk': 'active',
            'effects': ['network_probe'],
            'expected_requests': 1,
            'reversible': True,
            'approval_required': False,
            'produces': ['tech_hints', 'risk_signals', 'endpoints'],
            'cost': 1.0,
            'noise': 0.3,
            'value': 1.0,
            'requires': {
                'min_endpoints': 0,
                'min_params': 0,
                'tech_hints_any': [],
                'tech_hints_all': [],
                'specializations_any': [],
                'risk_signals_any': [],
                'auth_session': False,
                'capabilities_any': [],
                'capabilities_all': [],
                'confidence_min': {
                },
                'confidence_min_any': {
                },
                'endpoint_pattern_any': [],
                'param_any': [],
                'api_surface_ready': False,
            },
            'chain': {
                'produces_capabilities': [
                    {
                        'capability': 'admin_surface',
                        'from_detail': '',
                    },
                ],
                'consumes_capabilities': [],
                'option_bindings': {
                },
                'suggested_followups': ['auxiliary/scanner/http/login_page_detector'],
            },
        },
        'references': ['https://www.deepseaelectronics.com/products/auto-mains-failure-modules/855.html'],
    }

    def run(self):
        r = self.http_request(method="GET", path='/', allow_redirects=True)
        if not r or r.status_code != 200:
            return False
        body = (r.text or "")
        markers = (
            '<title>DSE 855</title>',
            'tab-view.css',
            'gui.css',
        )
        if any(m in body for m in markers):
            self.set_info(
                severity='info',
                reason="Deep Sea Electronics DSE 855 Generator Controller detected",
                path='/',
            )
            return True
        return False

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jul 2026 11:27Current
5.9Medium risk
Vulners AI Score5.9
1