SNMP Query WLAN SSID (Cisco)

#TRUSTED 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
#TRUST-RSA-SHA256 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
#
# (C) Tenable Network Security, Inc.
#


include("compat.inc");

if(description)
{
 script_id(43100);
 script_version("1.4");
 script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/07");
 
 script_name(english:"SNMP Query WLAN SSID (Cisco)");
 
 script_set_attribute(attribute:"synopsis", value:
"The SSID of the remote wireless LAN can be obtained via SNMP." );
 script_set_attribute(attribute:"description", value:
"It is possible to obtain the system information about the remote WLAN
by sending SNMP requests with the OID 1.3.6.1.4.1.9.9.512.1.1.1.1.4.1
to the remote Access Point controller. 

An attacker may use this information to gain more knowledge about the
target network." );
 script_set_attribute(attribute:"solution", value:
"Disable the SNMP service on the remote host if you do not use it, or
filter incoming UDP packets going to this port." );
 script_set_attribute(attribute:"risk_factor", value:"None" );
 script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/10" );
 script_set_attribute(attribute:"plugin_type", value:"remote");
 script_end_attributes();

 script_summary(english:"Enumerates system info via SNMP");
 script_category(ACT_GATHER_INFO);
 script_copyright(english:"This script is Copyright (C) 2009-2026 Tenable Network Security, Inc.");

 script_family(english:"SNMP");
 script_dependencies("snmp_settings.nasl", "find_service2.nasl");
 script_require_keys("SNMP/community");
 exit(0);
}


include ("audit.inc");
include ("snmp_func.inc");
include ("misc_func.inc");

community = get_kb_item("SNMP/community");
if(!community)exit(1, "The 'SNMP/community' KB item is missing.");

port = get_kb_item("SNMP/port");
if(!port)port = 161;
if (!get_udp_port_state(port)) exit(1, "UDP port "+port+" is not open.");

soc = open_sock_udp(port);
if (!soc)
  exit (1, "Can't open socket to UDP port "+port+".");

var sysobjectid = snmp_request(socket:soc, community:community, oid:"1.3.6.1.2.1.1.2.0");
if (!empty_or_null(sysobjectid) && !is_valid_snmp_product(manufacturer:"1.3.6.1.4.1.9", oid:sysobjectid))
  audit(AUDIT_NOT_DETECT, "Cisco WLAN");

ssid = snmp_request (socket:soc, community:community, oid:"1.3.6.1.4.1.9.9.512.1.1.1.1.4.1");
if (! isnull(ssid) )
{
 set_kb_item(name:"SNMP/WLAN/SSID", value:ssid);
 security_note(port:port, proto:"udp", extra:'
The remote host is a wireless access point controller, serving the following
SSID :\n\n' + ssid);
}