GeneralInformation

Hostnames	webpanel.csaonline.de intranet.stadtwerke-kelheim.de
Domains	csaonline.de stadtwerke-kelheim.de
Country	Germany
City	Regensburg
Organization	CSA EDV Vertrieb
ISP	R-KOM Regensburger Telekommunikationsgesellschaft mbH
ASN	AS12611
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

21 80 443

21 / tcp

-1475258385 | 2025-03-29T16:25:03.710232

220 ProFTPD Server (Debian) [::ffff:172.16.10.3]
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
214-CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
214-EPRT    EPSV    ALLO*   RNFR    RNTO    DELE    MDTM    RMD     
214-XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
214-NOOP    FEAT    OPTS    HOST    CLNT    AUTH*   CCC*    CONF*   
214-ENC*    MIC*    PBSZ*   PROT*   TYPE    STRU    MODE    RETR    
214-STOR    STOU    APPE    REST    ABOR    USER    PASS    ACCT*   
214-REIN*   LIST    NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@wp-ftp.webpanel.csaonline.de
211-Features:
211-CLNT
211-EPRT
211-EPSV
211-HOST
211-LANG en-US.UTF-8*;en-US
211-MDTM
211-MFF modify;UNIX.group;UNIX.mode;
211-MFMT
211-MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.groupname*;UNIX.mode*;UNIX.owner*;UNIX.ownername*;
211-REST STREAM
211-SITE MKDIR
211-SITE RMDIR
211-SITE SYMLINK
211-SITE UTIME
211-SIZE
211-TVFS
211-UTF8
211 End

80 / tcp

1421729148 | 2025-03-31T23:06:59.687015

Hashes

hash

-282833601

http.dom_hash

-1014833010

http.html_hash

1421729148

http.server_hash

967792298

http.title_hash

271981266

CSA Hosting

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 31 Mar 2025 23:06:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding

Vulnerabilities

443 / tcp

-919982521 | 2025-04-03T05:24:58.454859

Hashes

hash

1998186167

http.dom_hash

471906108

http.html_hash

-919982521

http.server_hash

967792298

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 03 Apr 2025 05:24:57 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 339
Connection: keep-alive
Location: http://intranet.energie-kelheim.de/

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1b:7c:e7:7e:6a:49:51:fa:81:b3:dc:cc:b6:45:b7:e7:7a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 12 22:05:02 2025 GMT
            Not After : Jun 10 22:05:01 2025 GMT
        Subject: CN=intranet.stadtwerke-kelheim.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:13:2f:74:f2:20:b5:ec:6a:cd:4b:92:33:
                    42:15:0f:51:ef:d4:d9:4b:38:e6:80:60:2f:e2:3f:
                    ea:d0:e0:6d:31:7d:f6:b1:d2:7c:6b:8e:ec:ee:e9:
                    96:f6:41:0d:3b:ef:de:a1:65:66:d3:0d:dd:03:76:
                    22:0e:04:e6:da:0f:2c:fb:e7:91:c2:0f:7d:96:14:
                    4a:87:93:0f:5f:10:fb:63:f9:21:62:44:1e:93:0b:
                    f3:6b:e1:9b:fd:e0:0b:5f:8d:71:fd:03:25:7b:d5:
                    08:bf:7a:f0:36:43:4a:0b:1e:34:00:ac:5f:a9:14:
                    ea:84:5b:c8:9c:26:da:aa:b6:1b:aa:ab:61:48:da:
                    d0:a6:9a:79:ce:b2:78:37:05:08:ac:7c:51:56:45:
                    36:72:ff:0c:a5:a7:db:1e:dc:84:a7:b0:f6:cb:65:
                    0a:11:86:b3:89:c2:7b:02:38:98:ae:5a:31:20:3d:
                    89:d0:ef:b5:ed:38:c5:74:c3:46:aa:7f:66:ac:d0:
                    3a:43:2f:a8:6e:c5:85:43:7f:e6:46:1f:f8:59:7d:
                    8d:de:94:5e:93:52:7e:c3:f7:f3:65:ca:92:f8:97:
                    e5:77:9a:04:a2:38:44:14:f6:b3:69:fa:83:b4:e2:
                    7b:40:c6:b1:fe:33:13:b8:8d:5a:dd:ae:5f:51:45:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                8E:14:49:1E:A9:4E:5F:37:EB:7C:06:9B:01:62:D2:E6:70:FB:DA:83
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:intranet.stadtwerke-kelheim.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r10.c.lencr.org/123.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
                                4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
                    Timestamp : Mar 12 23:03:32.949 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:21:00:A8:98:8E:4A:74:04:AF:B5:3D:81:2F:
                                18:29:94:BC:63:D5:9F:3C:6A:53:FB:BE:C2:B7:A6:7D:
                                E2:B8:E5:AE:7E:02:1F:43:26:46:84:16:48:78:51:C3:
                                DD:0A:59:14:8E:92:A8:CA:3B:EC:FA:CE:62:2E:ED:D5:
                                E0:7B:41:61:E9:E6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 12 23:03:32.965 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C4:AB:95:73:B0:14:B5:20:FD:AC:34:
                                66:B2:54:B7:18:F3:41:AE:6D:76:CF:2C:6D:78:DB:2A:
                                93:56:06:9F:78:02:20:39:AE:13:20:4E:AF:06:75:3B:
                                5B:7C:45:61:7C:AB:76:74:E7:29:F7:7C:C1:75:40:CB:
                                C1:A4:24:98:0C:23:76
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b7:75:eb:c7:66:09:62:7b:0a:a8:cf:6d:3b:3a:37:eb:06:74:
        82:e3:20:bd:52:a6:ac:bb:d4:15:8a:2c:0f:4c:ae:02:ad:12:
        53:b1:e5:4d:48:12:05:db:1d:80:a0:02:33:1c:b5:97:82:fb:
        55:ba:44:5d:e4:98:ff:eb:ee:69:93:bb:d5:ec:1c:45:da:a8:
        fa:3a:b1:06:12:70:43:1b:7f:41:34:27:e0:4a:66:e2:8d:7c:
        ef:79:34:64:ec:44:d9:c3:5f:a7:fd:b7:08:f0:d7:26:79:14:
        f5:46:ab:c1:a6:10:6c:55:23:15:1c:6f:e5:e4:a9:7f:64:ce:
        9a:1c:0f:3e:c2:07:23:70:a6:09:39:69:1e:35:15:aa:d7:7f:
        13:71:35:48:bf:9b:37:fd:fd:25:13:3a:7c:e0:04:3d:a2:ff:
        ae:ae:f0:95:44:8f:c7:42:d5:51:71:65:c5:e0:ba:31:53:0c:
        c3:da:3a:85:1a:4a:14:7a:18:b6:ae:9f:23:e6:e0:21:1a:b8:
        3a:62:92:03:54:0e:a3:77:c5:86:b9:85:f7:e1:97:18:3c:45:
        dc:06:8f:19:5e:61:c1:65:a0:de:38:e0:4f:b8:73:fd:16:da:
        ee:86:f4:f5:14:1d:84:90:34:e0:f2:fe:ba:d3:52:f3:55:0c:
        23:98:9d:e5

Vulnerabilities

81.27.162.76

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

21 / tcp

-1475258385 | 2025-03-29T16:25:03.710232

80 / tcp

1421729148 | 2025-03-31T23:06:59.687015

Hashes

nginx1.18.0

443 / tcp

-919982521 | 2025-04-03T05:24:58.454859

Hashes

nginx1.18.0

Products

Pricing

Contact Us

81.27.162.76

Last Seen: 2025-04-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

21 / tcp -1475258385 | 2025-03-29T16:25:03.710232

80 / tcp 1421729148 | 2025-03-31T23:06:59.687015

Hashes

nginx1.18.0

443 / tcp -919982521 | 2025-04-03T05:24:58.454859

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-1475258385 | 2025-03-29T16:25:03.710232

80 / tcp

1421729148 | 2025-03-31T23:06:59.687015

443 / tcp

-919982521 | 2025-04-03T05:24:58.454859