GeneralInformation

Hostnames	crown.de ccmdev15.crown.de
Domains	crown.de
Country	Germany
City	Nürnberg
Organization	Crown Software GmbH
ISP	Hetzner Online GmbH
ASN	AS24940

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(2)

CVE-2025-26466

5.9A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.

CVE-2025-26465

6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.

OpenPorts

80 443 2222 5222 5223 5269 9901 10443

80 / tcp

-2100514759 | 2025-03-15T14:04:30.073467

Hashes

hash

382862328

http.dom_hash

1239617585

http.html_hash

-2100514759

http.server_hash

-1340961475

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Date: Sat, 15 Mar 2025 14:04:30 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=20
Location: https://213.133.127.239/
Server: nginx

443 / tcp

142373463 | 2025-03-17T01:48:50.104878

Hashes

hash

-1338277431

http.dom_hash

-1714842878

http.favicon.hash

1012662028

http.html_hash

142373463

http.server_hash

-1340961475

http.title_hash

-1340372946

Crown - Login

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 01:48:50 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 6998
Connection: keep-alive
Keep-Alive: timeout=20
Content-Language: de
Content-Security-Policy: default-src 'none';connect-src 'self' https://notify-ccmdev15.crown.de/;style-src 'self' 'unsafe-inline';object-src 'none';img-src 'self';base-uri 'none';frame-ancestors 'self';form-action 'self';frame-src 'self';script-src 'self' 'sha256-BU2dh8QMQGkPzD7vOvbeztdv3UNEXggFI9klwvAwaW8=' 'sha256-ORmBequZ9b7nddy1vd3AghjR6RBJTJNNng2C8bpR/0U='
Server: nginx
Strict-Transport-Security: max-age=15768000; includeSubDomains

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:8f:90:b4:10:22:b7:ac:f4:20:ea:54:75:b3:23
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Sep  7 00:00:00 2024 GMT
            Not After : Oct  8 23:59:59 2025 GMT
        Subject: CN=*.crown.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f0:2e:cb:2f:db:e9:a1:04:76:01:6d:2e:8f:61:
                    a3:e1:29:b1:f8:c7:f3:dd:a4:e8:19:49:b0:23:49:
                    45:55:14:54:38:a0:16:65:22:99:0f:14:06:fc:9c:
                    fc:30:0d:f8:5e:2f:86:42:a1:73:26:2e:84:14:7f:
                    70:13:83:17:08:77:c7:67:3d:9f:75:d7:af:3c:af:
                    f1:5d:7d:4e:89:35:c3:d5:a6:f9:55:3c:c3:2b:38:
                    82:10:34:ea:21:38:41:52:35:9c:03:70:30:82:83:
                    3a:12:91:29:85:9c:fa:60:a5:ef:fe:7b:36:78:2f:
                    45:0a:9a:05:20:b9:5c:ce:44:4a:2b:c6:e8:f3:c3:
                    0e:ef:ae:a4:f7:79:78:ca:81:57:30:26:ea:25:c8:
                    0a:2e:a2:fd:12:f8:f7:b9:7f:29:24:14:b6:8e:1c:
                    3d:66:68:ce:f7:e6:a5:67:fc:a2:ea:6d:54:3e:33:
                    66:f0:e9:4c:5b:2f:5b:b7:90:c0:39:52:d3:bd:fb:
                    c9:f6:55:61:3b:9d:79:90:4a:cd:e7:1d:7d:10:c8:
                    8d:0b:62:0d:4e:89:15:3e:48:0d:66:6c:13:77:15:
                    17:76:e7:4c:07:9c:27:95:e3:5f:40:8e:d3:2a:2a:
                    46:84:d3:a5:8b:bb:4f:61:8f:9e:ea:f5:dd:8b:12:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                E7:CC:82:83:6D:A9:37:99:CB:A6:05:1D:7F:25:6B:45:2A:70:17:12
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.crown.de, DNS:crown.de
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Sep  7 04:03:06.020 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B1:EE:FA:26:1D:47:13:E4:7F:07:3F:
                                D7:E0:D0:79:90:63:C9:C9:17:59:94:50:79:A1:0D:70:
                                7D:23:C2:27:9F:02:21:00:F6:A8:25:D2:AA:93:70:59:
                                1A:C9:2B:B7:14:3D:63:A9:62:35:B2:12:EA:10:4F:25:
                                A3:78:E9:EA:A6:32:EA:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Sep  7 04:03:05.988 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9F:78:47:18:ED:EE:A3:37:FA:7E:19:
                                FC:47:21:31:EB:1E:D4:F8:B7:5C:50:E6:AA:5F:6C:0C:
                                8A:F0:6A:FD:B2:02:21:00:91:79:98:C8:9F:77:2D:0E:
                                E6:10:0C:DE:AF:62:1B:94:93:9E:F6:80:0E:89:EC:08:
                                24:12:8C:D7:4C:29:6A:FE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Sep  7 04:03:05.988 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C8:2F:26:03:11:8F:63:59:42:D5:F4:
                                FD:A5:D3:44:B9:43:C5:44:B0:A4:4F:00:9C:3B:5E:38:
                                13:A5:76:9C:46:02:20:79:B8:18:05:02:D5:61:39:81:
                                6B:47:AD:17:33:35:6C:7F:DC:1C:17:9A:B2:92:97:FD:
                                B3:C6:8C:D7:0C:09:29
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        94:c7:25:6e:58:56:a8:bc:6e:c7:df:83:38:66:e4:55:5b:01:
        60:ea:7d:96:1b:c0:50:eb:a8:1d:21:11:8d:a8:0c:f0:80:96:
        ba:41:b7:17:03:d3:9c:1c:c6:e6:d3:ac:0c:24:4b:f1:14:d8:
        0e:65:52:62:da:fe:1f:b6:bb:e2:e7:ed:20:a1:db:0e:94:8b:
        64:e5:f3:e0:9c:61:a7:23:ef:ef:66:fd:c9:76:a9:4c:f9:bc:
        d1:d9:ee:3a:27:b6:4a:62:67:89:a5:7b:c9:97:88:8e:73:ca:
        73:7a:95:fb:74:db:70:83:81:30:56:77:f5:83:c6:72:c7:71:
        8b:3f:d9:00:b6:a9:d2:d8:f0:cd:3b:0b:d9:88:40:f2:2f:b2:
        c5:8e:d0:08:e2:11:24:15:0d:d7:d4:0d:cb:c4:1f:f0:e1:76:
        87:2f:c0:f6:93:b6:b5:52:f3:8f:b4:b8:87:64:72:10:88:27:
        74:09:87:17:36:a9:fc:68:f2:5d:40:6c:1f:31:52:f5:cc:9f:
        1c:28:fd:04:5e:c7:48:aa:e4:c6:87:bc:ad:1d:32:b1:12:61:
        9e:e9:66:8b:69:20:b5:5f:a7:39:36:18:4e:7f:6a:e6:63:17:
        af:cd:f8:a5:43:04:6d:2c:c8:ad:01:82:d2:ef:1f:87:02:b3:
        d2:b7:20:ff

2222 / tcp

-1734013924 | 2025-03-21T22:29:51.520292

SSH-2.0-OpenSSH_9.9
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAc+23w6pqWDWe7cWGUdAj6A
bPhHNb3+blOGPXTVchTgAxDo6bOKtIISh2p3Hdaz48sgjqwGUFV34N1BLtSfurE=
Fingerprint: 22:a1:df:5e:74:9c:72:5b:2a:d0:cf:cd:f0:6b:a3:46

Kex Algorithms:
	sntrup761x25519-sha512
	sntrup761x25519-sha512@openssh.com
	mlkem768x25519-sha256
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	ext-info-s
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

Vulnerabilities

5222 / tcp

-1447426825 | 2025-03-19T19:01:18.687026

</stream:stream>

5269 / tcp

-1447426825 | 2025-03-16T00:00:54.126179

</stream:stream>

9901 / tcp

-1174627427 | 2025-03-12T00:49:14.648136

P220 Service ready for new user.

10443 / tcp

1983390938 | 2025-03-21T08:41:43.334264

Hashes

hash

-1622795038

http.dom_hash

-1714842878

http.favicon.hash

1012662028

http.html_hash

1983390938

http.title_hash

-1340372946

Crown - Login

HTTP/1.1 200 OK
content-security-policy: default-src 'none';connect-src 'self' https://notify-ccmdev15.crown.de/;style-src 'self' 'unsafe-inline';object-src 'none';img-src 'self';base-uri 'none';frame-ancestors 'self';form-action 'self';frame-src 'self';script-src 'self' 'sha256-BU2dh8QMQGkPzD7vOvbeztdv3UNEXggFI9klwvAwaW8=' 'sha256-ORmBequZ9b7nddy1vd3AghjR6RBJTJNNng2C8bpR/0U='
content-type: text/html;charset=utf-8
content-length: 6995
date: Fri, 21 Mar 2025 08:41:43 GMT
content-language: de
connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:8f:90:b4:10:22:b7:ac:f4:20:ea:54:75:b3:23
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Sep  7 00:00:00 2024 GMT
            Not After : Oct  8 23:59:59 2025 GMT
        Subject: CN=*.crown.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f0:2e:cb:2f:db:e9:a1:04:76:01:6d:2e:8f:61:
                    a3:e1:29:b1:f8:c7:f3:dd:a4:e8:19:49:b0:23:49:
                    45:55:14:54:38:a0:16:65:22:99:0f:14:06:fc:9c:
                    fc:30:0d:f8:5e:2f:86:42:a1:73:26:2e:84:14:7f:
                    70:13:83:17:08:77:c7:67:3d:9f:75:d7:af:3c:af:
                    f1:5d:7d:4e:89:35:c3:d5:a6:f9:55:3c:c3:2b:38:
                    82:10:34:ea:21:38:41:52:35:9c:03:70:30:82:83:
                    3a:12:91:29:85:9c:fa:60:a5:ef:fe:7b:36:78:2f:
                    45:0a:9a:05:20:b9:5c:ce:44:4a:2b:c6:e8:f3:c3:
                    0e:ef:ae:a4:f7:79:78:ca:81:57:30:26:ea:25:c8:
                    0a:2e:a2:fd:12:f8:f7:b9:7f:29:24:14:b6:8e:1c:
                    3d:66:68:ce:f7:e6:a5:67:fc:a2:ea:6d:54:3e:33:
                    66:f0:e9:4c:5b:2f:5b:b7:90:c0:39:52:d3:bd:fb:
                    c9:f6:55:61:3b:9d:79:90:4a:cd:e7:1d:7d:10:c8:
                    8d:0b:62:0d:4e:89:15:3e:48:0d:66:6c:13:77:15:
                    17:76:e7:4c:07:9c:27:95:e3:5f:40:8e:d3:2a:2a:
                    46:84:d3:a5:8b:bb:4f:61:8f:9e:ea:f5:dd:8b:12:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                E7:CC:82:83:6D:A9:37:99:CB:A6:05:1D:7F:25:6B:45:2A:70:17:12
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.crown.de, DNS:crown.de
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Sep  7 04:03:06.020 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B1:EE:FA:26:1D:47:13:E4:7F:07:3F:
                                D7:E0:D0:79:90:63:C9:C9:17:59:94:50:79:A1:0D:70:
                                7D:23:C2:27:9F:02:21:00:F6:A8:25:D2:AA:93:70:59:
                                1A:C9:2B:B7:14:3D:63:A9:62:35:B2:12:EA:10:4F:25:
                                A3:78:E9:EA:A6:32:EA:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Sep  7 04:03:05.988 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9F:78:47:18:ED:EE:A3:37:FA:7E:19:
                                FC:47:21:31:EB:1E:D4:F8:B7:5C:50:E6:AA:5F:6C:0C:
                                8A:F0:6A:FD:B2:02:21:00:91:79:98:C8:9F:77:2D:0E:
                                E6:10:0C:DE:AF:62:1B:94:93:9E:F6:80:0E:89:EC:08:
                                24:12:8C:D7:4C:29:6A:FE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Sep  7 04:03:05.988 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C8:2F:26:03:11:8F:63:59:42:D5:F4:
                                FD:A5:D3:44:B9:43:C5:44:B0:A4:4F:00:9C:3B:5E:38:
                                13:A5:76:9C:46:02:20:79:B8:18:05:02:D5:61:39:81:
                                6B:47:AD:17:33:35:6C:7F:DC:1C:17:9A:B2:92:97:FD:
                                B3:C6:8C:D7:0C:09:29
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        94:c7:25:6e:58:56:a8:bc:6e:c7:df:83:38:66:e4:55:5b:01:
        60:ea:7d:96:1b:c0:50:eb:a8:1d:21:11:8d:a8:0c:f0:80:96:
        ba:41:b7:17:03:d3:9c:1c:c6:e6:d3:ac:0c:24:4b:f1:14:d8:
        0e:65:52:62:da:fe:1f:b6:bb:e2:e7:ed:20:a1:db:0e:94:8b:
        64:e5:f3:e0:9c:61:a7:23:ef:ef:66:fd:c9:76:a9:4c:f9:bc:
        d1:d9:ee:3a:27:b6:4a:62:67:89:a5:7b:c9:97:88:8e:73:ca:
        73:7a:95:fb:74:db:70:83:81:30:56:77:f5:83:c6:72:c7:71:
        8b:3f:d9:00:b6:a9:d2:d8:f0:cd:3b:0b:d9:88:40:f2:2f:b2:
        c5:8e:d0:08:e2:11:24:15:0d:d7:d4:0d:cb:c4:1f:f0:e1:76:
        87:2f:c0:f6:93:b6:b5:52:f3:8f:b4:b8:87:64:72:10:88:27:
        74:09:87:17:36:a9:fc:68:f2:5d:40:6c:1f:31:52:f5:cc:9f:
        1c:28:fd:04:5e:c7:48:aa:e4:c6:87:bc:ad:1d:32:b1:12:61:
        9e:e9:66:8b:69:20:b5:5f:a7:39:36:18:4e:7f:6a:e6:63:17:
        af:cd:f8:a5:43:04:6d:2c:c8:ad:01:82:d2:ef:1f:87:02:b3:
        d2:b7:20:ff

213.133.127.239

Last Seen: 2025-03-21

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

-2100514759 | 2025-03-15T14:04:30.073467

Hashes

nginx

443 / tcp

142373463 | 2025-03-17T01:48:50.104878

Hashes

nginx

2222 / tcp

-1734013924 | 2025-03-21T22:29:51.520292

OpenSSH9.9

5222 / tcp

-1447426825 | 2025-03-19T19:01:18.687026

Wildfire XMPP Client

5269 / tcp

-1447426825 | 2025-03-16T00:00:54.126179

Wildfire XMPP Client

9901 / tcp

-1174627427 | 2025-03-12T00:49:14.648136

10443 / tcp

1983390938 | 2025-03-21T08:41:43.334264

Hashes

Products

Pricing

Contact Us

213.133.127.239

Last Seen: 2025-03-21

GeneralInformation

Vulnerabilities All ports Port 2222 Latest CVSS

OpenPorts

80 / tcp -2100514759 | 2025-03-15T14:04:30.073467

Hashes

nginx

443 / tcp 142373463 | 2025-03-17T01:48:50.104878

Hashes

nginx

2222 / tcp -1734013924 | 2025-03-21T22:29:51.520292

OpenSSH9.9

5222 / tcp -1447426825 | 2025-03-19T19:01:18.687026

Wildfire XMPP Client

5269 / tcp -1447426825 | 2025-03-16T00:00:54.126179

Wildfire XMPP Client

9901 / tcp -1174627427 | 2025-03-12T00:49:14.648136

10443 / tcp 1983390938 | 2025-03-21T08:41:43.334264

Hashes

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-2100514759 | 2025-03-15T14:04:30.073467

443 / tcp

142373463 | 2025-03-17T01:48:50.104878

2222 / tcp

-1734013924 | 2025-03-21T22:29:51.520292

5222 / tcp

-1447426825 | 2025-03-19T19:01:18.687026

5269 / tcp

-1447426825 | 2025-03-16T00:00:54.126179

9901 / tcp

-1174627427 | 2025-03-12T00:49:14.648136

10443 / tcp

1983390938 | 2025-03-21T08:41:43.334264