Guest

Preview Tool

Cisco Bug: CSCuw32185 - OS Fingerprint Falsely Detecting Blackberry OS

Last Modified

Aug 09, 2016

Products (1)

  • Cisco Firepower Management Center

Known Affected Releases

Zappa

Description (partial)

Symptom:
- "Host Profile" shows OS detected "RIM Blackberry" either as the only OS or with a 50% probability with Windows OS while the real OS is Windows.
- No "New OS" events for the "RIM Blackberry" OS seen in the "Discovery Events". Only Windows "New OS" events.

Conditions:
- Appears to affect baseline DC 5.4.1.1 and sensor 5.4.0.x (Virtual, ASA,...).
- Running standard "Network Discovery" policy with the Action "Discover": Applications, Hosts and Users, monitoring their internal network(s).
- Removing the "Host Profile" and monitoring the "Discovery Event" for the related host(s) will show that the first OS detected is Windows and after a couple of minutes it changes to Blackberry.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.