Enumerating Ethernet/IP devices
Ethernet/IP is a very popular protocol used in industrial systems that use Ethernet as the transport layer and the Common Industrial Protocol (CIP) to provide services and profiles needed for the applications. Ethernet/IP devices by several vendors usually operate on UDP port 44818
, and we can gather information such as vendor name, product name, serial number, device type, product code, internal IP address, and version.
This recipe shows you how to enumerate Ethernet/IP devices with Nmap.
How to do it...
Open your terminal and enter the following Nmap command:
$ nmap -Pn -sU -p44818 --script enip-info <target>
The enip-info
script will obtain device information as shown next:
PORT STATE SERVICE 44818/udp open EtherNet-IP-2 | enip-info: | Vendor: Rockwell Automation/Allen-Bradley (1) | Product Name: PanelViewPlus_6 1500 | Serial Number: 0x00123456...