Lucene search
K

AVM FRITZ!Box Detection (SIP)

🗓️ 05 Jan 2017 00:00:00Reported by Copyright (C) 2017 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 25 Views

AVM FRITZ!Box Detection (SIP) script identifies AVM FRITZ!Box via SIP banner and tries to extract model and version number

Code
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.108037");
  script_version("2025-09-09T14:09:45+0000");
  script_tag(name:"last_modification", value:"2025-09-09 14:09:45 +0000 (Tue, 09 Sep 2025)");
  script_tag(name:"creation_date", value:"2017-01-05 13:21:05 +0100 (Thu, 05 Jan 2017)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_name("AVM FRITZ!Box Detection (SIP)");
  script_category(ACT_GATHER_INFO);
  script_family("Product detection");
  script_copyright("Copyright (C) 2017 Greenbone AG");
  script_dependencies("sip_detection.nasl", "sip_detection_tcp.nasl");
  script_mandatory_keys("sip/banner/available");

  script_tag(name:"summary", value:"SIP based detection of AVM FRITZ!Box devices.");

  script_tag(name:"qod_type", value:"remote_banner");

  exit(0);
}

include("sip.inc");
include("misc_func.inc");
include("port_service_func.inc");

infos = sip_get_port_proto( default_port:"5060", default_proto:"udp" );
port = infos["port"];
proto = infos["proto"];

banner = sip_get_banner( port:port, proto:proto );

if( banner && ( "AVM FRITZ" >< banner || "FRITZ!OS" >< banner ) ) {

  set_kb_item( name:"avm_fritz_box/detected", value:TRUE );
  set_kb_item( name:"avm_fritz_box/sip/" + proto + "/detected", value:TRUE );
  set_kb_item( name:"avm_fritz_box/sip/" + proto + "/port", value:port );
  set_kb_item( name:"avm_fritz_box/sip/" + proto + "/" + port + "/concluded", value:banner );

  type = "unknown";
  model = "unknown";
  fw_version = "unknown";

  # User-Agent: AVM FRITZ!Box Fon WLAN 7170 29.04.76 (Jul 13 2009)
  # User-Agent: AVM FRITZ!Box Fon WLAN 7141 (UI) 40.04.77 TAL (Feb 10 2014)
  # User-Agent: AVM FRITZ!Box 6810 LTE 108.05.56 (Aug 13 2013)
  mo = eregmatch( pattern:'AVM FRITZ!Box (Fon WLAN|WLAN)? ?([0-9]+( (v[0-9]+|vDSL|SL|LTE|Cable))?)', string:banner );
  if( ! isnull( mo[1] ) )
    type = mo[1];

  if( ! isnull( mo[2] ) )
    model = mo[2];

  fw = eregmatch( pattern:'AVM FRITZ!Box .* ([0-9]+\\.[0-9]+\\.[0-9]+)($| |\\()', string:banner );
  if( ! isnull( fw[1] ) )
    fw_version = fw[1];

  set_kb_item( name:"avm_fritz_box/sip/" + proto + "/" + port + "/type", value:type );
  set_kb_item( name:"avm_fritz_box/sip/" + proto + "/" + port + "/model", value:model );
  set_kb_item( name:"avm_fritz_box/sip/" + proto + "/" + port + "/firmware_version", value:fw_version );
}

exit( 0 );

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Sep 2025 00:00Current
7High risk
Vulners AI Score7
25