HP Multiple Network Products Unspecified Information Disclosure and Remote Code Execution (HPSBHF02888)

#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(70172);
  script_version("1.7");
  script_cvs_date("Date: 2018/11/15 20:50:23");

  script_cve_id("CVE-2013-2340", "CVE-2013-2341");
  script_bugtraq_id(60881, 60882);
  script_xref(name:"HP", value:"HPSBHF02888");
  script_xref(name:"IAVB", value:"2013-B-0108");
  script_xref(name:"HP", value:"SSRT100917");
  script_xref(name:"HP", value:"SSRT101120");
  script_xref(name:"HP", value:"emr_na-c03808969");

  script_name(english:"HP Multiple Network Products Unspecified Information Disclosure and Remote Code Execution (HPSBHF02888)");
  script_summary(english:"Checks model number to determine presence of flaw");

  script_set_attribute(attribute: "synopsis", value:"The remote host is missing a vendor-supplied software update.");
  script_set_attribute(attribute: "description", value:
"The remote HP router or switch could be missing a vendor-supplied
update that corrects an issue that a malicious attacker could remotely
exploit in order to cause a disclosure of information or execution of
code.");
  script_set_attribute(attribute: "solution", value:"Apply the vendor-specified update.");
 script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
 script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
 script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
 script_set_attribute(attribute:"exploit_available", value:"false");
  # https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c03808969
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4e129faa");

 script_set_attribute(attribute:"potential_vulnerability", value:"true");
 script_set_attribute(attribute:"plugin_type", value:"local");
 script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:procurve_switch");

 script_set_attribute(attribute:"vuln_publication_date", value:"2013/06/27");
 script_set_attribute(attribute:"patch_publication_date", value:"2013/06/27");
 script_set_attribute(attribute:"plugin_publication_date", value:"2013/09/27");

 script_set_attribute(attribute:"stig_severity", value:"I");
 script_end_attributes();

 script_category(ACT_GATHER_INFO);

 script_copyright(english:"This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.");
 script_family(english:"Misc.");

 script_dependencies("ssh_get_info.nasl", "hp_procurve_version.nasl");
 script_require_keys("Host/HP_Switch", "Settings/ParanoidReport");
 exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");


if (!get_kb_item('Host/HP_Switch')) exit(0, "This is not an HP Switch.");

rev = get_kb_item("Host/HP_Switch/SoftwareRevision");

model = get_kb_item_or_exit("Host/HP_Switch/Model");
if ( model == "unknown" ) exit(0, "The model number could not be obtained.");

if (report_paranoia < 2) audit(AUDIT_PARANOID);

flag = 0;
fix_version = "";

# check the affected models
temp_fix_version="12500_5.20.R1825P01";
products = make_list(
  "JC085A",
  "JC086A",
  "JC652A",
  "JC653A",
  "JC654A",
  "JC655A",
  "JF430A",
  "JF430B",
  "JF430C",
  "JF431A",
  "JF431B",
  "JF431C",
  "S12508",
  "S12518");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="10500_5.20.R1208-US";
products = make_list(
  "JC611A",
  "JC612A",
  "JC613A",
  "JC748A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S9500E_5.20.R1825P01";
products = make_list(
  "JC124A",
  "JC124B",
  "JC125A",
  "JC125B",
  "JC474A",
  "JC474B",
  "S9512E",
  "S9508E-V",
  "S9505E");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="7500_5.20.R6708-US";
products = make_list(
  "JD238A",
  "JD238B",
  "JD239A",
  "JD239B",
  "JD240A",
  "JD240B",
  "JD241A",
  "JD241B",
  "JD242A",
  "JD242B",
  "JD243A",
  "JD243B",
  "JE164A",
  "JE165A",
  "JE166A",
  "JE167A",
  "JE168A",
  "JE169A",
  "S7502E",
  "S7503E",
  "S7503E-S",
  "S7506E",
  "S7506E-V",
  "S7510E");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="6125-CMW520-R2105";
products = make_list(
  "658250-B21",
  "658247-B21");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5830_5.20.R1118-US";
products = make_list(
  "JC691A",
  "JC694A",
  "JG316A",
  "JG374A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5800-5820X_5.20.R1807P02-US";
products = make_list(
  "JC099A",
  "JC100A",
  "JC101A",
  "JC102A",
  "JC103A",
  "JC104A",
  "JC105A",
  "JC106A",
  "JG219A",
  "JG225A",
  "JG242A",
  "JG243A",
  "JG254A",
  "JG255A",
  "JG256A",
  "JG257A",
  "JG258A",
  "JG259A",
  "S5800-32C",
  "S5800-32C-PWR",
  "S5800-32F",
  "S5800-56C",
  "S5800-56C-PWR",
  "S5800-60C-PWR",
  "S5820X-28C",
  "S5820X-28S");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S5600_3.10.R1702P42";
products = make_list(
  "JD391A",
  "JD392A",
  "JD393A",
  "JD394A",
  "JD395A",
  "S5600-26C",
  "S5600-26C-PWR",
  "S5600-26F",
  "S5600-50C",
  "S5600-50C-PWR");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5500.EI-4800G_R2220-US";
products = make_list(
  "JD373A",
  "JD374A",
  "JD375A",
  "JD376A",
  "JD377A",
  "JD378A",
  "JD379A",
  "JG240A",
  "JG241A",
  "JG249A",
  "JG250A",
  "JG251A",
  "JG252A",
  "JG253A",
  "S5500-28C-EI",
  "S5500-28F-EI",
  "S5500-52C-EI",
  "S5500-28C-EI-DC",
  "S5500-28C-PWR-EI",
  "S5500-28F-EI",
  "S5500-52C-PWR-EI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5500.SI_R2220";
products = make_list(
  "JD369A",
  "JD370A",
  "JD371A",
  "JD372A",
  "JG238A",
  "JG239A",
  "S5500-28C-SI",
  "S5500-52C-SI",
  "S5500-28C-PWR-SI",
  "S5500-52C-PWR-SI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5500.HI_5.20.R5105-US";
products = make_list(
  "JG311A",
  "JG312A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="E5500G_03.03.02p21";
products = make_list(
  "JE088A",
  "JE089A",
  "JE090A",
  "JE091A",
  "JE092A",
  "JE093A",
  "JE094A",
  "JE095A",
  "JE096A",
  "JE097A",
  "JF551A",
  "JF552A",
  "JF553A",
  "5500G-EI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="E5500_03.03.02p21";
products = make_list(
  "JE099A",
  "JE100A",
  "JE101A",
  "JE102A",
  "JE103A",
  "JE104A",
  "JE105A",
  "JE106A",
  "JE107A",
  "JE108A",
  "JE109A",
  "JE110A",
  "5500-SI",
  "5500-EI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5120.SI_5.20.R1513P07";
products = make_list(
  "JE072A",
  "JE073A",
  "JE074A",
  "JG091A",
  "JG092A",
  "S5120-28P-HPWR-SI",
  "S5120-28P-PWR-SI",
  "S5120-20P-SI",
  "S5120-28P-SI",
  "S5120-52P-SI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5120.EI-4210G-4510G_R2220-US";
products = make_list(
  "JE066A",
  "JE067A",
  "JE068A",
  "JE069A",
  "JE070A",
  "JE071A",
  "JG236A",
  "JG237A",
  "JG245A",
  "JG246A",
  "JG247A",
  "JG248A",
  "S5120-24P-EI",
  "S5120-28C-EI",
  "S5120-48P-EI",
  "S5120-52C-EI",
  "S5120-28C-PWR-EI",
  "S5120-52C-PWR-EI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S5100.SI_3.10.R2221P07";
products = make_list(
  "JD348A",
  "JD349A",
  "JD356A",
  "JD357A",
  "S5100-16P-SI",
  "S5100-24P-SI",
  "S5100-48P-SI",
  "S5100-8P-SI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S5100.EI_3.10.R2221P07";
products = make_list(
  "JD344A",
  "JD345A",
  "JD346A",
  "JD347A",
  "JD350A",
  "JD351A",
  "JD352A",
  "JD353A",
  "JD354A",
  "JD355A",
  "S5100-16P-EI",
  "S5100-16P-PWR-EI",
  "S5100-24P-EI",
  "S5100-26C-EI",
  "S5100-26C-PWR-EI",
  "S5100-48P-EI",
  "S5100-50C-EI",
  "S5100-50C-PWR-EI",
  "S5100-8P-EI",
  "S5100-8P-PWR-EI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5500.EI-4800G_R2220-US";
products = make_list(
  "JD007A",
  "JD008A",
  "JD009A",
  "JD010A",
  "JD011A",
  "4800G");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5120.EI-4210G-4510G_R2220-US";
products = make_list(
  "JE045A",
  "JE046A",
  "JE047A",
  "JE048A",
  "4500");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="s4o03_01_15s168";
products = make_list(
  "JE021A",
  "JE023A",
  "JE024A",
  "JE026A",
  "JE027A",
  "JE028A",
  "JE030A",
  "JE031A",
  "JE032A",
  "4210");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S4210A_3.10.R2215P12";
products = make_list(
  "JE022A",
  "JE025A",
  "JE029A",
  "JE033A",
  "JF427A",
  "4210");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="5120.EI-4210G-4510G_R2220-US";
products = make_list(
  "JF844A",
  "JF845A",
  "JF846A",
  "4210-24G",
  "4210-48G",
  "E4210-24G-PoE");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="s3t03_02_07s168";
products = make_list(
  "JE015A",
  "JE016A",
  "JE017A",
  "JE018A",
  "JE019A",
  "JE020A",
  "4200G",
  "4200G-NTG");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S3610-5510_5.20.R5319P04";
products = make_list(
  "JD335A",
  "JD336A",
  "JD337A",
  "JD338A",
  "S3610-28F",
  "S3610-28P",
  "S3610-28TP",
  "S3610-52P");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="3600V2_5.20.R2108";
products = make_list(
  "JG299A",
  "JG300A",
  "JG301A",
  "JG302A",
  "JG303A",
  "JG304A",
  "JG305A",
  "JG306A",
  "JG307A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S3600.SI_3.10.R1702P42";
products = make_list(
  "JD325A",
  "JD327A",
  "JD329A",
  "JD330A",
  "JD332A",
  "S3600-28P-PWR-SI",
  "S3600-28P-SI",
  "S3600-28TP-SI",
  "S3600-52P-PWR-SI",
  "S3600-52P-SI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S3600.EI_3.10.R1702P42";
products = make_list(
  "JD326A",
  "JD328A",
  "JD331A",
  "JD333A",
  "JD334A",
  "S3600-28F-EI",
  "S3600-28P-EI",
  "S3600-28P-PWR-EI",
  "S3600-52P-EI",
  "S3600-52P-PWR-EI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="3100V2_5.20.R5203P01";
products = make_list(
  "JD313B",
  "JD318B",
  "JD319B",
  "JD320B",
  "JG221A",
  "JG222A",
  "JG223A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="3100V2.48_5.20.R2108";
products = make_list(
  "JG315A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S3100.SI_3.10.R2215P12";
products = make_list(
  "JD302A",
  "JD303A",
  "JD304A",
  "JD305A",
  "JD306A",
  "JD307A",
  "JD308A",
  "JD309A",
  "JD310A",
  "S3100-16C-SI",
  "S3100-16T-SI",
  "S3100-26C-SI",
  "S3100-26T-SI",
  "S3100-8C-SI",
  "S3100-8T-SI");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="S3152_3.10.R1702P42";
products = make_list(
  "JD317A",
  "S3100-52P");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="1910_5.20.R1513P07";
products = make_list(
  "JE005A",
  "JE006A",
  "JE007A",
  "JE008A",
  "JE009A",
  "JG348A",
  "JG349A",
  "JG350A",
  "2900",
  "2900G");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="8800_5.20.R3352";
products = make_list(
  "JC147A",
  "JC147B",
  "JC148A",
  "JC148B",
  "JC149A",
  "JC149B",
  "JC150A",
  "JC150B",
  "SR8805",
  "SR8808",
  "SR8812",
  "SR8802");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="R5000_3.14p13";
products = make_list(
  "JD935A",
  "JD943A",
  "JD944A",
  "JD945A",
  "JD946A",
  "5642",
  "5009",
  "5012",
  "5231",
  "5232",
  "5640",
  "5680",
  "5682");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="R301X_1.40.22";
products = make_list(
  "JD916A",
  "JD917A",
  "JD918A",
  "JD919A",
  "JG005A",
  "3012",
  "3013",
  "3016",
  "3018");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="R6000_3.14p13";
products = make_list(
  "JD967A",
  "JD972A",
  "6040",
  "6080");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR20.SI_5.20.R2312P20";
products = make_list(
  "JD432A",
  "JD662A",
  "JD663A",
  "JD663B",
  "JD664A",
  "JF228A",
  "JF283A",
  "RT-MSR2020-AC-OVS-H3C",
  "RT-MSR2040-AC-OVS-H3",
  "MSR 20-20",
  "MSR 20-21",
  "MSR 20-40",
  "MSR-20-21");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR201X_5.20.R2312P20";
products = make_list(
  "JD431A",
  "JD667A",
  "JD668A",
  "JD669A",
  "JD670A",
  "JD671A",
  "JD672A",
  "JD673A",
  "JD674A",
  "JD675A",
  "JD676A",
  "JF236A",
  "JF237A",
  "JF238A",
  "JF239A",
  "JF240A",
  "JF241A",
  "JF806A",
  "JF807A",
  "JF808A",
  "JF809A",
  "JF817A",
  "JG209A",
  "JG210A",
  "MSR 20-15",
  "MSR 20-10",
  "RT-MSR2011-AC-OVS-H3",
  "RT-MSR2012-AC-OVS-H3",
  "RT-MSR2012-AC-OVS-W-H3",
  "RT-MSR2012-T-AC-OVS-H3",
  "RT-MSR2013-AC-OVS-H3",
  "RT-MSR2013-AC-OVS-W-H3",
  "RT-MSR2015-AC-OVS-A-H3",
  "RT-MSR2015-AC-OVS-AW-H3",
  "RT-MSR2015-AC-OVS-I-H3",
  "RT-MSR2015-AC-OVS-IW-H3",
  "MSR 20-11",
  "MSR 20-12",
  "MSR 20-12 T1",
  "MSR 20-13",
  "MSR 20-13 W",
  "MSR 20-15 A",
  "MSR 20-15 A W",
  "MSR 20-15 I",
  "MSR 20-15 IW",
  "MSR20-12 W");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR30.SI_5.20.R2312P20";
products = make_list(
  "JD654A",
  "JD657A",
  "JD658A",
  "JD660A",
  "JD661A",
  "JD666A",
  "JF229A",
  "JF230A",
  "JF232A",
  "JF235A",
  "JF284A",
  "JF287A",
  "JF801A",
  "JF802A",
  "JF803A",
  "JF804A",
  "MSR 30-20",
  "MSR 30-40",
  "RT-MSR3020-AC-POE-OVS-H3",
  "RT-MSR3020-DC-OVS-H3",
  "RT-MSR3040-AC-OVS-H",
  "RT-MSR3040-AC-POE-OVS-H3",
  "RT-MSR3060-AC-OVS-H3",
  "RT-MSR3060-AC-POE-OVS-H3",
  "RT-MSR3060-DC-OVS-H3",
  "MSR 30-20",
  "MSR 30-20 POE",
  "MSR 30-40",
  "MSR 30-40 POE",
  "MSR 30-60",
  "MSR 30-60 POE",
  "RT-MSR3040-AC-OVS-AS-H3");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR3016.SI_5.20.R2312P20";
products = make_list(
  "JD659A",
  "JD665A",
  "JF233A",
  "JF234A",
  "RT-MSR3016-AC-OVS-H3",
  "RT-MSR3016-AC-POE-OVS-H3",
  "MSR 30-16",
  "MSR 30-16 POE");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR301X.SI_5.20.R2312P20";
products = make_list(
  "JF800A",
  "JF816A",
  "JG182A",
  "JG183A",
  "JG184A",
  "MSR 30-10",
  "RT-MSR3011-AC-OVS-H3");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR50.SI_5.20.R2312P20";
products = make_list(
  "JD433A",
  "JD653A",
  "JD655A",
  "JD656A",
  "JF231A",
  "JF285A",
  "JF640A",
  "MSR 50-40",
  "MSR5040-DC-OVS-H3C",
  "RT-MSR5060-AC-OVS-H3",
  "MSR 50-60");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR50.EPUSI_5.20.R2312P20";
products = make_list(
  "JD429A",
  "JD429B",
  "MSR 50");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR9XX_5.20.R2312P20";
products = make_list(
  "JF812A",
  "JF813A",
  "JF814A",
  "JF815A",
  "JG207A",
  "JG208A",
  "MSR 900",
  "MSR 920");

temp_fix_version="MSR20.SI_5.20.R2315L02.RU";
products = make_list(
  "JD663B",
  "JF228A",
  "JF283A",
  "RT-MSR2020-AC-OVS-H3C",
  "RT-MSR2040-AC-OVS-H3");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR201X_5.20.R2315L02.RU";
products = make_list(
  "JD431A",
  "JF236A",
  "JF237A",
  "JF238A",
  "JF239A",
  "JF240A",
  "JF241A",
  "JF806A",
  "JF807A",
  "JF808A",
  "JF809A",
  "JF817A",
  "MSR 20-10",
  "RT-MSR2015-AC-OVS-I-H3",
  "RT-MSR2015-AC-OVS-A-H3",
  "RT-MSR2015-AC-OVS-AW-H3",
  "RT-MSR2011-AC-OVS-H3",
  "RT-MSR2013-AC-OVS-H3",
  "RT-MSR2012-AC-OVS-H3",
  "RT-MSR2012-T-AC-OVS-H3",
  "RT-MSR2012-AC-OVS-W-H3",
  "RT-MSR2013-AC-OVS-W-H3",
  "RT-MSR2015-AC-OVS-IW-H3",
  "MSR 20-15");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR30.SI_5.20.R2315L02.RU";
products = make_list(
  "JF229A",
  "JF230A",
  "JF235A",
  "JF284A",
  "JF287A",
  "JF801A",
  "JF802A",
  "JF803A",
  "JF804A",
  "RT-MSR3040-AC-OVS-H",
  "RT-MSR3060-AC-OVS-H3",
  "RT-MSR3020-DC-OVS-H3",
  "MSR 30-20",
  "MSR 30-40",
  "RT-MSR3060-DC-OVS-H3",
  "RT-MSR3020-AC-POE-OVS-H3",
  "RT-MSR3040-AC-POE-OVS-H3",
  "RT-MSR3060-AC-POE-OVS-H3");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR301X.SI_5.20.R2315L02.RU";
products = make_list(
  "JF800A",
  "JF816A",
  "JG182A",
  "JG183A",
  "JG184A",
  "RT-MSR3011-AC-OVS-H3",
  "MSR 30-10");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR3016.SI_5.20.R2315L02.RU";
products = make_list(
  "JF233A",
  "JF234A",
  "RT-MSR3016-AC-OVS-H3",
  "RT-MSR3016-AC-POE-OVS-H3");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR50.SI_5.20.R2315L02.RU";
products = make_list(
  "JD433A",
  "JD653A",
  "JD655A",
  "JD656A",
  "JF231A",
  "JF285A",
  "JF640A",
  "MSR 50-40",
  "MSR 50",
  "MSR 50-60",
  "RT-MSR5060-AC-OVS-H3",
  "MSR5040-DC-OVS-H3C");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR50.EPUSI_5.20.R2315L02.RU";
products = make_list(
  "JD429B",
  "MSR 50");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="MSR9XX.SI_5.20.R2315L02.RU";
products = make_list(
  "JF812A",
  "JF813A",
  "JF814A",
  "JF815A",
  "MSR 900",
  "MSR 920");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="AF1000S.EI_AF1000A.EI_3.40.R3721P06";
products = make_list(
  "JD270A",
  "JD271A",
  "JG213A",
  "JG214A");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="R304X_2.41.p09";
products = make_list(
  "JD922A",
  "JD923A",
  "3040 ");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

temp_fix_version="R3036_2.41.p09";
products = make_list(
  "JD921A",
  "3036");
foreach temp (products)
{
  if (temp == model && temp_fix_version != rev)
  {
    flag++;
    if (fix_version) fix_version += ", ";
    fix_version += temp_fix_version;
  }
}

# report as needed
if (flag)
{
  report = string(
    "The Remote HP system is not patched :\n",
    "  Model #: ", model, "\n",
    "\n",
    "    Current Software Revision : ", rev, "\n",
    "    Suggested Software Version : ", fix_version, "\n"
  );

  security_hole(port:0, extra:report);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");