Cisco switches indentified as cpe:/o:unraid:unraid

Hello,

we noticed lately an issue with the “OS Detection Consolidation and Reporting” Cisco switches are indentified as cpe:/o:unraid:unraid
And a general issue with Dell Switches also indentified as cpe:/o:unraid:unraid

NVT feed is up to date and we did not touched the Scan Config (full and fast) between the 15.01 and 22.01, so my guess would be its NVT related ?

Jan 15, 2026

SNMP Information Detection and Reporting

Detection Result

The following SNMP information was extracted from the remote device:

  System Description (OID: 1.3.6.1.2.1.1.1.0) :            Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(55)SE12, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 28-Sep-17 02:04 by prod_rel_team
  System Name (OID: 1.3.6.1.2.1.1.5.0) :                   retracted
  System Location (OID: 1.3.6.1.2.1.1.6.0) :                   retracted
  System ObjectID (OID: 1.3.6.1.2.1.1.2.0) :               iso.3.6.1.4.1.9.1.615

OS Detection Consolidation and Reporting

Detection Result

Best matching OS:

OS:           Cisco IOS
CPE:          cpe:/o:cisco:ios:12.2(55)SE12
Found by VT:  1.3.6.1.4.1.25623.1.0.96206 (Report Cisco IOS Software Version)
Concluded from SNMP
Setting key "Host/runs_unixoide" based on this information

Other OS detections (in order of reliability):

OS:           Unraid OS
CPE:          cpe:/o:unraid:unraid
Found by VT:  1.3.6.1.4.1.25623.1.0.153874 (Unraid OS Detection Consolidation)

OS:           Cisco IOS
CPE:          cpe:/o:cisco:ios
Found by VT:  1.3.6.1.4.1.25623.1.0.105586 (Operating System (OS) Detection (SSH Banner))
Concluded from SSH banner on port 22/tcp: SSH-2.0-Cisco-1.25

OS:           Cisco IOS 12.2(55)SE12
Version:      12.2(55)SE12
CPE:          cpe:/o:cisco:ios:12.2(55)se12
Found by VT:  1.3.6.1.4.1.25623.1.0.103429 (Operating System (OS) Detection (SNMP))
Concluded from SNMP sysDescr on port 161/udp: Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(55)SE12, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 28-Sep-17 02:04 by prod_rel_team

OS:           Cisco IOS
CPE:          cpe:/o:cisco:ios
Found by VT:  1.3.6.1.4.1.25623.1.0.108590 (Operating System (OS) Detection (NTP))
Concluded from NTP Server banner on port 123/udp: cisco

Cisco IOS Detection Consolidation:

Summary

Consolidation of Cisco IOS detections.

Detection Result

Detected Cisco IOS
Version: 12.2(55)SE12
CPE: cpe:/o:cisco:ios:12.2(55)SE12
Detection source: snmp

Jan 22, 2026
SNMP Information Detection and Reporting

Detection Result

The following SNMP information was extracted from the remote device:

  System Description (OID: 1.3.6.1.2.1.1.1.0) :            Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(55)SE12, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 28-Sep-17 02:04 by prod_rel_team
  System Name (OID: 1.3.6.1.2.1.1.5.0) :                   retracted
  System Location (OID: 1.3.6.1.2.1.1.6.0) :                   retracted
  System ObjectID (OID: 1.3.6.1.2.1.1.2.0) :               iso.3.6.1.4.1.9.1.615

OS Detection Consolidation and Reporting

Detection Result

Best matching OS:

OS:           Unraid OS
CPE:          cpe:/o:unraid:unraid
Found by VT:  1.3.6.1.4.1.25623.1.0.153874 (Unraid OS Detection Consolidation)
Setting key "Host/runs_unixoide" based on this information

Other OS detections (in order of reliability):

OS:           Cisco IOS
CPE:          cpe:/o:cisco:ios
Found by VT:  1.3.6.1.4.1.25623.1.0.105586 (Operating System (OS) Detection (SSH Banner))
Concluded from SSH banner on port 22/tcp: SSH-2.0-Cisco-1.25

OS:           Cisco IOS Software
CPE:          cpe:/o:cisco:ios
Found by VT:  1.3.6.1.4.1.25623.1.0.103429 (Operating System (OS) Detection (SNMP))
Concluded from SNMP sysDescr on port 161/udp: Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(55)SE12, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 28-Sep-17 02:04 by prod_rel_team

OS:           Cisco IOS
CPE:          cpe:/o:cisco:ios
Found by VT:  1.3.6.1.4.1.25623.1.0.108590 (Operating System (OS) Detection (NTP))
Concluded from NTP Server banner on port 123/udp: cisco

Cisco IOS Detection Consolidation

Not executed.

Dell Switches:

Detection Result

Best matching OS:

OS:           Unraid OS
CPE:          cpe:/o:unraid:unraid
Found by VT:  1.3.6.1.4.1.25623.1.0.153874 (Unraid OS Detection Consolidation)
Setting key "Host/runs_unixoide" based on this information

Other OS detections (in order of reliability):

OS:           Dell EMC SmartFabric OS10
CPE:          cpe:/o:dell:emc_networking_os10
Found by VT:  1.3.6.1.4.1.25623.1.0.103429 (Operating System (OS) Detection (SNMP))
Concluded from SNMP sysDescr on port 161/udp: Dell EMC Networking OS10 Enterprise.
Copyright (c) 1999-2023 by Dell Inc. All Rights Reserved.
System Description: OS10 Enterprise.
OS Version: 10.5.4.7.
System Type: S5248F-ON

SNMP Information Detection and Reporting:
The following SNMP information was extracted from the remote device:

System Description (OID: 1.3.6.1.2.1.1.1.0) : Dell EMC Networking OS10 Enterprise.
Copyright (c) 1999-2023 by Dell Inc. All Rights Reserved.
System Description: OS10 Enterprise.
OS Version: 10.5.4.7.
System Type: S5248F-ON
System Name (OID: 1.3.6.1.2.1.1.5.0) : retracted
System Location (OID: 1.3.6.1.2.1.1.6.0) : retracted
System ObjectID (OID: 1.3.6.1.2.1.1.2.0) : iso.3.6.1.4.1.674.11000.5000.100.2.1.21
Physical Vendor Type (OID: 1.3.6.1.2.1.47.1.1.1.1.3.1) : ccitt.0.0
Physical Name (OID: 1.3.6.1.2.1.47.1.1.1.1.7.1) : Stack

Hi,

Do you have an Unraid device on the same scanned IP? And is that Unraid detection correct? Asking as I want to rule out some other possible problems.

Thanks,

Christian

Hi Christian,
nope, no unraid at all in the network.

Hardzen

1 Like

Thanks for the info. The Unraid detection has been updated now and the changes should arrive in one of the next feed updates. This should solve the wrong OS detection.

Christian

3 Likes

Thanks!
I can confirm that the DELL Switches now detected corectly → cpe:/o:dell:emc_networking_os10

unraid disappeared

Cisco is still different.

ls -al ./data/nvt-feed/os_func.inc
-rw-r–r-- 1 root root 125597 Feb 16 11:24 ./data/nvt-feed/os_func.inc

grep “1.3.6.1.4.1.25623.1.0.96206” ./data/nvt-feed/os_func.inc
“1.3.6.1.4.1.25623.1.0.96206”, # gb_cisco_ios_consolidation.nasll <<< Line 356 i guess this is a typo ?
“1.3.6.1.4.1.25623.1.0.96206”, # gb_cisco_ios_consolidation.nasl

in scans from the 15.01 i can see Cisco IOS Detection Consolidation was executed

Hi,

Most similar devices that you’re looking for are only included in our Enterprise feed (including Basic). You can find our listings and comparisons here: https://www.greenbone.net/en/testnow/