Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)

["gbfdhenr (Liang Xiangan)" <gbfdhenr () 163 com>]

PATCH] New NSE script: huawei-ax3-info.nse


Hi Nmap developers,


Following up on my previous OS fingerprint submission for the Huawei AX3 router (Message-ID: 
<335797c9.5fe8.19fb73084b0.Coremail.gbfdhenr () 163 com>), I've developed an NSE script to extract device information 
from the router's /api/system/deviceinfo endpoint.


The script retrieves:
- Device model (CustDeviceName)
- Hardware version
- Serial number
- Uptime
- Software/hardware capabilities
- Vendor-specific info


I've tested it on my Huawei AX3 (VER.A, HarmonyOS 4.2.0) and it works correctly. The API is accessible without 
authentication.


Attached is the script file (huawei-ax3-info.nse) and below is an example output:
$ nmap --script ./huawei_ax3_info.nse -p 80 192.168.3.1
Starting Nmap 7.99 ( https://nmap.org ) at 2026-08-01 15:17 +0800
Nmap scan report for 192.168.3.1
Host is up (0.0028s latency).


PORT STATE SERVICE
80/tcp open http
| huawei_ax3_info: Huawei Router AX3(192.168.3.1) Info:
| Serial Number: 4ee81050
| Hardware Version: VER.A
| Software Version: -
| Uptime (seconds): 692155
| Friendly Name: \xE5\x8D\x8E\xE4\xB8\xBA\xE8\xB7\xAF\xE7\x94\xB1 AX3
| UUID: LvkVWljvZcVdYsPyeG0r8cgconqtxCLr
| Manufacturer OUI: 00E0FC
| Device Icon Type: router
| [Vendor Info]
| CustDeviceType: WS7100-17
| CustDeviceName: WS7100-17
| CustZHFriendlyName: \xE5\x8D\x8E\xE4\xB8\xBA\xE8\xB7\xAF\xE7\x94\xB1 AX3
| CustDeviceBand: 1
| CustDeviceSoftShutDown: 0
| CustENFriendlyName: HUAWEI WiFi AX3
| [Software Capabilities]
| Capability 0: 2
| Capability 1: 1
| Capability 2: 2
| Capability 3: 1
| Capability 4: 1
| Capability 5: 2
| Capability 6: 0
| Capability 7: 1
| Capability 8: 1
| Capability 9: 1
| Capability 10: 1
| Capability 11: 1
| Capability 12: 0
| Capability 13: 3
| Capability 14: 2
| Capability 15: 1
| Capability 16: 0
| Capability 17: 0
| Capability 18: 1
| Capability 19: 1
| Capability 20: 1
| Capability 21: 0
| Capability 23: 1
| Capability 24: 1
| Capability 25: 1
| Capability 26: 1
| Capability 27: 1
| Capability 28: 0
| Capability 29: 0
| Capability 30: 1
| Capability 31: 0
| Capability 32: 1
| Capability 33: 0
| Capability 34: 1
| Capability 36: 1
| Capability 37: 0
| Capability 38: 1
| Capability 39: 1
| Capability 41: 1
| Capability 42: 1
| Capability 44: 0
| Capability 45: 1
| Capability 47: 1
| Capability 48: 1
| Capability 49: 1
| Capability 50: 0
| Capability 51: 1
| Capability 52: 1
| Capability 54: 1
| Capability 55: 1
| Capability 56: 0
| Capability 57: 0
| Capability 58: 1
| Capability 59: 1
| Capability 61: 1
| Capability 63: 1
| Capability 64: 1
| Capability 65: 0
| Capability 66: 1
| Capability 67: 1
| Capability 68: 0
| Capability 69: 1
| Capability 71: 0
| Capability 72: 4
| Capability 73: 0
| Capability 74: 1
| Capability 75: 0
| Capability 76: 1
| Capability 77: 1
| Capability 78: 0
| Capability 79: 1
| Capability 81: 1
| Capability 82: 1
| Capability 83: 1
| Capability 86: 1
| Capability 87: 0
| Capability 90: 1
| Capability 91: 1
| Capability 92: 1
| Capability 93: 1
| Capability 95: 1
| Capability 96: 1
| Capability 97: 1
| Capability 98: 1
| Capability 99: 1
| Capability 102: 0
| Capability 103: 1
| Capability 104: 1
| Capability 105: 1
| Capability 106: 0
| Capability 107: 1
| Capability 109: 1
| Capability 110: 0
| Capability 111: 1
| Capability 112: 0
| Capability 113: 1
| Capability 114: 1
| Capability 116: 1
| Capability 117: 1
| Capability 119: 1
| Capability 120: 1
| Capability 123: 3
| Capability 126: 1
| Capability 131: 1
| Capability 133: 0
| Capability 135: 0
| Capability 140: 4
| Capability 141: 1
| Capability 142: 1
| Capability 143: 1
| Capability 149: 1
| Capability 150: 1
|_ Capability 151: 0
MAC Address: 30:A9:98:23:5E:CD (Huawei Device)


Nmap done: 1 IP address (1 host up) scanned in 2.79 seconds


Thanks,
Liang Xiangan

Attachment: huawei_ax3_info.nse
Description:

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/