Pass Trend Micro ScanMail for Exchange Web Console Detection 05 Jun 2015 None Pass Alcatel OmniSwitch Default Credentials (ftp) 30 Sep 2013 9.1 (v3) Critical Pass RES Workspace Manager Agent Detection 03 Oct 2013 None Pass RES Workspace Manager Relay Server Detection 03 Oct 2013 None Pass FireEye Web MPS GUI Detection 03 Oct 2013 None Noise SSL Cipher Block Chaining Cipher Suites Supported 22 Oct 2013 None Pass SSH Algorithms and Languages Supported 28 Oct 2013 None Pass Cogent DataHub Tunnel/Mirror Service Detection 23 Oct 2013 None Pass Net Optics Director Web Detection 23 Oct 2013 None Pass McAfee Web Reporter Detection (remote check) 14 Oct 2013 None Pass Schneider Electric InduSoft Web Studio Arbitrary Script Execution CVE-2015-7374 05 Nov 2013 9.8 (v3) Critical Pass SuperMicro Device Uses Default SSH Host Key 19 Dec 2013 9.8 (v3) Critical Pass Network Time Protocol Daemon (ntpd) monlist Command Enabled DoS CVE-2013-5211 02 Jan 2014 7.5 (v3) High Pass IBM DB2 9.7 < Fix Pack 9 Multiple Vulnerabilities CVE-2012-2190 CVE-2012-2191 CVE-2012-2203 CVE-2013-3475 CVE-2013-4033 CVE-2013-5466 CVE-2013-6717 18 Dec 2013 9.8 (v3) Critical Pass Oracle Portal Demo Organization Chart Detection 22 Nov 2013 None Pass ColdFusion Extended Support Version Detection 22 Jan 2014 None Pass Web Site Client Access Policy File Detection 11 Feb 2014 None Pass Certificate Revocation List Expiry 12 Feb 2014 None Pass Cisco TelePresence Video Communication Server (VCS) Detection 28 Jan 2014 None Pass SAProuter Detection 28 Jan 2014 None Pass Symantec Encryption Server Detection 14 Feb 2014 None Pass Cisco TelePresence System Detection 28 Jan 2014 None Pass NagiosQL Detection 26 Dec 2013 None Pass Synology DiskStation Manager (DSM) Detection 05 Feb 2014 None Pass Core FTP Server < 1.2 Build 508 lstrcpy Overflow Code Execution CVE-2014-1215 24 Feb 2014 7.8 (v3) High Pass Microsoft DNS Server Version Detection 03 Mar 2014 None Pass ZTE ZXV10 W300 Wireless Router Hard-coded Password CVE-2014-0329 05 Mar 2014 9.8 (v3) Critical Pass SFTP Supported 24 Feb 2014 None Pass Core FTP Server Detection 24 Feb 2014 None Pass Artifactory < 3.1.1.1 XStream Remote Code Execution CVE-2013-7285 12 Mar 2014 9.8 (v3) Critical Pass NAT-PMP Detection (local network) 20 Mar 2014 None Pass Default FTP Credentials (ntpupdate / ntpupdate) 25 Mar 2014 9.1 (v3) Critical Pass Default Password (ironport) for 'admin' Account CVE-1999-0502 02 Apr 2014 9.8 (v3) Critical Pass EMC RSA Authentication Manager Version 04 Apr 2014 None Pass SSH Static Key Accepted CVE-2012-1493 CVE-2013-3619 08 May 2014 9.8 (v3) Critical Pass HP LeftHand OS Management Protocol Detection 10 Apr 2014 None Pass EZPZ One Click Backup Plugin for WordPress 'cmd' Parameter Remote Command Execution CVE-2014-3114 20 May 2014 9.8 (v3) Critical Pass Participants Database Plugin for WordPress 'query' Parameter SQL Injection CVE-2014-3961 16 Jun 2014 10 (v3) Critical Pass nginx 1.5.10 SPDY Memory Corruption CVE-2014-0088 06 May 2014 5.6 (v3) Medium Pass Default Password (arkeia) for 'root' Account CVE-1999-0502 28 May 2014 9.8 (v3) Critical Pass HP OfficeJet Printer Heartbeat Information Disclosure (Heartbleed) CVE-2014-0160 02 Jun 2014 7.5 (v3) High Pass Symantec Web Gateway < 5.2.1 Multiple Vulnerabilities (SYM14-010) CVE-2013-5017 CVE-2014-1650 CVE-2014-1651 CVE-2014-1652 19 Jun 2014 9.8 (v3) Critical Pass Default Password (f00b@r) for 'root' Account CVE-1999-0502 23 Jun 2014 9.8 (v3) Critical Pass OSSIM SOAP Service Detection 23 Jun 2014 None Pass AlienVault OSSIM 'av-centerd' set_file() Remote Code Execution CVE-2014-4151 25 Jun 2014 8.8 (v3) High Pass Tinc VPN Service Detection 26 Jun 2014 None Pass HylaFAX Installed 24 Jun 2014 None Pass Countertack Sentinel User Interface Detection 23 Jun 2014 None Pass Apache mod_wsgi < 4.2.4 Privilege Dropping Privilege Escalation CVE-2014-8583 14 Jul 2014 8.1 (v3) High Pass Cloudera Manager Detection 26 Jun 2014 None Pass WebTitan Default Credentials (ssh) 24 Jul 2014 9.8 (v3) Critical Pass Knot DNS Server Version Detection 25 Jul 2014 None Pass Default Password (default) for 'root' Account CVE-1999-0502 31 Jul 2014 9.8 (v3) Critical Pass Microsoft Exchange Client Access Server Information Disclosure 06 Aug 2014 7.5 (v3) High Pass Default Password (vmware) for 'root' Account CVE-1999-0502 04 Aug 2014 9.8 (v3) Critical Pass IBM GCM16 / GCM32 Global Console Manager KVM Switch Detection 05 Aug 2014 None Pass Halon Security Router Detection 11 Aug 2014 None Pass Atlassian Bamboo Detection 11 Aug 2014 None Pass Apache 2.2.x < 2.2.28 Multiple Vulnerabilities CVE-2013-5704 CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 04 Sep 2014 7.3 (v3) High Pass ManageEngine EventLog Analyzer 02 Sep 2014 None Pass Postfix Policyd Protocol Detection 07 Oct 2014 None Pass GNU Bash Environment Variable Handling Code Injection via ProFTPD (Shellshock) CVE-2014-6271 CVE-2014-7169 30 Sep 2014 8.8 (v3) High Pass Creative Contact Form Component for Joomla! File Upload RCE CVE-2014-7969 24 Nov 2014 9.8 (v3) Critical Pass rsync Writeable Module Detection 14 Oct 2014 None Pass Hikit Backdoor Detection 14 Oct 2014 None Pass Cisco UCS Director Default Credentials (SSH) 31 Oct 2014 9.8 (v3) Critical Pass Cisco UCS Director Web UI Detection 31 Oct 2014 None Pass WaveMaker Studio Detection 19 Jul 2012 None Pass Eaton Network Shutdown Module Detection 20 Jul 2012 None Pass Cisco TelePresence Multipoint Switch Web Detection 27 Jul 2012 None Pass Appweb HTTP Server Version 02 Aug 2012 None Pass Cyberoam Admin Console Detection 07 Aug 2012 None Pass RabidHamster R4 Detection 09 Aug 2012 None Pass Apple Profile Manager Detection 01 Mar 2012 None Pass Eucalyptus Walrus Detection 21 Aug 2012 None Pass Eucalyptus Cloud Controller Console Detection 21 Aug 2012 None Pass Oracle Integrated Lights Out Manager Web Detection 23 Aug 2012 None Pass Symantec Messaging Gateway Detection 07 Sep 2012 None Pass SquidClamav Detection 10 Sep 2012 None Pass EMC AutoStart ftAgent Detection 10 Aug 2012 None Pass Default Password (user) for 'user' Account CVE-1999-0502 19 Sep 2012 9.8 (v3) Critical Pass Apache 2.2.x < 2.2.23 Multiple Vulnerabilities CVE-2012-0883 CVE-2012-2687 14 Sep 2012 7 (v3) High Pass SolarWinds Orion Product Detection 17 Sep 2012 None Pass Cisco Prime Security Manager Web Detection 18 Sep 2012 None Pass HP Database Archiving Software Detection 19 Sep 2012 None Pass SAP Control SOAP Web Service Detection 25 Sep 2012 None Pass SAP Host Control SOAP Web Service Detection 25 Sep 2012 None Pass Advanced Message Queuing Protocol Detection STARTTLS Support 27 Sep 2012 None Pass OpenStack Glance Detection 27 Sep 2012 None Pass OpenStack Keystone Detection 27 Sep 2012 None Pass LogAnalyzer Detection 17 Sep 2012 None Pass WebPagetest Detection 18 Sep 2012 None Pass WordPress A Page Flip Book Plugin for WordPress 'pageflipbook_language' Parameter Arbitrary Code ExecutionCVE-2012-6652 03 Oct 2012 9.8 (v3) Critical Pass SSL Compression Methods Supported 16 Oct 2012 None Pass IPSEC Internet Key Exchange (IKE) Version 2 Detection 24 Oct 2012 None Pass Novell ZENworks Asset Management Detection 25 Oct 2012 None Noise TLS Next Protocols Supported 16 Oct 2012 None Pass WANem result.php pc Parameter Remote Command Execution 29 Oct 2012 8.8 (v3) High Pass ManageEngine OpStor Detection 01 Nov 2012 None Pass CoSoSys Endpoint Protector Detection 16 Nov 2012 None Pass WebYaST Web Client Detection 19 Nov 2012 None Pass Novell Sentinel Log Manager Web Detection 19 Nov 2012 None Pass Tectia SSH Server Authentication Bypass CVE-2012-5975 05 Dec 2012 9.8 (v3) Critical Pass ManageEngine Applications Manager Detection 05 Dec 2012 None Pass ManageEngine Security Manager Plus Detection 10 Dec 2012 None Pass Mutiny Detection 26 Oct 2012 None Pass freeFTPd / freeSSHd SFTP Authentication Bypass CVE-2012-6066 CVE-2012-6067 11 Dec 2012 7.3 (v3) High Pass Snare Agent Detection 24 Dec 2012 None Pass Nagios Core Detection 16 Jan 2013 None Pass ViArt Shop Detection 30 Jan 2013 None Pass HP Diagnostics Server Detection 05 Feb 2013 None Pass Hunt CCTV DVR.cfg Direct Request Information Disclosure CVE-2013-1391 06 Feb 2013 7.5 (v3) High 75

RELAYTO Penetration Test Results - Page 75 RELAYTO Penetration Test Results Page 74 Page 76