Script iec61850-mms

Script types: portrule
Categories: discovery, intrusive, version
Download: https://svn.nmap.org/nmap/scripts/iec61850-mms.nse

Script Summary

Queries a IEC 61850-8-1 MMS server. Sends Initate-Request, Identify-Request and Read-Request to LN0 and LPHD.

Output contains following attributes:

  • modelName_identify: Identify-Response attribute model_name
  • vendorName_identify: Identify-Response attribute vendor_name
  • modelNumber_identify: Identify-Response attribute revision
  • productFamily: Read-Response attribute 'LLN0$DC$NamPlt$d'
  • configuration: Read-Response attribute 'LLN0$DC$NamPlt$configRev'
  • vendorName: Read-Response attribute 'LPHD$DC$PhyNam$vendor' (old: 'LLN0$DC$NamPlt$vendor')
  • serialNumber: Read-Response attribute 'LPHD$DC$PhyNam$serNum'
  • modelNumber: Read-Response attribute 'LPHD$DC$PhyNam$model'
  • firmwareVersion: Read-Response attribute 'LPHD$DC$PhyNam$swRev' (old: 'LLN0$DC$NamPlt$swRev')

Example Usage

nmap --script iec61850-mms.nse -p 102 <target>

Requires

Author:

  • Dennis Rösch, Max Helbig

License: Same as Nmap--See https://nmap.org/book/man-legal.html