GeneralInformation

Hostnames	ec2-52-11-90-54.us-west-2.compute.amazonaws.com icrc.trendmicro.com
Domains	amazonaws.com trendmicro.com
Cloud Provider	Amazon
Cloud Region	us-west-2
Cloud Service	EC2
Country	United States
City	Boardman
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS16509

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-11072	7.5lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. NOTE: The developer states "The feature which can be abused to cause the crash is a new feature in lighttpd 1.4.50, and is not enabled by default. It must be explicitly configured in the config file (e.g. lighttpd.conf). Certain input will trigger an abort() in lighttpd when that feature is enabled. lighttpd detects the underflow or realloc() will fail (in both 32-bit and 64-bit executables), also detected in lighttpd. Either triggers an explicit abort() by lighttpd. This is not exploitable beyond triggering the explicit abort() with subsequent application exit.
CVE-2018-19052	5.0An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.
CVE-2015-3200	5.0mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character.

OpenPorts

80 443

1461363514 | 2024-05-22T18:24:35.451099

80 / tcp

HTTP/1.1 403 Forbidden
Content-Type: text/html
Date: Wed, 22 May 2024 18:24:35 GMT
Server: lighttpd/1.4.35
Content-Length: 345
Connection: keep-alive

1461363514 | 2024-05-20T06:20:16.996229

443 / tcp

HTTP/1.1 403 Forbidden
Content-Type: text/html
Date: Mon, 20 May 2024 06:20:16 GMT
Server: lighttpd/1.4.35
Content-Length: 345
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8b:b1:d7:5b:0e:c9:5c:e1:88:59:cb:19:99:4b:23
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
        Validity
            Not Before: May 15 13:37:16 2023 GMT
            Not After : Jun 14 13:37:15 2024 GMT
        Subject: C=US, ST=Texas, L=Irving, O=Trend Micro Inc., CN=*.icrc.trendmicro.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:9f:ec:a7:17:99:29:e2:77:fe:eb:98:53:
                    12:6a:2f:54:df:56:eb:a4:04:21:84:95:19:60:cf:
                    16:4a:eb:f0:c5:ae:ac:e3:cc:e9:f8:3b:b0:f6:b5:
                    4a:c2:dd:a2:ca:30:1c:f2:8a:91:de:8e:75:84:6e:
                    ae:05:08:af:cd:12:c2:58:9d:44:44:b5:09:07:c9:
                    2b:ce:2b:00:38:aa:26:e7:e3:45:c9:f1:6e:d0:82:
                    d1:0a:45:59:a8:16:96:c5:0f:e3:2d:b8:71:36:96:
                    96:de:07:7a:89:e2:f4:b1:07:7b:8e:eb:c7:37:9b:
                    e4:6d:a6:8f:3b:ca:be:e1:8d:5d:5b:38:40:20:ba:
                    16:bf:1f:4c:25:d9:be:59:9f:a8:29:91:98:52:8a:
                    7d:f5:c2:ba:f7:04:ee:ca:c0:2b:32:f2:7d:5c:3a:
                    90:84:46:39:46:95:b9:14:42:3b:f6:2c:77:d3:cc:
                    e7:94:8a:c6:45:ef:c1:2a:95:b2:82:3f:8a:ad:f0:
                    ea:30:c8:1b:e1:e8:58:e2:45:54:b4:3f:25:df:e5:
                    d0:dd:bd:92:3a:36:a6:ac:b1:87:9d:0d:42:15:9a:
                    0a:a4:b5:ce:de:4f:1f:57:eb:db:6d:d0:18:53:05:
                    f8:82:db:96:be:6a:19:d8:bb:61:24:e1:40:fe:a1:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                C7:CC:2E:7F:C0:67:76:5A:CF:4D:B4:B2:13:C7:62:04:78:F5:C1:5F
            X509v3 Authority Key Identifier: 
                82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1k.crl
            X509v3 Subject Alternative Name: 
                DNS:*.icrc.trendmicro.com, DNS:icrc.trendmicro.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114028.10.1.5
                  CPS: https://www.entrust.net/rpa
                Policy: 2.23.140.1.2.2
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 15 13:37:16.175 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C9:B0:B6:5D:08:30:0F:8E:35:E2:17:
                                CA:F4:EE:4F:3F:A0:4D:2A:F8:15:1E:5D:56:93:C4:94:
                                6A:DA:48:16:31:02:21:00:F3:83:6E:0B:2F:6F:9F:7E:
                                E7:A7:0C:AD:7C:99:FA:0A:3F:B4:09:C0:70:94:80:1E:
                                98:76:D3:2C:4E:79:26:6C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : May 15 13:37:16.239 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1B:61:3D:82:46:1C:36:4C:D2:EB:B0:08:
                                3E:2F:24:1B:63:16:83:29:D3:B1:FF:3F:1B:02:C9:6E:
                                A9:13:21:89:02:21:00:CA:A2:94:8E:0C:52:DF:72:D1:
                                D7:7F:53:6F:8F:B3:86:3C:C3:7B:FA:8B:E0:62:B1:1C:
                                E8:36:6D:C2:34:17:AA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : May 15 13:37:16.244 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:75:A9:F6:35:32:E8:2A:4F:1F:AB:02:3C:
                                3F:52:A7:0F:02:00:3D:07:B3:AE:04:5E:B6:F2:CC:10:
                                87:3E:09:98:02:21:00:98:07:6D:ED:6C:B8:05:23:45:
                                E3:4A:7B:4A:57:3F:CC:A5:04:69:FF:2A:A9:4E:76:25:
                                4C:6D:9E:51:09:77:53
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        21:09:41:0c:66:91:46:9a:49:bb:41:34:cb:dd:93:7b:23:51:
        2a:21:48:d6:ed:2e:96:d2:20:7a:29:0e:fa:4d:92:23:12:8d:
        35:42:73:5d:22:48:20:09:62:d7:1a:cf:0b:0b:eb:92:35:0b:
        6e:dd:8d:6e:98:e3:90:02:35:07:2c:dd:a3:7b:7e:15:a4:16:
        02:62:ff:12:12:86:e7:85:09:6e:95:94:47:1f:c3:d8:de:ad:
        50:ac:14:51:d8:b9:70:f4:45:17:2a:b3:89:93:b9:6e:1a:9c:
        95:93:8f:3b:9d:21:05:d0:de:b3:9b:22:1d:56:09:64:68:6c:
        7a:c1:55:f3:79:54:5e:14:b0:b1:68:89:4f:f0:3a:e8:fb:91:
        ce:fc:7d:54:62:53:26:40:16:f6:e1:aa:59:d0:65:a8:97:46:
        d3:89:5e:44:60:98:12:10:b5:21:48:63:41:5b:f0:3f:b7:74:
        83:bd:4e:30:7c:26:57:30:eb:5a:cd:e2:a2:df:ed:57:6f:51:
        23:62:a2:98:0d:06:62:e8:15:2b:7c:34:ed:85:f3:c4:7f:50:
        f4:40:96:bc:9b:8a:df:ca:1b:08:bd:08:83:97:70:35:96:1d:
        ba:e7:5d:3e:67:16:f6:c9:8a:2d:1d:f8:e7:c8:75:3d:52:f2:
        2b:b7:77:1b

52.11.90.54

Last Seen: 2024-05-22

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1461363514 | 2024-05-22T18:24:35.451099
80 / tcp

lighttpd1.4.35

1461363514 | 2024-05-20T06:20:16.996229
443 / tcp

lighttpd1.4.35

Products

Pricing

Contact Us

52.11.90.54

Last Seen: 2024-05-22

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1461363514 | 2024-05-22T18:24:35.451099 80 / tcp

lighttpd1.4.35

1461363514 | 2024-05-20T06:20:16.996229 443 / tcp

lighttpd1.4.35

Products

Pricing

Contact Us

1461363514 | 2024-05-22T18:24:35.451099
80 / tcp

1461363514 | 2024-05-20T06:20:16.996229
443 / tcp