GeneralInformation

Hostnames	ec2-18-197-206-194.eu-central-1.compute.amazonaws.com emergency.dia.support
Domains	amazonaws.com dia.support
Cloud Provider	Amazon
Cloud Region	eu-central-1
Cloud Service	EC2
Country	Germany
City	Frankfurt am Main
Organization	A100 ROW GmbH
ISP	Amazon.com, Inc.
ASN	AS16509

WebTechnologies

Development

Atlassian Jira Issue Collector

Issue trackers

Atlassian Jira Issue Collector

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-3824	9.8In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
CVE-2023-3823	7.5In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down.
CVE-2013-2220	Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
CVE-2007-3205	The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

80 443 8001

-554697480 | 2024-04-11T15:26:03.275056

80 / tcp

HTTP/1.1 200 OK
Date: Thu, 11 Apr 2024 15:26:03 GMT
Content-Type: text/html
Content-Length: 1074
Connection: keep-alive
Server: nginx/1.25.4
Last-Modified: Fri, 05 Apr 2024 06:31:50 GMT
ETag: "660f9ad6-432"
Accept-Ranges: bytes

456823233 | 2024-03-29T23:55:13.532254

443 / tcp

HTTP/1.1 404 Not Found
Server: awselb/2.0
Date: Fri, 29 Mar 2024 23:55:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 0
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:63:fe:44:7f:ba:48:5e:28:2f:da:f3:fd:69:70
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: May 21 00:00:00 2023 GMT
            Not After : Jun 18 23:59:59 2024 GMT
        Subject: CN=emergency.dia.support
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:37:ec:a6:4e:59:34:69:cc:53:51:1d:c4:
                    a4:cf:19:5c:b1:de:cc:fe:5f:25:a2:6e:1f:f9:cc:
                    bc:df:b0:7a:ba:85:35:72:4f:4c:3a:c4:e5:3a:c0:
                    10:1e:07:43:af:32:2f:05:70:bf:7c:91:dc:88:b1:
                    eb:32:14:de:6c:24:1a:f7:51:eb:84:06:d0:32:9d:
                    3b:ce:47:70:c3:f8:fe:5a:da:60:19:19:08:3b:9e:
                    0a:eb:ea:3d:77:98:0e:01:2f:25:af:11:c7:89:97:
                    d5:4d:0c:63:82:67:9c:a2:fa:fc:2c:b5:ed:52:1f:
                    c5:e3:59:b6:85:2f:b0:fd:b7:11:49:c1:13:e4:9f:
                    47:84:4d:16:f6:9f:b5:39:c0:cc:43:17:29:43:17:
                    e4:32:6a:6d:29:57:74:55:76:58:9a:25:0d:fa:58:
                    4b:0b:a1:56:65:31:19:17:8a:c7:ea:65:f6:4f:74:
                    8a:7f:e3:b6:23:90:8f:b7:c2:81:90:ce:6d:43:9b:
                    2b:c1:fa:68:49:49:e0:7d:84:af:d1:3e:e2:ee:a9:
                    4c:fc:3d:ab:96:7f:99:90:09:c1:a0:7b:f2:cc:86:
                    42:31:92:0a:96:51:bb:bc:db:e5:aa:14:35:ee:5c:
                    2a:a9:49:00:71:cc:d3:1b:2c:14:6c:bb:2f:78:be:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                95:4A:7D:8D:8A:8D:81:B7:45:77:17:6B:4F:A4:69:5C:C8:54:6F:E1
            X509v3 Subject Alternative Name: 
                DNS:emergency.dia.support
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 21 00:24:10.283 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0E:69:2E:47:AC:5E:B8:4F:57:38:27:CA:
                                D4:97:63:31:7A:A4:58:50:43:23:A4:19:C4:7A:10:56:
                                D1:3C:87:1C:02:21:00:CD:BB:4E:C6:16:73:85:9C:56:
                                72:47:2F:79:25:EF:ED:A2:AE:5E:98:E7:C6:50:6E:55:
                                CC:B2:7E:FC:51:BF:DB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 21 00:24:10.220 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:69:FA:47:6D:BB:46:43:32:1F:03:EF:62:
                                7E:8C:C2:11:7B:B0:C7:01:18:48:CA:7F:BD:D3:D3:17:
                                C9:DE:90:1D:02:21:00:B4:1E:01:C6:DA:B4:D7:77:67:
                                7D:D3:F9:E2:C2:21:D6:4C:F8:C4:0A:51:BE:88:23:44:
                                4D:A4:42:51:D3:1E:88
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : May 21 00:24:10.160 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:12:FC:AC:4A:9D:52:34:F4:5F:3F:09:D0:
                                D1:21:FE:62:F0:DD:06:27:AE:65:D6:F8:B2:AF:92:FD:
                                3C:8B:2F:31:02:20:35:26:14:03:FA:29:5E:ED:B6:63:
                                CF:A3:99:56:AB:54:AE:E4:CA:B8:7B:7E:49:87:F7:F4:
                                89:6C:C4:C9:CF:08
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        03:51:ff:6c:1e:30:67:00:3c:b1:69:dd:67:63:79:1d:a6:32:
        30:f1:d1:ca:ec:40:9d:1e:97:e5:16:72:e4:81:55:29:3c:85:
        ae:4e:d9:85:c6:d2:b7:7e:bd:73:85:95:ff:49:bc:e2:57:29:
        59:0a:c2:2c:46:78:54:c4:2b:ea:39:6a:12:e8:71:c4:9d:7c:
        73:08:b0:f4:f9:3c:c7:af:14:58:41:9d:c0:1b:0f:1f:02:4f:
        b6:ca:bf:4e:9f:1a:de:12:f5:32:3a:f3:8d:72:84:8e:72:60:
        8f:76:b9:19:aa:32:93:cd:20:4e:9d:bd:2a:e0:f8:fd:85:c0:
        84:a8:8d:1f:8d:8c:b5:3b:b1:da:21:57:6f:74:76:e7:2a:3e:
        c8:0b:ab:6b:51:ee:d8:75:03:71:63:ce:95:f4:fb:ef:76:2d:
        88:dc:b6:35:23:68:a9:81:1b:cb:8e:81:05:d1:bf:00:14:a3:
        40:78:e2:3e:7e:67:2c:4c:c8:cb:05:4f:61:8c:ab:90:54:53:
        9b:80:d0:bd:eb:31:2d:d6:f1:b2:db:99:37:0b:26:da:1a:36:
        68:37:a8:7a:99:83:ce:7b:a7:62:e9:38:eb:5f:da:3f:54:d2:
        82:32:11:52:fb:71:f3:8a:86:f4:61:40:a7:92:6f:78:60:8a:
        7a:1a:db:ae

-1928140343 | 2024-04-11T05:40:17.338089

8001 / tcp

HTTP/1.1 400 Bad Request
Date: Thu, 11 Apr 2024 05:40:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
X-Powered-By: PHP/8.2.7
Cache-Control: no-cache, private

18.197.206.194

Last Seen: 2024-04-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-554697480 | 2024-04-11T15:26:03.275056
80 / tcp

nginx1.25.4

456823233 | 2024-03-29T23:55:13.532254
443 / tcp

AWS ELB2.0

-1928140343 | 2024-04-11T05:40:17.338089
8001 / tcp

nginx

Products

Pricing

Contact Us

18.197.206.194

Last Seen: 2024-04-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-554697480 | 2024-04-11T15:26:03.275056 80 / tcp

nginx1.25.4

456823233 | 2024-03-29T23:55:13.532254 443 / tcp

AWS ELB2.0

-1928140343 | 2024-04-11T05:40:17.338089 8001 / tcp

nginx

Products

Pricing

Contact Us

-554697480 | 2024-04-11T15:26:03.275056
80 / tcp

456823233 | 2024-03-29T23:55:13.532254
443 / tcp

-1928140343 | 2024-04-11T05:40:17.338089
8001 / tcp