Forum Discussion

Anonymous's avatar
Anonymous
6 years ago

Tenable Coverage for Ripple20 Vulnerabilities - Treck TCP/IP

Tenable Coverage for Ripple20 Vulnerabilities - Treck TCP/IP Stack Detection The Treck stack has been around for over 20 years and integrated into hundreds of products in many different ways. It is ...
Plugins
Tenable
Tenable Nessus
Tenable.io
Tenable.sc
ronald_zeldman's avatar
ronald_zeldman
6 years ago

Hi Pablo -- is there any way Tenable can provide the logic used by the plugin to determine when the Treck stack is "detected"? The plugin is currently marking a product I'm working on as "stack detected", however I see no reason why it would do that (I've used the JSOF script directly, and none of its tests are coming back as a possible "positive" detection of the Treck stack). Also, the vendor which provides our ethernet stack has told us that the Treck code is not used in their stack.

I have an active Tenable support case on this issue, however they just pointed me to this article. I understand that I am likely seeing a false positive, but I need to understand why its occurring before I'll be satisfied with that conclusion.

Ron

  • Anonymous's avatar
    Anonymous
    6 years ago

    Hi @Ron Zeldman​ 

    Thanks for reaching out. We'll be in contact with you through the support case with an analysis of your specific case.

    Thanks for reaching out