SSH Server type and version
🗓️ 26 Mar 2006 00:00:00Reported by Copyright (C) 2006 SecuriTeamType 
openvas🔗 plugins.openvas.org👁 685 Views
# SPDX-FileCopyrightText: 2006 SecuriTeam
# SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.10267");
script_version("2026-06-04T07:09:46+0000");
script_tag(name:"cvss_base", value:"0.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
script_tag(name:"last_modification", value:"2026-06-04 07:09:46 +0000 (Thu, 04 Jun 2026)");
script_tag(name:"creation_date", value:"2006-03-26 17:55:15 +0200 (Sun, 26 Mar 2006)");
script_name("SSH Server type and version");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2006 SecuriTeam");
script_family("Product detection");
script_dependencies("find_service.nasl", "find_service_spontaneous.nasl", "find_service6.nasl",
"ssh_authorization_init.nasl", "global_settings.nasl");
script_require_ports("Services/ssh", 22);
script_tag(name:"summary", value:"This detects the SSH Server's type and version by connecting to
the server and processing the buffer received.");
script_tag(name:"insight", value:"This information gives potential attackers additional
information about the system they are attacking. Versions and Types should be omitted where
possible.");
script_tag(name:"qod_type", value:"remote_banner");
exit(0);
}
include("port_service_func.inc");
include("ssh_func.inc");
include("host_details.inc");
include("misc_func.inc");
login = kb_ssh_login();
passwd = kb_ssh_password();
privkey = kb_ssh_privatekey();
passphrase = kb_ssh_passphrase();
activeauth = get_kb_item( "global_settings/authenticated_scans_disabled" );
if( login && ( passwd || privkey ) && ! activeauth ) {
report_passwd = "SSH password/private key configured for this task";
} else {
vt_strings = get_vt_strings();
login = vt_strings["default"];
passwd = vt_strings["default"];
report_passwd = passwd;
}
port = ssh_get_port( default:22 );
server_banner = ssh_get_serverbanner( port:port );
if( ! server_banner )
exit( 0 );
soc = open_sock_tcp( port );
if( soc ) {
login_banner = ssh_get_login_banner( port:port, sock:soc, login:login, passwd:passwd, privkey:privkey, keypassphrase:passphrase );
sess_id = ssh_session_id_from_sock( soc );
if( sess_id )
supported = ssh_get_supported_authentication( sess_id:sess_id );
close( soc );
}
set_kb_item( name:"ssh_or_telnet/banner/available", value:TRUE );
set_kb_item( name:"ssh/server_banner/available", value:TRUE );
set_kb_item( name:"ssh/server_banner/" + port + "/available", value:TRUE );
text = 'Remote SSH server banner: ' + server_banner + '\n';
text += 'Remote SSH supported authentication: ';
if( supported ) {
set_kb_item( name:"SSH/supportedauth/" + port, value:supported );
text += supported + '\n';
} else {
text += '(not available)\n';
}
text += 'Remote SSH text/login banner: ';
if( login_banner ) {
text += '\n\n--- separator ---\n\n' + login_banner + '\n\n--- separator ---';
set_kb_item( name:"ssh/login_banner/available", value:TRUE );
set_kb_item( name:"ssh/login_banner/" + port + "/available", value:TRUE );
} else {
text += '(not available)';
}
if( server_banner =~ "SSH-.+OpenSSH" ) {
set_kb_item( name:"ssh/openssh/detected", value:TRUE );
set_kb_item( name:"ssh/openssh/" + port + "/detected", value:TRUE );
set_kb_item( name:"ssh/openssh_or_dropbear/detected", value:TRUE );
set_kb_item( name:"ssh/openssh_or_dropbear/" + port + "/detected", value:TRUE );
# For gsf/2023/fortinet/gb_fortisiem_ssh_default_credentials.nasl but no reporting as this is
# too generic...
set_kb_item( name:"ssh/openssh_or_fortissh/detected", value:TRUE );
set_kb_item( name:"ssh/openssh_or_fortissh/detected/" + port + "/detected", value:TRUE );
guess += '\n- OpenSSH';
}
if( "Foxit-WAC-Server" >< server_banner ) {
set_kb_item( name:"ssh/foxit/wac-server/detected", value:TRUE );
set_kb_item( name:"ssh_or_telnet/foxit/wac-server/detected", value:TRUE );
set_kb_item( name:"ssh/foxit/wac-server/" + port + "/detected", value:TRUE );
guess += '\n- Foxit Software WAC Server';
}
if( server_banner =~ "SSH-.+dropbear" ) {
set_kb_item( name:"ssh/dropbear_ssh/detected", value:TRUE );
set_kb_item( name:"ssh/dropbear_ssh/" + port + "/detected", value:TRUE );
set_kb_item( name:"ssh/openssh_or_dropbear/detected", value:TRUE );
guess += '\n- Dropbear SSH';
}
if( egrep( string:server_banner, pattern:"^SSH-[0-9.]+-SSF" ) ) {
set_kb_item( name:"ssh/ssf/detected", value:TRUE );
set_kb_item( name:"ssh/ssf/" + port + "/detected", value:TRUE );
guess += '\n- SSF';
}
# SSH-2.0-libssh_0.7.7
# SSH-2.0-libssh_0.8.4
# SSH-2.0-libssh-0.7.0
# SSH-2.0-libssh
# SSH-2.0-libssh-0.2
# SSH-2.0-libssh_0.7.90
# SSH-2.0-libssh_0.11.4
if( server_banner =~ "^SSH-.*libssh" ) {
is_libssh = TRUE; # nb: Used for Cisco WLC below
set_kb_item( name:"ssh/libssh/detected", value:TRUE );
set_kb_item( name:"ssh/libssh/" + port + "/detected", value:TRUE );
guess += '\n- SSH implementation using the https://www.libssh.org/ library';
}
if( server_banner =~ "SSH\-.*ReflectionForSecureIT" ) {
set_kb_item( name:"ssh/reflection/secureit/detected", value:TRUE );
set_kb_item( name:"ssh/reflection/secureit/" + port + "/detected", value:TRUE );
guess += '\n- Reflection for Secure IT';
}
if( server_banner =~ "SSH-[0-9.]+-Comware" ) {
set_kb_item( name:"ssh/hp/comware/detected", value:TRUE );
set_kb_item( name:"ssh/hp/comware/" + port + "/detected", value:TRUE );
guess += '\n- HP Comware Device';
}
# nb: Don't report GoAnywhere as this Golang library
if( "SSH-2.0-Go" >< server_banner && "SSH-2.0-GoAnywhere" >!< server_banner ) {
set_kb_item( name:"ssh/golang/ssh/detected", value:TRUE );
set_kb_item( name:"ssh/golang/ssh/" + port + "/detected", value:TRUE );
guess += '\n- SSH implementation using the Golang SSH library';
}
if( ereg( pattern:'SSH-[0-9.-]+[ \t]+RemotelyAnywhere', string:server_banner ) ) {
set_kb_item( name:"ssh/remotelyanywhere/detected", value:TRUE );
set_kb_item( name:"ssh/remotelyanywhere/" + port + "/detected", value:TRUE );
guess += '\n- RemotelyAnywhere';
}
if( server_banner =~ "SSH.*xlightftpd" ) {
set_kb_item( name:"ssh/xlightftpd/detected", value:TRUE );
set_kb_item( name:"ssh/xlightftpd/" + port + "/detected", value:TRUE );
guess += '\n- SSH service of Xlight FTP';
}
if( egrep( pattern:"SSH.+WeOnlyDo", string:server_banner ) ) {
set_kb_item( name:"ssh/freesshd/detected", value:TRUE );
set_kb_item( name:"ssh/freesshd/" + port + "/detected", value:TRUE );
guess += '\n- FreeSSHD';
}
# SSH-2.0-5.23 FlowSsh: Bitvise SSH Server (WinSSHD) 6.04
# SSH-2.0-5.17 FlowSsh: Bitvise SSH Server (WinSSHD) 5.60: free only for personal non-commercial use
# SSH-2.0-8.49 FlowSsh: Bitvise SSH Server (WinSSHD) 8.49
# SSH-2.0-9.32 FlowSsh: Bitvise SSH Server (WinSSHD) 9.32: free only for personal non-commercial use
#
# nb: Keep the pattern "in sync" with gb_bitvise_ssh_server_ssh_banner_detect.nasl and gb_ssh_os_detection.nasl
if( server_banner =~ "SSH.*Bitvise SSH Server \(WinSSHD\)" ) {
set_kb_item( name:"ssh/bitvise/ssh_server/detected", value:TRUE );
set_kb_item( name:"ssh/bitvise/ssh_server/" + port + "/detected", value:TRUE );
guess += '\n- Bitvise SSH Server';
}
if( egrep( pattern:"SSH.+SysaxSSH", string:server_banner ) ) {
set_kb_item( name:"ssh/sysaxssh/detected", value:TRUE );
set_kb_item( name:"ssh/sysaxssh/" + port + "/detected", value:TRUE );
guess += '\n- Sysax Multi Server SSH Component';
}
if( egrep( pattern:"SSH.+Serv-U", string:server_banner ) ) {
set_kb_item( name:"ssh/serv-u/detected", value:TRUE );
set_kb_item( name:"ssh/serv-u/" + port + "/detected", value:TRUE );
guess += '\n- Serv-U SSH';
}
if( server_banner =~ "^SSH-[0-9.]+-ROSSSH" ) {
set_kb_item( name:"ssh/mikrotik/routeros/detected", value:TRUE );
set_kb_item( name:"ssh/mikrotik/routeros/" + port + "/detected", value:TRUE );
guess += '\n- MikroTik RouterOS';
}
if( server_banner =~ "^SSH-[0-9.]+-Cisco-[0-9.]+" ) {
set_kb_item( name:"ssh/cisco/ios/detected", value:TRUE );
set_kb_item( name:"ssh/cisco/ios/" + port + "/detected", value:TRUE );
guess += '\n- Cisco IOS';
}
if( egrep( pattern:"SSH.+Data ONTAP SSH", string:server_banner ) ) {
set_kb_item( name:"ssh/netapp/data_ontap/detected", value:TRUE );
set_kb_item( name:"ssh/netapp/data_ontap/" + port + "/detected", value:TRUE );
guess += '\n- NetApp Data ONTAP';
}
if( egrep( pattern:"SSH.+-lancom", string:server_banner ) ) {
set_kb_item( name:"ssh/lancom/detected", value:TRUE );
set_kb_item( name:"ssh/lancom/" + port + "/detected", value:TRUE );
guess += '\n- LANCOM Device';
}
if( egrep( pattern:"SSH.+-Zyxel SSH server", string:server_banner ) ) {
set_kb_item( name:"ssh/zyxel/detected", value:TRUE );
set_kb_item( name:"ssh/zyxel/" + port + "/detected", value:TRUE );
guess += '\n- Zyxel Device (e.g. USG, NCX2500, UAG or WAC500)';
}
# SSH-2.0-Greenbone_7.4p2gb Greenbone OS 6.0
#
# Older releases of GOS had also a pre-login banner like e.g.:
#
# Welcome to Greenbone OS 1.6
#
if( egrep( pattern:"SSH.+Greenbone OS", string:server_banner ) || "Welcome to Greenbone OS" >< login_banner ) {
set_kb_item( name:"ssh/greenbone/gos/detected", value:TRUE );
set_kb_item( name:"ssh/greenbone/gos/" + port + "/detected", value:TRUE );
guess += '\n- Greenbone OS (GOS)';
}
# SSH-2.0-HUAWEI-1.5
# SSH-2.0-HUAWEI-VRP-3.10
# SSH-2.0-VRP-3.3
# SSH-1.99-VRP-3.4
if( server_banner == "SSH-2.0--" || server_banner == "SSH-1.99--" ||
egrep( string:server_banner, pattern:"^SSH-[0-9.]+-(HUAWEI|VRP)-", icase:FALSE ) ) {
set_kb_item( name:"ssh/huawei/vrp/detected", value:TRUE );
set_kb_item( name:"ssh/huawei/vrp/" + port + "/detected", value:TRUE );
guess += '\n- Huawei Versatile Routing Platform (VRP)';
}
if( server_banner =~ "SSH-.+OpenSSL" ) {
set_kb_item( name:"ssh/openssl/detected", value:TRUE );
set_kb_item( name:"ssh/openssl/" + port + "/detected", value:TRUE );
guess += '\n- OpenSSL';
}
# SSH-2.0-WS_FTP-SSH_7.6.3
if( server_banner =~ "SSH-.+WS_FTP" ) {
set_kb_item( name:"ssh/ws_ftp/detected", value:TRUE );
set_kb_item( name:"ssh/ws_ftp/" + port + "/detected", value:TRUE );
guess += '\n- Progress WS_FTP Server';
}
# SSH-2.0-CISCO_WLC
if( server_banner =~ "SSH-.+CISCO_WLC" || is_libssh ) {
set_kb_item( name:"ssh/cisco/wlc/detected", value:TRUE );
set_kb_item( name:"ssh/cisco/wlc/" + port + "/detected", value:TRUE );
# nb: We only want to report for the CISCO_WLC banner as the libssh one is too generic...
if( ! is_libssh )
guess += '\n- Cisco Wireless LAN Controller (WLC)';
}
# SSH-2.0-CrestronSSH
# nb: Some (older?) devices are also using OpenSSH...
if( "SSH-2.0-CrestronSSH" >< server_banner ) {
set_kb_item( name:"ssh/crestron/detected", value:TRUE );
set_kb_item( name:"ssh/crestron/" + port + "/detected", value:TRUE );
guess += '\n- Crestron device';
}
# SSH-2.0-ArrayOS
if( server_banner =~ "SSH-.+ArrayOS" ) {
set_kb_item( name:"ssh/array/arayos/detected", value:TRUE );
set_kb_item( name:"ssh/array/arayos/" + port + "/detected", value:TRUE );
guess += '\n- ArrayOS';
}
# SSH-2.0-MOVEit Transfer SFTP
if( server_banner =~ "SSH-.+\-MOVEit Transfer SFTP" ) {
set_kb_item( name:"ssh/progress/moveit_transfer/detected", value:TRUE );
set_kb_item( name:"ssh_progress/moveit_transfer/" + port + "/detected", value:TRUE );
guess += '\n- Progress MOVEit Transfer';
}
# SSH-2.0-1.82_sshlib Globalscape
if( server_banner =~ "SSH-.+ Globalscape" ) {
set_kb_item( name:"ssh/fortra/globalscape/eft/detected", value:TRUE );
set_kb_item( name:"ssh/fortra/globalscape/eft/" + port + "/detected", value:TRUE );
guess += '\n- Fortra Globalscape EFT';
}
# SSH-2.0-OpenSSH_7.9 PKIX[11.6]
if( server_banner =~ "SSH-.+ PKIX" ) {
set_kb_item( name:"ssh/pkixssh/detected", value:TRUE );
set_kb_item( name:"ssh/pkixssh/" + port + "/detected", value:TRUE );
guess += '\n- PKIX-SSH';
}
# SSH-2.0-sashimi-0.6.5
if( server_banner =~ "SSH-.+sashimi" ) {
set_kb_item( name:"ssh/sashimi/detected", value:TRUE );
set_kb_item( name:"ssh/sashimi/" + port + "/detected", value:TRUE );
guess += '\n- Sashimi';
}
# SSH-2.0-JSCAPE
if( server_banner =~ "SSH-.+JSCAPE" ) {
set_kb_item( name:"ssh/jscape/mft/detected", value:TRUE );
set_kb_item( name:"ssh/jscape/mft/" + port + "/detected", value:TRUE );
guess += '\n- JSCAPE MFT Server';
}
# SSH-2.0-FortiSSH_2.5
if( server_banner =~ "SSH-.+FortiSSH" ) {
set_kb_item( name:"ssh/openssh_or_fortissh/detected", value:TRUE );
set_kb_item( name:"ssh/openssh_or_fortissh/detected/" + port + "/detected", value:TRUE );
guess += '\n- Fortinet Device';
}
# SSH-2.0-GoAnywhere7.4.1
if( server_banner =~ "SSH-.+GoAnywhere" ) {
set_kb_item( name:"ssh/goanywhere/mft/detected", value:TRUE );
set_kb_item( name:"ssh/goanywhere/mft/detected/" + port + "/detected", value:TRUE );
guess += '\n- GoAnywhere MFT';
}
# In addition it seems some (older?) Fortinet devices are also using random chars like e.g.:
# SSH-2.0-wPfK8KZ9BAqqkX
# SSH-2.0-OeDyjbv6FV
# nb: No "guess" reporting is added here currently as this is too generic...
if( egrep( string:server_banner, pattern:"SSH-2\.0-[a-zA-Z0-9]{5,15}$", icase:FALSE ) ) {
set_kb_item( name:"ssh/openssh_or_fortissh/detected", value:TRUE );
set_kb_item( name:"ssh/openssh_or_fortissh/detected/" + port + "/detected", value:TRUE );
}
# SSH-2.0-CrushFTPSSHD_5
# SSH-2.0-CrushFTPSSHD
if( server_banner =~ "SSH-.+CrushFTPSSHD" ) {
set_kb_item( name:"ssh/crushftp/detected", value:TRUE );
set_kb_item( name:"ssh/crushftp/detected/" + port + "/detected", value:TRUE );
guess += '\n- CrushFTP';
}
# SSH-2.0-IPSSH-6.9.0 Easergy-P5
if( server_banner =~ "SSH-.+ Easergy-P[0-9]" ) {
set_kb_item( name:"ssh/schneider/powerlogic/protection/detected", value:TRUE );
set_kb_item( name:"ssh/schneider/powerlogic/protection/" + port + "/detected", value:TRUE );
guess += '\n- Schneider Electric PowerLogic Protection Device';
}
# SSH-2.0-AudioCodes
if( server_banner =~ "SSH-.+AudioCodes" ) {
set_kb_item( name:"ssh/audiocodes/sbc/detected", value:TRUE );
set_kb_item( name:"ssh/audiocodes/sbc/" + port + "/detected", value:TRUE );
guess += '\n- AudioCodes SBC / Media Gateway';
}
# SSH-2.0-Cleo Harmony/5.8.0.24 SSH FTP server
# SSH-2.0-Cleo Harmony/5.5.0.3 SSH FTP server
#
# SSH-2.0-Cleo VLTrader/5.8.0.24 SSH FTP server
# SSH-2.0-Cleo VLTrader/5.2.0.15 SSH FTP server
#
# SSH-2.0-Cleo VLProxy/3.10.0.1 SSH FTP server
# SSH-2.0-Cleo VLProxy/3.2 SSH FTP server
#
# A single system with this has been seen as well:
#
# SSH-2.0-Cleo_5.7
if( egrep( string:server_banner, pattern:"SSH-[0-9.]+-Cleo.+SSH FTP server", icase:FALSE ) ) {
set_kb_item( name:"ssh/cleo/products/detected", value:TRUE );
set_kb_item( name:"ssh/cleo/products/" + port + "/detected", value:TRUE );
guess += '\n- Cleo Product';
}
# SSH-2.0-Erlang/4.10.7
# SSH-2.0-Erlang/5.1.4.7
if( egrep( string:server_banner, pattern:"SSH-[0-9.]+-Erlang", icase:FALSE ) ) {
set_kb_item( name:"ssh/erlang/otp/detected", value:TRUE );
set_kb_item( name:"ssh/erlang/otp/" + port + "/detected", value:TRUE );
guess += '\n- Erlang/OTP (Erlang OTP)';
}
if( egrep( string:server_banner, pattern:"SSH-[0-9.]+-WatchGuard", icase:FALSE ) ) {
set_kb_item( name:"ssh/watchguard/fireware/detected", value:TRUE );
set_kb_item( name:"ssh/watchguard/fireware/" + port + "/detected", value:TRUE );
guess += '\n- WatchGuard Fireware/Firebox';
}
if( login_banner ) {
if( login_banner =~ "^Nexus .*Switch" ) {
set_kb_item( name:"ssh/cisco/nx_os/detected", value:TRUE );
set_kb_item( name:"ssh/cisco/nx_os/" + port + "/detected", value:TRUE );
guess += '\n- Cisco Nexus Switch';
}
if( "Riverbed" >< login_banner ) {
if( "Riverbed SteelHead" >< login_banner ) { # gb_riverbed_steelhead_ssh_detect.nasl
set_kb_item( name:"ssh/riverbed/steelhead/detected", value:TRUE );
set_kb_item( name:"ssh/riverbed/steelhead/" + port + "/detected", value:TRUE );
guess += '\n- Riverbed SteelHead';
}
if( "Riverbed Cascade" >< login_banner ) { # gb_riverbed_steelcentral_ssh_detect.nasl
set_kb_item( name:"ssh/riverbed/steelcentral/detected", value:TRUE );
set_kb_item( name:"ssh/riverbed/steelcentral/" + port + "/detected", value:TRUE );
set_kb_item( name:"ssh/riverbed/cascade/detected", value:TRUE );
set_kb_item( name:"ssh/riverbed/cascade/" + port + "/detected", value:TRUE );
guess += '\n- Riverbed Cascade/SteelCentral';
}
# If one of the above doesn't match we still want to report an unknown Riverbed Product.
if( "Riverbed" >!< guess ) {
set_kb_item( name:"ssh/riverbed/unknown_product/detected", value:TRUE );
set_kb_item( name:"ssh/riverbed/unknown_product/" + port + "/detected", value:TRUE );
guess += '\n- Unknown Riverbed Product';
}
}
if( "viptela" >< login_banner && "OpenSSH" >< server_banner ) {
set_kb_item( name:"ssh/cisco/vmanage/detected", value:TRUE );
set_kb_item( name:"ssh/cisco/vmanage/" + port + "/detected", value:TRUE );
guess += '\n- Cisco SD-WAN vManage';
}
# VMware vCenter Server Appliance 6.5.0.5100
# Type: vCenter Server with an embedded Platform Services Controller
#
# VMware vCenter Server 7.0.3.01800
# Type: vCenter Server with an embedded Platform Services Controller
if( ( "VMware vCenter Server " >< login_banner && "OpenSSH" >< server_banner ) ||
"Type: vCenter Server with " >< login_banner ) {
set_kb_item( name:"ssh/vmware/vcenter/server/detected", value:TRUE );
set_kb_item( name:"ssh/vmware/vcenter/server/" + port + "/detected", value:TRUE );
guess += '\n- VMware vCenter Server (Appliance)';
}
# VMware Site Recovery Manager Appliance 8.3.0.4135 build 15929234
if( "VMware Site Recovery Manager Appliance" >< login_banner && "OpenSSH" >< server_banner ) {
set_kb_item( name:"ssh/vmware/srm/detected", value:TRUE );
set_kb_item( name:"ssh/vmware/srm/" + port + "/detected", value:TRUE );
guess += '\n- VMware Site Recovery Manager (SRM)';
}
# Avi Cloud Controller
if( "Avi Cloud Controller" >< login_banner && "OpenSSH" >< server_banner ) {
set_kb_item( name:"ssh/vmware/avi/detected", value:TRUE );
set_kb_item( name:"ssh/vmware/avi/" + port + "/detected", value:TRUE );
guess += '\n- VMware Avi Load Balancer';
}
# nb: More detailed detection for both Dell ones in gsf/gb_dell_emc_smartfabric_os10_ssh_banner_detect.nasl
#
# Dell EMC Networking Operating System (OS10)
if( "Dell EMC Networking Operating System (OS10)" >< login_banner ) {
set_kb_item( name:"ssh/dell/smartfabric/os10/detected", value:TRUE );
set_kb_item( name:"ssh/dell/smartfabric/os10/" + port + "/detected", value:TRUE );
guess += '\n- Dell EMC SmartFabric OS10';
}
# Dell SmartFabric OS10 Enterprise
if( "Dell SmartFabric OS10" >< login_banner ) {
set_kb_item( name:"ssh/dell/smartfabric/os10/detected", value:TRUE );
set_kb_item( name:"ssh/dell/smartfabric/os10/" + port + "/detected", value:TRUE );
guess += '\n- Dell SmartFabric OS10';
}
# Vega Session Controller - 2.3.23-119 (GA)
if( "Vega Session Controller" >< login_banner ) {
set_kb_item( name:"ssh/sangoma/sbc/detected", value:TRUE );
set_kb_item( name:"ssh/sangoma/sbc/" + port + "/detected", value:TRUE );
guess += '\n- Sangoma Session Border Controller (SBC)';
}
# Space release 20.1R1.2 (393060)
if( "Space release" >< login_banner ) {
set_kb_item( name:"ssh/juniper/junos/space/detected", value:TRUE );
set_kb_item( name:"ssh/juniper/junos/space/" + port + "/detected", value:TRUE );
guess += '\n- Juniper Networks Junos Space';
}
# NetMRI VM-1234-5678
if( "NetMRI" >< login_banner ) {
set_kb_item( name:"ssh/infoblox/netmri/detected", value:TRUE );
set_kb_item( name:"ssh/infoblox/netmri/" + port + "/detected", value:TRUE );
guess += '\n- Infoblox NetMRI';
}
# Welcome to EMC UnityVSA 12GB...
if( "Welcome to EMC Unity" >< login_banner ) {
set_kb_item( name:"ssh/dell/unity/detected", value:TRUE );
set_kb_item( name:"ssh/dell_unity/" + port + "/detected", value:TRUE );
guess += '\n- Dell Unity';
}
# SBS 5.3.0
if( login_banner =~ "SBS [0-9]+\.[0-9]+\.[0-9]+" && server_banner =~ "SSH-.+OpenSSH" ) {
set_kb_item( name:"ssh/cisco/cyber_vision/detected", value:TRUE );
set_kb_item( name:"ssh/cisco/cyber_vision/" + port + "/detected", value:TRUE );
guess += '\n- Cisco Cyber Vision Center';
}
}
if( strlen( guess ) > 0 )
text += '\n\nThis is probably (a):\n' + guess;
text += '\n\nConcluded from remote connection attempt with credentials:\n';
text += '\nLogin: ' + login;
text += '\nPassword: ' + report_passwd;
service_register( port:port, proto:"ssh", message:text );
log_message( port:port, data:text );
exit( 0 );
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Jun 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8