Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)

["gbfdhenr (Liang Xiangan)" <gbfdhenr () 163 com>]

Hi Nmap developers,


Following up on my previous submissions (OS fingerprint and NSE script for the Huawei AX3), I've conducted a full port 
scan and discovered two additional services that may help refine the service fingerprint database.


**1. Port 37215/tcp – UPnP**
- Service identified as: `Huawei ATP gateway upnpd`
- This seems to be already correctly matched in `nmap-service-probes`. I just wanted to confirm its presence.


**2. Port 37443/tcp – SSL/TLS (currently shown as unknown)**
- SSL certificate details (via `ssl-cert` script):
  
  Subject: CN=Master.ws7100-10, O=Huawei Technologies Co., Ltd, ST=Hubei, C=CN
  Subject Alternative Name: DNS:mediarouter.home, DNS:mediarouter1.home, DNS:mediarouter2.home, DNS:mediarouter3.home
  Issuer: CN=link.home, ST=Hubei, C=CN
  
- This certificate is unique to this device and strongly suggests it's the router's management SSL interface.
- I propose adding a service match rule like:
  
  match ssl m|^.*CN=Master\.ws7100-10.*O=Huawei Technologies Co\.\, Ltd.*$| p/Huawei AX3 management SSL/
  
  (Alternatively, a more generic rule could match on `Huawei Technologies` if that's preferred.)


Full `-sV` outputs for both ports:


PORT STATE SERVICE VERSION
37215/tcp open upnp Huawei ATP gateway upnpd
37443/tcp open ssl/unknown


And the certificate info (as above).


Please let me know if you need any further details (e.g., additional probes, raw packet captures). I'm happy to provide 
more data.


Thanks,
Liang Xiangan

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/