GeneralInformation

Hostnames	jichengpai.daqvision.com
Domains	daqvision.com
Cloud Provider	Tencent Cloud
Country	China
City	Beijing
Organization	Tencent Cloud Computing (Beijing) Co., Ltd
ISP	Shenzhen Tencent Computer Systems Company Limited
ASN	AS45090

WebTechnologies

JavaScript frameworks

AngularJS

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(2)

CVE-2023-46118

4.9RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2022(1)

CVE-2022-31008

5.5RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.

2021(4)

CVE-2021-32719

3.1RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script> tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.

CVE-2021-32718

3.1RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.

CVE-2021-22117

7.8RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

CVE-2021-22116

7.5RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

2020(1)

CVE-2020-5419

6.7RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.

OpenPorts

80 81 443 5432 5672 8011 9000 9009

80 / tcp

-894825396 | 2025-03-18T15:03:50.651850

Hashes

hash

646544349

http.dom_hash

1239617585

http.html_hash

-894825396

http.server_hash

-545985770

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.23.2
Date: Tue, 18 Mar 2025 15:03:50 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://43.143.184.62/

Vulnerabilities

81 / tcp

-1890171949 | 2025-03-06T05:32:55.788899

Hashes

hash

627572393

http.dom_hash

1239617585

http.html_hash

-1890171949

http.server_hash

-545985770

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: nginx/1.23.2
Date: Thu, 06 Mar 2025 05:32:47 GMT
Content-Type: text/html
Content-Length: 555
Connection: keep-alive

Vulnerabilities

443 / tcp

147704261 | 2025-03-18T09:31:02.389855

Hashes

hash

2140019913

http.dom_hash

1422730550

http.favicon.hash

-815585145

http.html_hash

147704261

http.server_hash

-545985770

集成派

HTTP/1.1 200 OK
Server: nginx/1.23.2
Date: Tue, 18 Mar 2025 09:31:01 GMT
Content-Type: text/html
Content-Length: 7390
Last-Modified: Tue, 01 Nov 2022 17:09:56 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "636152e4-1cde"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2c:36:21:e7:02:8c:bf:3b:11:f1:4c:cf:e3:95:28
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA - G1
        Validity
            Not Before: Jul 18 00:00:00 2022 GMT
            Not After : Jul 19 23:59:59 2023 GMT
        Subject: CN=jichengpai.daqvision.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:d7:e5:77:76:4b:a7:d0:d5:69:20:9b:d7:
                    13:7f:96:9c:9b:00:c3:ab:1a:f9:6f:c7:63:25:c8:
                    ff:f0:d6:2c:6a:cd:41:ab:00:4d:5b:e7:38:d3:01:
                    58:c5:48:b4:94:47:68:05:06:82:15:0b:20:96:b8:
                    fc:99:81:b3:d3:53:57:31:14:1d:1b:51:db:fa:fc:
                    77:ff:fa:19:c2:f2:5f:2e:b6:15:68:fa:2a:7b:fc:
                    3c:a4:e7:9d:37:13:46:d6:6a:ed:26:df:31:a9:6d:
                    de:04:4a:cc:d4:96:1f:0b:d7:bc:fd:6d:08:9c:eb:
                    88:6e:6a:15:d9:68:90:9d:a5:8c:60:25:50:12:05:
                    63:07:c2:32:2f:40:40:1d:38:d2:5d:79:97:df:a0:
                    2b:40:28:43:80:35:31:fc:f7:50:44:5e:07:d6:0e:
                    45:15:d5:cd:76:6a:78:c5:01:b5:00:72:e1:37:0c:
                    d0:99:26:53:be:5b:17:9f:c1:cb:31:24:9c:76:a3:
                    90:13:52:6b:a2:69:16:2b:6e:7d:19:f4:d1:de:4f:
                    5e:46:4d:e7:16:5b:cc:fc:51:bc:2d:25:7a:d9:0d:
                    01:7c:46:be:ba:d4:99:e9:19:62:aa:d9:4c:c4:26:
                    75:9e:af:86:3f:8c:50:c5:25:54:1d:f9:1f:15:d3:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:74:4F:B2:72:4F:F5:60:BA:50:D1:D7:E6:51:5C:9A:01:87:1A:D7
            X509v3 Subject Key Identifier: 
                13:58:1F:54:7B:42:6A:B5:2E:AE:10:DF:A5:B2:0F:B4:44:DC:47:89
            X509v3 Subject Alternative Name: 
                DNS:jichengpai.daqvision.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
                                03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
                    Timestamp : Jul 18 00:55:12.595 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4F:EA:E9:23:F9:9A:61:3C:ED:4E:0B:1A:
                                C3:11:5F:84:81:61:47:EA:8B:D4:2D:28:EA:EE:4A:06:
                                AA:3B:11:59:02:21:00:CB:1D:1C:B4:A4:D6:96:02:43:
                                B2:B1:BE:47:BF:9B:6B:73:78:DD:BC:75:AF:AE:D2:66:
                                CC:CB:C7:DB:09:20:6F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 35:CF:19:1B:BF:B1:6C:57:BF:0F:AD:4C:6D:42:CB:BB:
                                B6:27:20:26:51:EA:3F:E1:2A:EF:A8:03:C3:3B:D6:4C
                    Timestamp : Jul 18 00:55:12.643 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:13:99:2C:26:8F:E5:D7:C4:2F:83:7F:24:
                                BF:E3:3E:1B:10:F8:D5:37:B1:94:84:BF:30:9E:C4:D2:
                                CB:77:49:18:02:20:28:97:CB:13:FC:A9:F2:0A:FD:37:
                                F4:7C:D1:AC:63:D7:0C:7E:E5:1B:62:B9:22:41:58:E4:
                                37:F2:11:05:C0:D5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C:
                                5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99
                    Timestamp : Jul 18 00:55:12.630 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A7:EE:D4:1F:8F:A1:A5:39:44:BB:97:
                                55:D1:77:02:AF:85:0F:13:18:A6:A5:90:F5:A4:D5:4A:
                                3D:F3:AE:C6:9E:02:20:04:1D:1D:CE:BB:2D:E8:0C:9A:
                                D4:16:B5:36:98:B7:77:52:65:12:6A:03:86:AB:44:4B:
                                6D:68:67:53:F3:0C:0E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        66:d9:2b:01:a9:98:53:1a:2b:d2:62:b0:77:bb:78:31:f3:a0:
        d6:f4:9a:75:0f:66:5e:95:25:fd:47:6f:bc:17:3d:27:f3:b2:
        d5:22:bf:44:bd:96:c0:94:2e:08:3f:70:38:31:8b:70:ee:b9:
        64:e9:62:73:fe:75:21:e6:a5:e2:fd:c5:fc:43:3b:13:1c:74:
        de:52:11:ed:3a:e6:c0:f1:ab:d1:e4:1e:bb:22:ee:07:2a:a9:
        48:1a:bf:7f:2e:f7:0f:03:5e:a4:31:8f:a1:e2:6f:da:87:26:
        84:87:2f:fd:97:e7:21:82:4f:af:fd:dd:84:84:e3:a6:ab:0a:
        78:c8:24:f8:e9:0d:ab:0f:f4:f0:11:fd:77:ec:3e:96:71:0d:
        72:db:77:1e:19:7b:50:97:cb:77:07:09:82:26:df:e7:dd:d8:
        24:92:50:27:30:30:04:1f:8a:3b:54:83:11:73:d7:ff:7c:31:
        18:18:69:45:b8:2c:84:a9:06:a4:ce:07:69:11:a8:d1:ee:40:
        dd:35:ec:2e:a2:13:64:34:03:7f:c9:da:88:65:37:23:e5:50:
        14:2d:32:1f:01:d9:2c:b7:d1:9a:4d:07:e2:59:3f:24:77:b4:
        c8:ad:a5:10:2f:5f:d2:2b:5d:81:1c:5e:60:50:98:ec:a5:fe:
        12:bc:3f:89

Vulnerabilities

5432 / tcp

-726790289 | 2025-03-22T03:42:39.330397

PostgreSQL
fe_sendauth: no password supplied

5672 / tcp

-1637790866 | 2025-03-08T21:10:04.201489

AMQP:
  Protocol Version: 0-9
  Product: RabbitMQ
  Product Version: 3.8.3
  Platform: Erlang/OTP 22.3.4.1
  Capabilities:
    Exchange Exchange Bindings: True
    Connection.blocked: True
    Authentication Failure Close: True
    Direct Reply To: True
    Basic.nack: True
    Per Consumer Qos: True
    Consumer Priorities: True
    Consumer Cancel Notify: True
    Publisher Confirms: True

Vulnerabilities

2 3 2

8011 / tcp

-1754404001 | 2025-03-06T13:23:48.248941

Hashes

hash

-1506976462

http.dom_hash

-2006505642

http.html_hash

-1754404001

HTTP/1.1 200 
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 06 Mar 2025 13:24:10 GMT

9000 / tcp

319169514 | 2025-03-21T17:13:31.494099

Hashes

hash

-2051221993

http.dom_hash

-57080329

http.favicon.hash

-1639835336

http.html_hash

319169514

http.title_hash

763616111

Portainer

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Content-Length: 17218
Content-Type: text/html; charset=utf-8
Last-Modified: Sun, 30 Oct 2022 19:53:54 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Date: Fri, 21 Mar 2025 17:13:30 GMT

9009 / tcp

533812729 | 2025-02-28T11:57:02.193229

Hashes

hash

-1756044589

http.dom_hash

552564421

http.favicon.hash

-114774331

http.html_hash

533812729

http.server_hash

784350709

http.title_hash

784350709

MinIO Console

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1266
Content-Type: text/html
Last-Modified: Fri, 28 Feb 2025 11:57:02 GMT
Server: MinIO Console
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Date: Fri, 28 Feb 2025 11:57:02 GMT
Connection: close

43.143.184.62

Last Seen: 2025-03-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

80 / tcp

-894825396 | 2025-03-18T15:03:50.651850

Hashes

nginx1.23.2

81 / tcp

-1890171949 | 2025-03-06T05:32:55.788899

Hashes

nginx1.23.2

443 / tcp

147704261 | 2025-03-18T09:31:02.389855

Hashes

nginx1.23.2

5432 / tcp

-726790289 | 2025-03-22T03:42:39.330397

PostgreSQL14.1 - 14.6

5672 / tcp

-1637790866 | 2025-03-08T21:10:04.201489

RabbitMQ3.8.3

8011 / tcp

-1754404001 | 2025-03-06T13:23:48.248941

Hashes

9000 / tcp

319169514 | 2025-03-21T17:13:31.494099

Hashes

Portainer2.16.0

9009 / tcp

533812729 | 2025-02-28T11:57:02.193229

Hashes

MinIO Server

Products

Pricing

Contact Us

43.143.184.62

Last Seen: 2025-03-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 81 Port 443 Port 5672 Latest CVSS

OpenPorts

80 / tcp -894825396 | 2025-03-18T15:03:50.651850

Hashes

nginx1.23.2

81 / tcp -1890171949 | 2025-03-06T05:32:55.788899

Hashes

nginx1.23.2

443 / tcp 147704261 | 2025-03-18T09:31:02.389855

Hashes

nginx1.23.2

5432 / tcp -726790289 | 2025-03-22T03:42:39.330397

PostgreSQL14.1 - 14.6

5672 / tcp -1637790866 | 2025-03-08T21:10:04.201489

RabbitMQ3.8.3

8011 / tcp -1754404001 | 2025-03-06T13:23:48.248941

Hashes

9000 / tcp 319169514 | 2025-03-21T17:13:31.494099

Hashes

Portainer2.16.0

9009 / tcp 533812729 | 2025-02-28T11:57:02.193229

Hashes

MinIO Server

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

-894825396 | 2025-03-18T15:03:50.651850

81 / tcp

-1890171949 | 2025-03-06T05:32:55.788899

443 / tcp

147704261 | 2025-03-18T09:31:02.389855

5432 / tcp

-726790289 | 2025-03-22T03:42:39.330397

5672 / tcp

-1637790866 | 2025-03-08T21:10:04.201489

8011 / tcp

-1754404001 | 2025-03-06T13:23:48.248941

9000 / tcp

319169514 | 2025-03-21T17:13:31.494099

9009 / tcp

533812729 | 2025-02-28T11:57:02.193229