Add Eltex SMG model VoIP gateway (#436)

rapid7 · Mar 29, 2022 · cede7fc · cede7fc
2 parents da2aef9 + 6362857
commit cede7fc
Show file tree

Hide file tree

Showing 5 changed files with 60 additions and 0 deletions.
diff --git a/identifiers/os_product.txt b/identifiers/os_product.txt
@@ -225,6 +225,7 @@ SCO UNIX
 SEHI
 SINIX
 SL2100 Firmware
+SMG Firmware
 SPA112 Firmware
 SPA122 Firmware
 SV8100 Firmware

diff --git a/xml/favicons.xml b/xml/favicons.xml
@@ -2023,4 +2023,11 @@
     <param pos="0" name="service.cpe23" value="cpe:/a:apache:spark:-"/>
   </fingerprint>
 
+  <fingerprint pattern="^a3dcb28303f26786e262e0760781057a$">
+    <description>Eltex device web interface</description>
+    <example>a3dcb28303f26786e262e0760781057a</example>
+    <param pos="0" name="os.vendor" value="Eltex"/>
+    <param pos="0" name="hw.vendor" value="Eltex"/>
+  </fingerprint>
+
 </fingerprints>
diff --git a/xml/http_servers.xml b/xml/http_servers.xml
@@ -4740,4 +4740,19 @@
     <param pos="0" name="hw.device" value="VoIP Gateway"/>
   </fingerprint>
 
+  <fingerprint pattern="^(SMG-?\d+[A-Z]?)$">
+    <description>Eltex SMG model VoIP gateway</description>
+    <example hw.product="SMG2">SMG2</example>
+    <example hw.product="SMG1016M">SMG1016M</example>
+    <example hw.product="SMG-1016M">SMG-1016M</example>
+    <example hw.product="SMG3016">SMG3016</example>
+    <param pos="0" name="os.vendor" value="Eltex"/>
+    <param pos="0" name="os.product" value="{hw.product} Firmware"/>
+    <param pos="0" name="os.device" value="VoIP Gateway"/>
+    <param pos="0" name="hw.vendor" value="Eltex"/>
+    <param pos="1" name="hw.product"/>
+    <param pos="0" name="hw.device" value="VoIP Gateway"/>
+  </fingerprint>
+
+
 </fingerprints>
diff --git a/xml/sip_user_agents.xml b/xml/sip_user_agents.xml
@@ -677,6 +677,19 @@
     <param pos="0" name="hw.device" value="VoIP Gateway"/>
   </fingerprint>
 
+  <fingerprint pattern="^(?:Eltex )?(?:smg_pa_sip[ -]){1,2}([\d.]+)$">
+    <description>Eltex SMG model VoIP gateway - no model number</description>
+    <example os.version="3.9.1.50">Eltex smg_pa_sip smg_pa_sip-3.9.1.50</example>
+    <example os.version="3.10.1.22">smg_pa_sip smg_pa_sip-3.10.1.22</example>
+    <example os.version="3.18.0.67">smg_pa_sip 3.18.0.67</example>
+    <param pos="0" name="os.vendor" value="Eltex"/>
+    <param pos="0" name="os.product" value="SMG Firmware"/>
+    <param pos="1" name="os.version"/>
+    <param pos="0" name="os.device" value="VoIP Gateway"/>
+    <param pos="0" name="hw.vendor" value="Eltex"/>
+    <param pos="0" name="hw.device" value="VoIP Gateway"/>
+  </fingerprint>
+
   <fingerprint pattern="^(RG-\d[\w-]+)/([\d.]+) SN/(VI\w+) (?:SHA/[0-9a-f]+ )?sofia-sip/([\d.]+)$">
     <description>Eltex - NTP / NTU model broadband router - with serial number and sofia version</description>
     <example hw.product="RG-5421G-Wac" hw.serial_number="VI12E45678">RG-5421G-Wac/2.4.2.87 SN/VI12E45678 sofia-sip/1.12.10</example>

diff --git a/xml/telnet_banners.xml b/xml/telnet_banners.xml
@@ -2250,6 +2250,30 @@
     <param pos="0" name="hw.device" value="VoIP Gateway"/>
   </fingerprint>
 
+  <fingerprint pattern="(?m)^\**(?:\r|\n)*\**\s*Welcome to (SMG-?\d+[A-Z]?)\s*\**(?:\r|\n)*\**(?:\r|\n)+(\S+) login:\s*$">
+    <description>Eltex SMG model VoIP gateway - banner with model number</description>
+    <!--
+      ********************************************
+      *            Welcome to SMG1016M           *
+      ********************************************
+
+      foo.bar.baz login:
+    -->
+    <example hw.product="SMG1016M" host.name="foo.bar.baz" _encoding="base64">
+      DQ0KDQoNKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioNCg0qI
+      CAgICAgICAgICAgV2VsY29tZSB0byBTTUcxMDE2TSAgICAgICAgICAgKg0KDSoqKioqKioqKi
+      oqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqDQoNDQoNZm9vLmJhci5iYXogbG9
+      naW46IA==
+    </example>
+    <param pos="0" name="os.vendor" value="Eltex"/>
+    <param pos="0" name="os.product" value="{hw.product} Firmware"/>
+    <param pos="0" name="os.device" value="VoIP Gateway"/>
+    <param pos="0" name="hw.vendor" value="Eltex"/>
+    <param pos="1" name="hw.product"/>
+    <param pos="0" name="hw.device" value="VoIP Gateway"/>
+    <param pos="2" name="host.name"/>
+  </fingerprint>
+
   <fingerprint pattern="^eltex-nv(\d+) login:$">
     <description>Eltex - NV model IPTV set top box</description>
     <example hw.model="101">eltex-nv101 login:</example>