Cisco Meraki Data Collection

#TRUSTED 912c6ac714269cd5a96cf8b4f5a3ad2cd32e68317066111c24f8cbad131cdd966ca9bfa021ac9add97dc06dcc2251cc8df9dd19f98b3ac917c839bc96979f79db30472279d0a2b82f8ec3ff0ef5c64e6b0937d95369d094ecf5492f86c6fe5885e9a9b60c1cd63dc06729d72fb47847c4e3adf288bd5f62925093eace97c6354cb06a25271d6e8104b5927d19f3fc9a384119f7c4903fb22f184f576afc51ecf4991a6d0c476edede776401b63b84f19f5f2741ff66ecd27219ece3564366196ed10d17cae02460be55988f5d9d7d739073879fd36621f360637731ff5ccc900a0220de243974526b63d0aef525e49b1590fd8f08eab2d26f648adadd0d43447e311b163f61c0de4ec4a45e18706c33c839cdfd5ac8f2627bf7ea34153152692efd7472e1884abd362e4640b00d0d1f0833208a79a733e2009526fc86ea958a22905a4c37cec851663dcc75c6d547c849e5503eb4d5e34036f628ccfcfa309e1a2b650ac66973b791b394befb2ba0aa0e7a2ecbbf3f2bdce3063b738d1bd580428d6bb2e2bf728d3c18521e898fd347c4717c56c87d2bf211dfd4633fada845f9fc0577b33c8877f235011821200c5daee8f991bda2a71f1bd72fd957faa411d2ef237054d7060ea78396745f2588517f7ed0f06e71055d1b4a398b4489313a7bcc848623eef8f7c6d177d51344aa77c5415df2efa8b719703687f20230c05a8
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 70300
###
# (C) Tenable Network Security, Inc.
#
###

include('deprecated_nasl_level.inc');
include("compat.inc");

if (description)
{
  script_id(237714);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/01");

  script_name(english:"Cisco Meraki Data Collection");
  script_summary(english:"Collects Cisco Meraki data.");

  script_set_attribute(attribute:"synopsis", value:"Collects all data from Cisco Meraki Dashboard using the REST APIs.");
  script_set_attribute(attribute:"description", value:"Collects Cisco Meraki Device data from the Cisco Meraki Dashboard host using the REST APIs.");
  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/06/03");
  script_set_attribute(attribute:"risk_factor", value:"None");
  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Misc.");

  script_dependencies("cisco_meraki_settings.nasl");
  script_require_keys("Host/CiscoMeraki/configured");

  script_timeout(0);

  exit(0);
}

if (!defined_func("nasl_level") || nasl_level() < 80000) exit(0, "Nessus older than 8.x");

include("cisco_meraki.inc");

#================================
# Locked for Data Collection
#
mutex_lock(SCRIPT_NAME);

if (empty_or_null(get_global_kb_item("CiscoMeraki/collected")))
{
  var hosts_to_inject = [];
  var kb = {"host/injected/integration": "Cisco Meraki"};
  var config = new ciscoMeraki::config();
  set_global_kb_item(name:"CiscoMeraki/collect_ip", value:get_host_ip());

  var index;  
  for (var i = 0; i < 5; i++)
  {
    if (i == 0)
    {
      index = "";
    }
    else
    {
      index = i;
    }
    
    config.init(index:index);
    if (empty_or_null(config.host))
    {
      break;
    }

    var devices = ciscoMeraki::collect_devices(config:config);
    if (!devices.success)
    {
      integrations::logger(config:config, msg:devices.error + ". Failed to collect devices.", lvl:1);
      continue;
    }

    if (config.auto_discover)
    {
      hosts_to_inject = make_list(hosts_to_inject, devices.hosts_to_inject);
    }
  }

  if (!empty_or_null(hosts_to_inject))
  {
    integrations::logger(config:config, msg:"[INFO] Auto Discovery enabled, inserting targets to scan.", lvl:1);
    foreach (var ip in hosts_to_inject)
    {
      inject_host(hostname:ip, kb:kb);
    }
  }

  delete(config);
  set_global_kb_item(name:"CiscoMeraki/collected", value:TRUE);
}

mutex_unlock(SCRIPT_NAME);
#
# Unlocked for Host Level Assignment
#================================
var target = get_host_ip();
var collect_ip = get_global_kb_item("CiscoMeraki/collect_ip");
if (target != collect_ip)
{
  dbg::detailed_log(lvl:1, src:SCRIPT_NAME, msg:"Data collection previously executed. Please refer to logs on host " + collect_ip);
}

var device_data = ciscoMeraki::get_device_global_kbs(target:target);
if (empty_or_null(device_data.ip))
{
  exit(1, '\nNo data was collected for ' +  target);
}

var report = 'Cisco Meraki Device Details' +
             '\n---------------------------' +
             '\nDevice IP: ' + device_data.ip +
             '\nDevice Type: ' + device_data.productType +
             '\nDevice Name: ' + device_data.name +
             '\nDevice Model: ' + device_data.model +
             '\nSerial Number: ' + device_data.serial +
             '\nDevice MAC: ' + device_data.mac +
             '\nFirmware Version: ' + device_data.firmware +
             '\nRunning Software Version: ' + device_data.sw_version;

ciscoMeraki::store_device_kbs(device:device_data);
security_report_v4(port:0, extra:report, severity:SECURITY_NOTE);