Vicon Industries Network Camera Detection (Telnet)

# SPDX-FileCopyrightText: 2018 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.107334");
  script_version("2026-06-26T06:55:50+0000");
  script_tag(name:"last_modification", value:"2026-06-26 06:55:50 +0000 (Fri, 26 Jun 2026)");
  script_tag(name:"creation_date", value:"2018-07-23 11:32:40 +0200 (Mon, 23 Jul 2018)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_name("Vicon Industries Network Camera Detection (Telnet)");
  script_category(ACT_GATHER_INFO);
  script_family("Product detection");
  script_copyright("Copyright (C) 2018 Greenbone AG");
  script_dependencies("telnetserver_detect_type_nd_version.nasl");
  script_require_ports("Services/telnet", 23);
  script_mandatory_keys("telnet/vicon_industries/network_camera/detected");

  script_tag(name:"summary", value:"Telnet based detection of Vicon Industries Network Cameras.");

  script_tag(name:"qod_type", value:"remote_banner");

  exit(0);
}

include("misc_func.inc");
include("port_service_func.inc");
include("dump.inc");
include("telnet_func.inc");
include("host_details.inc");

port = telnet_get_port( default:23 );

if( ! banner = telnet_get_banner( port:port ) )
  exit( 0 );

if( egrep( string:banner, pattern:"^IQinVision .* Version ", icase:FALSE ) ||
    ( banner =~ "IQinVision " && banner =~ "Type HELP at the .* prompt for assistance" ) ) {

  set_kb_item( name:"vicon_industries/network_camera/detected", value:TRUE );
  set_kb_item( name:"vicon_industries/network_camera/telnet/detected", value:TRUE );
  set_kb_item( name:"vicon_industries/network_camera/telnet/port", value:port );

  version = "unknown";
  type = "unknown";

  vers = eregmatch( pattern:"(Software version|Version) [VB]?([0-9.]+)", string:banner );
  if( vers[2] ) {
    version = vers[2];
    set_kb_item( name:"vicon_industries/network_camera/telnet/" + port + "/concluded", value:vers[0] );
  } else {
    set_kb_item( name:"vicon_industries/network_camera/telnet/" + port + "/concluded", value:bin2string( ddata:banner, noprint_replacement:'' ) );
  }
  set_kb_item( name:"vicon_industries/network_camera/telnet/" + port + "/version", value:version );

  type = eregmatch( pattern:"IQ(eye)?([0578ADMPR])", string:banner );

  # nb: Keep list in sync with gb_vicon_industries_network_camera_snmp_detect.nasl
  type_list["0"] = "3 Series / 4 Series";
  type_list["5"] = "5 Series";
  type_list["7"] = "7 Series";
  type_list["8"] = "Sentinel Series";
  type_list["9"] = "9 Series";
  type_list["A"] = "Alliance-pro";
  type_list["D"] = "Alliance-mini";
  type_list["M"] = "Alliance-mx";
  type_list["P"] = "PTZ";
  type_list["R"] = "R5 series";

  if( type_list[type[2]] )
    type = type_list[type[2]];

  if( "IQinVision" >!< banner && "Software version " >< banner && "MAC address " >< banner )
    type = "Branded";

  if( type == "unknown" ) {
    username = "login";
    access = FALSE;

    soc = open_sock_tcp( port );
    if( soc ) {

      recv1 = recv( socket:soc, length:2048, timeout:10 );

      if( "prompt for assistance" >< recv1 && "Username>" >< recv1 ) {
        send( socket:soc, data:username + '\r\n' );
        recv2 = recv( socket:soc, length:2048, timeout:10 );

        if( recv2 =~ "Local_[^>]+>" ) {
          access = TRUE;
          set_kb_item( name:"vicon_industries/network_camera/telnet/" + port + "/access", value:TRUE );
        }
      }

      if( access ) {
        send( socket:soc, data:'show server\r\n' );
        recv3 = recv( socket:soc, length:2048, timeout:10 );
        typerecv = eregmatch( pattern:"(Software version|Version) [VB]?([0-9.]+)", string:bin2string( ddata:recv3, noprint_replacement:'' ) );
        if( ! isnull(typerecv[1] ) )
          type = typerecv[1];

        telnet_close_socket( socket:soc, data:recv2 );

      } else {
        close( soc );
      }
    }
    exit( 0 );
  }

  set_kb_item( name:"vicon_industries/network_camera/telnet/" + port + "/type", value:type );

  if( mac = eregmatch( pattern:"MAC address ([0-9a-fA-F]{12})", string:bin2string( ddata:banner, noprint_replacement:'' ) ) ) {
    plain_mac = mac[1];
    for( i = 0; i < 12; i++ ) {
      full_mac += plain_mac[i];
      if( i % 2 && i != 11 ) full_mac += ":";
    }
    register_host_detail( name:"MAC", value:full_mac, desc:"Get the MAC Address via Telnet banner" );
    replace_kb_item( name:"Host/mac_address", value:full_mac );
  }
}

exit( 0 );