Skip to content

Instantly share code, notes, and snippets.

@ValtteriL

ValtteriL/opalopc-report-202403101334056538.sarif

Created March 10, 2024 13:31
Show Gist options
  • Save ValtteriL/f640e5c71e7e6c853ca37537ed9253c9 to your computer and use it in GitHub Desktop.
Save ValtteriL/f640e5c71e7e6c853ca37537ed9253c9 to your computer and use it in GitHub Desktop.
Download ZIP
OPC UA Vulnerability Scan Report in SARIF format
Raw
opalopc-report-202403101334056538.sarif
{
"$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.6.json",
"version": "2.1.0",
"runs": [
{
"tool": {
"driver": {
"guid": "9ff60239-60d4-4715-afa8-bfe993f72824",
"name": "OpalOPC",
"shortDescription": {
"text": "OpalOPC is a security scanner for OPC UA applications"
},
"version": "1.0.0.0",
"informationUri": "https://opalopc.com/",
"rules": [
{
"id": "10005",
"name": "Invalid Message Security Mode",
"defaultConfiguration": {
"level": "error",
"rank": 65.0
},
"helpUri": "https://opalopc.com/docs/plugin-10005/"
},
{
"id": "10006",
"name": "Message Security Mode None",
"defaultConfiguration": {
"level": "error",
"rank": 65.0
},
"helpUri": "https://opalopc.com/docs/plugin-10006/"
},
{
"id": "10007",
"name": "Deprecated Security Policy Basic128Rsa15",
"defaultConfiguration": {
"level": "error",
"rank": 48.0
},
"helpUri": "https://opalopc.com/docs/plugin-10007/"
},
{
"id": "10008",
"name": "Deprecated Security Policy Basic256",
"defaultConfiguration": {
"level": "error",
"rank": 48.0
},
"helpUri": "https://opalopc.com/docs/plugin-10008/"
},
{
"id": "10009",
"name": "Security Policy None",
"defaultConfiguration": {
"level": "error",
"rank": 54.0
},
"helpUri": "https://opalopc.com/docs/plugin-10009/"
},
{
"id": "10001",
"name": "Anonymous authentication enabled",
"defaultConfiguration": {
"level": "error",
"rank": 73.0
},
"helpUri": "https://opalopc.com/docs/plugin-10001/"
},
{
"id": "10010",
"name": "Self-signed client application certificates trusted",
"defaultConfiguration": {
"level": "error",
"rank": 54.0
},
"helpUri": "https://opalopc.com/docs/plugin-10010/"
},
{
"id": "10011",
"name": "Provided credentials",
"defaultConfiguration": {
"level": "note",
"rank": 0.0
},
"helpUri": "https://opalopc.com/docs/plugin-10011/"
},
{
"id": "10003",
"name": "Common credentials in use",
"defaultConfiguration": {
"level": "error",
"rank": 73.0
},
"helpUri": "https://opalopc.com/docs/plugin-10003/"
},
{
"id": "10012",
"name": "Credential brute force successful",
"defaultConfiguration": {
"level": "error",
"rank": 73.0
},
"helpUri": "https://opalopc.com/docs/plugin-10012/"
},
{
"id": "10004",
"name": "RBAC not supported",
"defaultConfiguration": {
"level": "note",
"rank": 0.0
},
"helpUri": "https://opalopc.com/docs/plugin-10004/"
},
{
"id": "10002",
"name": "Auditing disabled",
"defaultConfiguration": {
"level": "error",
"rank": 50.0
},
"helpUri": "https://opalopc.com/docs/plugin-10002/"
},
{
"id": "10013",
"name": "ServerStatus",
"defaultConfiguration": {
"level": "note",
"rank": 0.0
},
"helpUri": "https://opalopc.com/docs/plugin-10013/"
},
{
"id": "10014",
"name": "Server certificate is invalid",
"defaultConfiguration": {
"level": "error",
"rank": 37.0
},
"helpUri": "https://opalopc.com/docs/plugin-10014/"
},
{
"id": "10015",
"name": "Server Certificate",
"defaultConfiguration": {
"level": "note",
"rank": 0.0
},
"helpUri": "https://opalopc.com/docs/plugin-10015/"
},
{
"id": "10016",
"name": "Self-signed client user certificates trusted",
"defaultConfiguration": {
"level": "error",
"rank": 54.0
},
"helpUri": "https://opalopc.com/docs/plugin-10016/"
},
{
"id": "10017",
"name": "ServerStatus",
"defaultConfiguration": {
"level": "note",
"rank": 0.0
},
"helpUri": "https://opalopc.com/docs/plugin-10017/"
},
{
"id": "-1",
"name": "Error",
"defaultConfiguration": {
"rank": 0.0
}
}
]
}
},
"invocations": [
{
"commandLine": "C:\\opalopc.exe opc.tcp://echo:53530 -vv",
"startTimeUtc": "2024-03-10T11:34:06.796Z",
"endTimeUtc": "2024-03-10T11:34:15.287Z",
"executionSuccessful": true
}
],
"artifacts": [
{
"description": {
"text": "Endpoint of SimulationServer@echo"
},
"location": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
},
"roles": [
"analysisTarget"
]
},
{
"description": {
"text": "Endpoint of SimulationServer@echo"
},
"location": {
"uri": "opc.https://echo:53443/OPCUA/SimulationServer"
},
"roles": [
"analysisTarget"
]
}
],
"results": [
{
"ruleId": "10001",
"ruleIndex": 5,
"level": "error",
"message": {
"text": "Anonymous authentication enabled"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 73.0
},
{
"ruleId": "10006",
"ruleIndex": 1,
"level": "error",
"message": {
"text": "Message Security Mode None"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 65.0
},
{
"ruleId": "10009",
"ruleIndex": 4,
"level": "error",
"message": {
"text": "Security Policy None"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 54.0
},
{
"ruleId": "10016",
"ruleIndex": 15,
"level": "error",
"message": {
"text": "Self-signed client user certificates trusted"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 54.0
},
{
"ruleId": "10010",
"ruleIndex": 6,
"level": "error",
"message": {
"text": "Self-signed client application certificates trusted"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 54.0
},
{
"ruleId": "10002",
"ruleIndex": 11,
"level": "error",
"message": {
"text": "Auditing disabled"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 50.0
},
{
"ruleId": "10007",
"ruleIndex": 2,
"level": "error",
"message": {
"text": "Deprecated Security Policy Basic128Rsa15"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 48.0
},
{
"ruleId": "10008",
"ruleIndex": 3,
"level": "error",
"message": {
"text": "Deprecated Security Policy Basic256"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 48.0
},
{
"ruleId": "10014",
"ruleIndex": 13,
"level": "error",
"message": {
"text": "Server certificate is invalid: certificate is not trusted"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 37.0
},
{
"ruleId": "10015",
"ruleIndex": 14,
"level": "note",
"message": {
"text": "Server Certificates: [\r\n {\r\n \"Subject\": \"DC=echo, O=Prosys OPC, CN=SimulationServer@echo\",\r\n \"SubjectName\": \"DC=echo, O=Prosys OPC, CN=SimulationServer@echo\",\r\n \"Issuer\": \"DC=echo, O=Prosys OPC, CN=SimulationServer@echo\",\r\n \"IssuerName\": \"DC=echo, O=Prosys OPC, CN=SimulationServer@echo\",\r\n \"NotBefore\": \"2023-04-03T14:49:56+03:00\",\r\n \"NotAfter\": \"2033-03-31T15:49:56+03:00\",\r\n \"SerialNumber\": \"0187472ABD7D\",\r\n \"Thumbprint\": \"7FEB85640D64D11F0915E11BEF44ECEB292EC5F6\"\r\n }\r\n]"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 0.0
},
{
"ruleId": "10004",
"ruleIndex": 10,
"level": "note",
"message": {
"text": "RBAC not supported"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 0.0
},
{
"ruleId": "10013",
"ruleIndex": 12,
"level": "note",
"message": {
"text": "ServerStatus: {\r\n \"SoftwareVersion\": \"5.4.6\",\r\n \"BuildNumber\": \"148\",\r\n \"BuildDate\": \"1970-01-01T00:00:00Z\",\r\n \"ManufacturerName\": \"Prosys OPC Ltd.\",\r\n \"ProductName\": \"SimulationServer@echo\",\r\n \"ProductUri\": \"urn:prosysopc.com:OPCUA:SimulationServer\",\r\n \"CurrentTime\": \"2024-03-10T11:34:09.064Z\",\r\n \"StartTime\": \"2023-12-27T17:59:20.646Z\",\r\n \"State\": \"Running\",\r\n \"SecondsTillShutdown\": 0,\r\n \"ShutdownReason\": \"\"\r\n}"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.tcp://echo:53530/OPCUA/SimulationServer"
}
}
}
],
"rank": 0.0
},
{
"ruleId": "-1",
"ruleIndex": 17,
"message": {
"text": "Https is not supported: opc.https://172.16.1.8:53443/OPCUA/SimulationServer"
},
"locations": [
{
"physicalLocation": {
"artifactLocation": {
"uri": "opc.https://echo:53443/OPCUA/SimulationServer"
}
}
}
],
"rank": 0.0
}
],
"columnKind": "utf16CodeUnits"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment