Nmap omron-info NSE Script

Script Overview

Script source code: https://github.com/nmap/nmap/tree/master/scripts/omron-info.nse
Script categories: discovery, version
Target service / protocol: fins, tcp, udp
Target network port(s): 9600
List of CVEs: -

Script Description

The omron-info.nse script is used to send a FINS packet to a remote device. The script will send a Controller Data Read Command and once a response is received, it validates that it was a proper response to the command that was sent, and then will parse out the data.

Omron-info NSE Script Arguments

The omron-info.nse script does not have any arguments.

Omron-info NSE Script Example Usage

Here's an example of how to use the omron-info.nse script:

nmap --script omron-info -sU -p 9600 <host>

Omron-info NSE Script Example Output

Here's a sample output from the omron-info.nse script:

9600/tcp open  OMRON FINS
| omron-info:
|   Controller Model: CJ2M-CPU32          02.01
|   Controller Version: 02.01
|   For System Use:
|   Program Area Size: 20
|   IOM size: 23
|   No. DM Words: 32768
|   Timer/Counter: 8
|   Expansion DM Size: 1
|   No. of steps/transitions: 0
|   Kind of Memory Card: 0
|_  Memory Card Size: 0

Omron-info NSE Script Example XML Output

Here's a sample XML output from the omron-info.nse script produced by providing the -oX <file> Nmap option:

 <elem key="Controller Model">CS1G_CPU44H         03.00</elem>
 <elem key="Controller Version">03.00</elem>
 <elem key="For System Use"></elem>
 <elem key="Program Area Size">20</elem>
 <elem key="IOM size">23</elem>
 <elem key="No. DM Words">32768</elem>
 <elem key="Timer/Counter">8</elem>
 <elem key="Expansion DM Size">1</elem>
 <elem key="No. of steps/transitions">0</elem>
 <elem key="Kind of Memory Card">0</elem>
 <elem key="Memory Card Size">0</elem>

Author

• Stephen Hilt (Digital Bond)

References

• https://nmap.org/nsedoc/scripts/omron-info.html
• https://github.com/nmap/nmap/tree/master/scripts/omron-info.nse

See Also

Visit Nmap NSE Library for more scripts.

The omron-info.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

Data cannot be changed (0x2108)

Here is a relevant code snippet related to the "Data cannot be changed (0x2108)" error message:

159:	  if(header == 0xc0 or header == 0xc1 or header == 0x46) then
160:	    set_nmap(host, port)
161:	    local response_code = string.unpack("<I2", response, 13 + offset)
162:	    -- test for a few of the error codes I saw when testing the script
163:	    if(response_code == 2081) then
164:	      output["Response Code"] = "Data cannot be changed (0x2108)"
165:	    elseif(response_code == 290) then
166:	      output["Response Code"] = "The mode is wrong (executing) (0x2201)"
167:	      -- if a successful response code then
168:	    elseif(response_code == 0) then
169:	      -- parse information from response