Lucene search

K
nmapPatrik KarlssonNMAP:BJNP-DISCOVER.NSE
HistoryAug 05, 2012 - 6:55 p.m.

bjnp-discover NSE Script

2012-08-0518:55:40
Patrik Karlsson
nmap.org
125

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.8%

Retrieves printer or scanner information from a remote device supporting the BJNP protocol. The protocol is known to be supported by network based Canon devices.

Example Usage

sudo nmap -sU -p 8611,8612 --script bjnp-discover <ip>

Script Output

PORT     STATE SERVICE
8611/udp open  canon-bjnp1
| bjnp-discover:
|   Manufacturer: Canon
|   Model: MG5200 series
|   Description: Canon MG5200 series
|   Firmware version: 1.050
|_  Command: BJL,BJRaster3,BSCCe,NCCe,IVEC,IVECPLI
8612/udp open  canon-bjnp2
| bjnp-discover:
|   Manufacturer: Canon
|   Model: MG5200 series
|   Description: Canon MG5200 series
|_  Command: MultiPass 2.1,IVEC

Requires


description = [[
Retrieves printer or scanner information from a remote device supporting the
BJNP protocol. The protocol is known to be supported by network based Canon
devices.
]]

---
-- @usage
-- sudo nmap -sU -p 8611,8612 --script bjnp-discover <ip>
--
-- @output
-- PORT     STATE SERVICE
-- 8611/udp open  canon-bjnp1
-- | bjnp-discover:
-- |   Manufacturer: Canon
-- |   Model: MG5200 series
-- |   Description: Canon MG5200 series
-- |   Firmware version: 1.050
-- |_  Command: BJL,BJRaster3,BSCCe,NCCe,IVEC,IVECPLI
-- 8612/udp open  canon-bjnp2
-- | bjnp-discover:
-- |   Manufacturer: Canon
-- |   Model: MG5200 series
-- |   Description: Canon MG5200 series
-- |_  Command: MultiPass 2.1,IVEC
--

categories = {"safe", "discovery"}
author = "Patrik Karlsson"

local bjnp = require("bjnp")
local shortport = require("shortport")
local stdnse = require("stdnse")

portrule = shortport.portnumber({8611, 8612}, "udp")

action = function(host, port)
  local helper = bjnp.Helper:new(host, port)
  if ( not(helper:connect()) ) then
    return stdnse.format_output(false, "Failed to connect to server")
  end
  local status, attrs
  if ( port.number == 8611 ) then
    status, attrs = helper:getPrinterIdentity()
  else
    status, attrs = helper:getScannerIdentity()
  end
  helper:close()
  return stdnse.format_output(true, attrs)
end

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.8%

Related for NMAP:BJNP-DISCOVER.NSE