pfSense

<div id="34" class="div_tree">

<dl class="form_dl"></dl>

<h4>Hosts Scanned</h4>

<div class="rpt_results"><h4>Successfully Scanned Hosts (IP)</h4>81.143.222.156-81.143.222.157</div>

<div class="rpt_results"><h4>Target distribution across scanner appliances</h4>External : 81.143.222.156-81.143.222.157</div>

<h4>Options Profile</h4>

<h6 id="DEFAULT_VM_OPTIONS_PROFILE_2022"><a name="DEFAULT_VM_OPTIONS_PROFILE_2022"></a>

<b>DEFAULT_VM_OPTIONS_PROFILE_2022</b>

</h6>

<dl class="form_dl options">

<dt>

<b>Scan Settings</b>

</dt>

<dd>&nbsp;</dd>

<dt>Ports</dt>

<dd>-</dd>

<dt>Scanned TCP Ports</dt>

<dd>Standard Scan and Additional TCP Ports: 8080,  8081,  8082,  8083,  8084,  8085,  8090,  50000,  50001,  50003,  33848</dd>

<dt>Scanned UDP Ports</dt>

<dd>Standard Scan and Additional UDP Ports: 8080,  8081,  8082,  8083,  8084,  8085,  8090,  50000,  50001,  50002,  33848</dd>

<dt>Scan Dead Hosts</dt>

<dd>Off</dd>

<dt>Close Vulnerabilities on Dead Hosts Count</dt>

<dd>2</dd>

<dt>Purge old host data when OS changes</dt>

<dd>On</dd>

<dt>Load Balancer Detection</dt>

<dd>On</dd>

<dt>Perform 3-way Handshake</dt>

<dd>Off</dd>

<dt>Vulnerability Detection</dt>

<dd>Complete</dd>

<dt>Intrusive Checks</dt>

<dd>Excluded</dd>

<dt>Password Brute Forcing</dt>

<dd>-</dd>

<dt>System</dt>

<dd>Disabled</dd>

<dt>Custom</dt>

<dd>Disabled</dd>

<dt>Authentication</dt>

<dd>-</dd>

<dt>Windows</dt>

<dd>Enabled</dd>

<dt>Unix/Cisco/Network SSH</dt>

<dd>Enabled</dd>

<dt>Unix Least Privilege Authentication</dt>

<dd>Disabled</dd>

<dt>Oracle</dt>

<dd>Disabled</dd>

<dt>Oracle Listener</dt>

<dd>Disabled</dd>

<dt>SNMP</dt>

<dd>Enabled</dd>

<dt>VMware</dt>

<dd>Enabled</dd>

<dt>DB2</dt>

<dd>Disabled</dd>

<dt>HTTP</dt>

<dd>Enabled</dd>

<dt>MySQL</dt>

<dd>Disabled</dd>

<dt>Tomcat Server</dt>

<dd>Disabled</dd>

<dt>MongoDB</dt>

<dd>Disabled</dd>

<dt>Palo Alto Networks Firewall</dt>

<dd>Disabled</dd>

<dt>Jboss Server</dt>

<dd>Disabled</dd>

<dt>Oracle WebLogic Server</dt>

<dd>Disabled</dd>

<dt>MariaDB</dt>

<dd>Disabled</dd>

<dt>InformixDB</dt>

<dd>Disabled</dd>

<dt>MS Exchange Server</dt>

<dd>Disabled</dd>

<dt>Oracle HTTP Server</dt>

<dd>Disabled</dd>

<dt>MS SharePoint</dt>

<dd>Disabled</dd>

<dt>Sybase</dt>

<dd>Disabled</dd>

<dt>Kubernetes</dt>

<dd>Disabled</dd>

<dt>SAP IQ</dt>

<dd>Disabled</dd>

<dt>SAP HANA</dt>

<dd>Disabled</dd>

<dt>Azure MS SQL</dt>

<dd>Disabled</dd>

<dt>Neo4j</dt>

<dd>Disabled</dd>

<dt>NGINX</dt>

<dd>Disabled</dd>

<dt>Infoblox</dt>

<dd>Disabled</dd>

<dt>Overall Performance</dt>

<dd>Normal</dd>

<dt>Allow Parallel Scanning</dt>

<dd>Disabled</dd>

<dt>Additional Certificate Detection</dt>

<dd>Disabled</dd>

<dt>Authenticated Scan Certificate Discovery</dt>

<dd>Disabled</dd>

<dt>Test Authentication</dt>

<dd>Disabled</dd>

<dt>Hosts to Scan in Parallel</dt>

<dd>-</dd>

<dt>Use Appliance Parallel ML Scaling</dt>

<dd>Off</dd>

<dt>External Scanners</dt>

<dd>15</dd>

<dt>Scanner Appliances</dt>

<dd>30</dd>

<dt>Processes to Run in Parallel</dt>

<dd>-</dd>

<dt>Total Processes</dt>

<dd>10</dd>

<dt>HTTP Processes</dt>

<dd>10</dd>

<dt>Packet (Burst) Delay</dt>

<dd>Medium</dd>

<dt>Port Scanning and Host Discovery</dt>

<dd>-</dd>

<dt>Intensity</dt>

<dd>Normal</dd>

<dt>Dissolvable Agent</dt>

<dd>-</dd>

<dt>Dissolvable Agent (for this profile)</dt>

<dd>Disabled</dd>

<dt>Windows Share Enumeration</dt>

<dd>Disabled</dd>

<dt>Windows Directory Search</dt>

<dd>Disabled</dd>

<dt>Lite OS Discovery</dt>

<dd>Disabled</dd>

<dt>User Defined HTTP Header</dt>

<dd>ORG_Vuln_Mgmt</dd>

<dt>Host Alive Testing</dt>

<dd>Disabled</dd>

<dt>Do Not Overwrite OS</dt>

<dd>Disabled</dd>

<dt>

<b>System Authentication</b>

</dt>

<dd>&nbsp;</dd>

<dt>System Authentication Records</dt>

<dd>-</dd>

<dt>Include system created authentication records in scans</dt>

<dd>Disabled</dd>

<dt>

<b>Advanced Settings</b>

</dt>

<dd>&nbsp;</dd>

<dt>Host Discovery</dt>

<dd>TCP Custom TCP Port List: 21-23,  25,  53,  80,  88,  110-111,  135,  139,  443,  445,  1433,  1521,  1525,  1526,  1527,  1529,  1571</dd>

<dt>&nbsp;</dt>

<dd>UDP Standard Scan</dd>

<dt>&nbsp;</dt>

<dd>ICMP On</dd>

<dt>Packet Options</dt>

<dd>-</dd>

<dt>Ignore firewall-generated TCP RST packets</dt>

<dd>On</dd>

<dt>Ignore all TCP RST packets</dt>

<dd>Off</dd>

<dt>Ignore firewall-generated TCP SYN-ACK packets</dt>

<dd>On</dd>

<dt>Do not send TCP ACK or SYN-ACK packets during host discovery</dt>

<dd>Off</dd>

</dl>

<div class="head1">

<a href="javascript:toggle_tree('38')" class="section" id="l38" name="Report Legend"><h4><img src="https://qualysguard.qg2.apps.qualys.com/images/tree_open.gif" alt="" height="10" width="10" id="i38" class="left">

Report Legend</h4></a>

</div>

<div id="38" class="div_tree">

<div class="report_result">

<h4>Vulnerability Levels</h4>

<p>A Vulnerability is a design flaw or mis-configuration which makes your network (or a host on your network) susceptible to malicious attacks from local or remote users. Vulnerabilities can exist in several areas of your network, such as in your firewalls, FTP servers, Web servers, operating systems or CGI bins. Depending on the level of the security risk, the successful exploitation of a vulnerability can vary from the disclosure of information about the host to a complete compromise of the host.</p>

<table class="vuln_legend" border="0" cellspacing="0" cellpadding="0">

<tbody><tr>

<td id="tl1h01" class="severity">Severity</td>

<td id="tl1h02" class="level">Level</td>

<td id="tl1h03">Description</td>

</tr>

<tr>

<td headers="tl1h01" class="severity">

<div class="severity_icon" title="Vulnerability - level 1">

<img src="/images/vuln_level1.gif">

 1

</div>

</td>

<td headers="tl1h02" class="level">Minimal</td>

<td headers="tl1h03">Intruders can collect information about the host (open ports, services, etc.) and may be able to use this information to find other vulnerabilities.</td>

</tr>

<tr>

<td headers="tlh01" class="severity">

<div class="severity_icon" title="Vulnerability - level 2">

<img src="/images/vuln_level2.gif">

 2

</div>

</td>

<td headers="tl1h02" class="level">Medium</td>

<td headers="tl1h03">Intruders may be able to collect sensitive information from the host, such as the precise version of software installed. With this information, intruders can easily exploit known vulnerabilities specific to software versions.</td>

</tr>

<tr>

<td headers="tlh01" class="severity">

<div class="severity_icon" title="Vulnerability - level 3">

<img src="/images/vuln_level3.gif">

 3

</div>

</td>

<td headers="tl1h02" class="level">Serious</td>

<td headers="tl1h03">Intruders may be able to gain access to specific information stored on the host, including security settings. This could result in potential misuse of the host by intruders. For example, vulnerabilities at this level may include partial disclosure of file contents, access to certain files on the host, directory browsing, disclosure of filtering rules and security mechanisms, denial of service attacks, and unauthorized use of services, such as mail-relaying.</td>

</tr>

<tr>

<td headers="tl1h01" class="severity">

<div class="severity_icon" title="Vulnerability - level 4">

<img src="/images/vuln_level4.gif">

 4

</div>

</td>

<td headers="tl1h02" class="level">Critical</td>

<td headers="tl1h03">Intruders can possibly gain control of the host, or there may be potential leakage of highly sensitive information. For example, vulnerabilities at this level may include full read access to files, potential backdoors, or a listing of all the users on the host.</td>

</tr>

<tr>

<td headers="tlh01" class="severity">

<div class="severity_icon" title="Vulnerability - level 5">

<img src="/images/vuln_level5.gif">

 5

</div>

</td>

<td headers="tl1h02" class="level">Urgent</td>

<td headers="tl1h03">Intruders can easily gain control of the host, which can lead to the compromise of your entire network security. For example, vulnerabilities at this level may include full read and write access to files, remote execution of commands, and the presence of backdoors.</td>

</tr>

</tbody></table>

<h4>Potential Vulnerability Levels</h4>

<p>A potential vulnerability is one which we cannot confirm exists. The only way to verify the existence of such vulnerabilities on your network would be to perform an intrusive scan, which could result in a denial of service. This is strictly against our policy. Instead, we urge you to investigate these potential vulnerabilities further.</p>

<table class="vuln_legend" border="0" cellspacing="0" cellpadding="0">

<tbody><tr>

<td id="tl2h01" class="severity">Severity</td>

<td id="tl2h02" class="level">Level</td>

<td id="tl2h03">Description</td>

</tr>

<tr>

<td headers="tl2h01" class="severity">

<div class="severity_icon" title="Potential Vulnerability - level 1">

<img src="/images/threat_level1.gif">

 1

</div>

</td>

<td headers="tl2h02" class="level">Minimal</td>

<td headers="tl2h03">If this vulnerability exists on your system, intruders can collect information about the host (open ports, services, etc.) and may be able to use this information to find other vulnerabilities.</td>

</tr>

<tr>

<td headers="tl2h01" class="severity">

<div class="severity_icon" title="Potential Vulnerability - level 2">

<img src="/images/threat_level2.gif">

 2

</div>

</td>

<td headers="tl2h02" class="level">Medium</td>

<td headers="tl2h03">If this vulnerability exists on your system, intruders may be able to collect sensitive information from the host, such as the precise version of software installed. With this information, intruders can easily exploit known vulnerabilities specific to software versions.</td>

</tr>

<tr>

<td headers="tl2h01" class="severity">

<div class="severity_icon" title="Potential Vulnerability - level 3">

<img src="/images/threat_level3.gif">

 3

</div>

</td>

<td headers="tl2h02" class="level">Serious</td>

<td headers="tl2h03">If this vulnerability exists on your system, intruders may be able to gain access to specific information stored on the host, including security settings. This could result in potential misuse of the host by intruders. For example, vulnerabilities at this level may include partial disclosure of file contents, access to certain files on the host, directory browsing, disclosure of filtering rules and security mechanisms, denial of service attacks, and unauthorized use of services, such as mail-relaying.</td>

</tr>

<tr>

<td headers="tl2h01" class="severity">

<div class="severity_icon" title="Potential Vulnerability - level 4">

<img src="/images/threat_level4.gif">

 4

</div>

</td>

<td headers="tl2h02" class="level">Critical</td>

<td headers="tl2h03">If this vulnerability exists on your system, intruders can possibly gain control of the host, or there may be potential leakage of highly sensitive information. For example, vulnerabilities at this level may include full read access to files, potential backdoors, or a listing of all the users on the host.</td>

</tr>

<tr>

<td headers="tl2h01" class="severity">

<div class="severity_icon" title="Potential Vulnerability - level 5">

<img src="/images/threat_level5.gif">

 5

</div>

</td>

<td headers="tl2h02" class="level">Urgent</td>

<td headers="tl2h03">If this vulnerability exists on your system, intruders can easily gain control of the host, which can lead to the compromise of your entire network security. For example, vulnerabilities at this level may include full read and write access to files, remote execution of commands, and the presence of backdoors.</td>

</tr>

</tbody></table>

<h4>Information Gathered</h4>

<p>Information Gathered includes visible information about the network related to the host, such as traceroute information, Internet Service Provider (ISP), or a list of reachable hosts. Information Gathered severity levels also include Network Mapping data, such as detected firewalls, SMTP banners, or a list of open TCP services.</p>

<table class="vuln_legend" border="0" cellspacing="0" cellpadding="0">

<tbody><tr>

<td id="tl3h01" class="severity">Severity</td>

<td id="tl3h02" class="level">Level</td>

<td id="tl3h03">Description</td>

</tr>

<tr>

<td headers="tl3h01" class="severity">

<div class="severity_icon" title="Information Gathered - level 1">

<img src="/images/info_level1.gif">

 1

</div>

</td>

<td headers="tl3h02" class="level">Minimal</td>

<td headers="tl3h03">Intruders may be able to retrieve sensitive information related to the host, such as open UDP and TCP services lists, and detection of firewalls.</td>

</tr>

<tr>

<td headers="tl3h01" class="severity">

<div class="severity_icon" title="Information Gathered - level 2">

<img src="/images/info_level2.gif">

 2

</div>

</td>

<td headers="tl3h02" class="level">Medium</td>

<td headers="tl3h03">Intruders may be able to determine the operating system running on the host, and view banner versions.</td>

</tr>

<tr>

<td headers="tl3h01" class="severity">

<div class="severity_icon" title="Information Gathered - level 3">

<img src="/images/info_level3.gif">

 3

</div>

</td>

<td headers="tl3h02" class="level">Serious</td>

<td headers="tl3h03">Intruders may be able to detect highly sensitive data, such as global system user lists. </td>

</tr>

</tbody></table>

</div>

</div>

</div>