{"id":469,"date":"2025-11-24T13:48:37","date_gmt":"2025-11-24T13:48:37","guid":{"rendered":"https:\/\/deadmeat.dk\/blog\/?p=469"},"modified":"2025-11-24T14:08:30","modified_gmt":"2025-11-24T14:08:30","slug":"sikkerhedstest-af-en-siemens-iq300","status":"publish","type":"post","link":"https:\/\/deadmeat.dk\/blog\/?p=469","title":{"rendered":"Sikkerhedstest af en Siemens iQ300"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Updateres l\u00f8bende \ud83d\ude09<\/p>

Jeg har nu testede en Siemens iQ300 for forskellige sikkerhedshuller. Jeg har brugt nmap med disse options: sudo nmap –script vuln (IP)<\/strong><\/p>

Starting Nmap 7.93 ( https:\/\/nmap.org ) at xxxxxxxxxxx CET Stats: 0:00:25 elapsed; 0 hosts completed (0 up), 0 undergoing Script Pre-Scan<\/p>

NSE Timing: About 75.00% done; ETC: 14:48 (0:00:08 remaining)<\/p>

Pre-scan script results:<\/p>

| broadcast-avahi-dos:<\/p>

|\u00a0 \u00a0Discovered hosts:<\/p>

|\u00a0 \u00a0 \u00a0224.0.0.251<\/p>

|\u00a0 \u00a0After NULL UDP avahi packet DoS (CVE-2011-1002).<\/p>

|_\u00a0 Hosts are all up (not vulnerable).<\/p>

Nmap scan report for siemens-dishwasher.domaine (IP)<\/p>

Host is up (0.020s latency).<\/p>

Not shown: 999 closed tcp ports (reset)<\/p>

PORT\u00a0 \u00a0 STATE SERVICE<\/p>

443\/tcp open\u00a0 https<\/p>

|_http-dombased-xss: Couldn’t find any DOM based XSS.<\/p>

|_http-stored-xss: Couldn’t find any stored XSS vulnerabilities.<\/p>

|_ssl-ccs-injection: No reply from server (TIMEOUT)<\/p>

|_http-aspnet-debug: ERROR: Script execution failed (use -d to debug)<\/p>

|_http-csrf: Couldn’t find any CSRF vulnerabilities.<\/p>

|_http-vuln-cve2014-3704: ERROR: Script execution failed (use -d to debug)<\/p>

MAC Address: 48:26:4C:28:49:xx (Unknown)<\/p>

nmap -sV –script “ssl-*” -p 443 (IP)<\/strong><\/p>

Starting Nmap 7.93 ( https:\/\/nmap.org ) at 2025-xx-xx 14:51 CET<\/p>

NSE: [ssl-ccs-injection] No response from server: EOF<\/p>

Nmap scan report for siemens-dishwasher (IP)<\/p>

Host is up (0.069s latency).<\/p>

PORT\u00a0 \u00a0 STATE SERVICE\u00a0 \u00a0 VERSION<\/p>

443\/tcp open\u00a0 ssl\/https?<\/p>

|_ssl-ccs-injection: No reply from server (TIMEOUT)<\/p>

|_ssl-date: TLS randomness does not represent time<\/p>

| ssl-enum-ciphers:<\/p>

|\u00a0 \u00a0TLSv1.2:<\/p>

|\u00a0 \u00a0 \u00a0ciphers:<\/p>

|\u00a0 \u00a0 \u00a0 \u00a0TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) – A<\/p>

|\u00a0 \u00a0 \u00a0 \u00a0TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 (secp256r1) – A<\/p>

|\u00a0 \u00a0 \u00a0 \u00a0TLS_PSK_WITH_AES_256_CBC_SHA – unknown<\/p>

|\u00a0 \u00a0 \u00a0 \u00a0TLS_NULL_WITH_NULL_NULL – F<\/p>

|\u00a0 \u00a0 \u00a0compressors:<\/p>

|\u00a0 \u00a0 \u00a0 \u00a0NULL<\/p>

|\u00a0 \u00a0 \u00a0cipher preference: server<\/p>

|\u00a0 \u00a0 \u00a0warnings:<\/p>

|\u00a0 \u00a0 \u00a0 \u00a0Anonymous key exchange, score capped at F<\/p>

|_\u00a0 least strength: unknown<\/p>

MAC Address: 48:26:4C:28:49:C6 (Unknown)<\/p>

nmap -sV -A (IP)<\/strong><\/p>

Starting Nmap 7.93 ( https:\/\/nmap.org ) at 2025-xxx-xxx xxx CET<\/p>

Nmap scan report for siemens-dishwasher (ip)<\/p>

Host is up (0.0068s latency).<\/p>

Not shown: 999 closed tcp ports (reset)<\/p>

PORT\u00a0 \u00a0 STATE SERVICE\u00a0 \u00a0 VERSION<\/p>

443\/tcp open\u00a0 ssl\/https?<\/p>

|_ssl-date: TLS randomness does not represent time<\/p>

MAC Address: 48:26:4C:28:49:xx (Unknown)<\/p>

No exact OS matches for host (If you know what OS is running on it, see https:\/\/nmap.org\/submit\/ ). TCP\/IP fingerprint:<\/p>

OS:SCAN(V=7.93%E=4%D=11\/24%OT=443%CT=1%CU=36806%PV=Y%DS=1%DC=D%G=Y%M=48264C OS:%TM=69245D20%P=aarch64-unknown-linux -gnu)SEQ(SP=104%GCD=1%ISR=10B%TI=Z%C OS:I=Z%II=I%TS=A)SEQ(II=I)OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4 OS:%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)WIN(W1=FE88%W2=FE88%W3=FE88%W OS:4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M5B4NNSNW4%CC=Y%Q=)ECN OS:R=N)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T1(R=N)T2(R=N)T3(R=N)T4(R=Y%OS:DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%OS:O=%RD=0%Q=)T5(R=N)T6(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T7(R=Y%DF=OS:Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164%UN=0 OS:%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S)<\/p>

\u00a0<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Updateres l\u00f8bende \ud83d\ude09 Jeg har nu testede en Siemens iQ300 for forskellige sikkerhedshuller. Jeg har brugt nmap med disse options: sudo nmap –script vuln (IP) Starting Nmap 7.93 ( https:\/\/nmap.org ) at xxxxxxxxxxx CET Stats: 0:00:25 elapsed; 0 hosts completed (0 up), 0 undergoing Script Pre-Scan NSE Timing: About 75.00% done; ETC: 14:48 (0:00:08 remaining) … L\u00e6s videre “Sikkerhedstest af en Siemens iQ300”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[4,1],"tags":[10],"class_list":["post-469","post","type-post","status-publish","format-standard","hentry","category-noerd-og-hakkeri","category-uncategorized","tag-hacking-iq300-siemens"],"jetpack_publicize_connections":[],"jetpack-related-posts":[],"jetpack_shortlink":"https:\/\/wp.me\/pdfM7C-7z","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/469","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=469"}],"version-history":[{"count":6,"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/469\/revisions"}],"predecessor-version":[{"id":475,"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=\/wp\/v2\/posts\/469\/revisions\/475"}],"wp:attachment":[{"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=469"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=469"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/deadmeat.dk\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=469"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}