id: aveva-intouch-access-anywhere-panel

info:
  name: AVEVA InTouch Access Anywhere - Panel
  author: rxerium
  severity: info
  description: |
    AVEVA InTouch Access Anywhere is a secure gateway that provides browser-based
    remote access to InTouch HMI applications over the internet. It is widely used in
    industrial process control, utilities, and manufacturing environments. Exposed
    instances may provide access to industrial HMI displays and SCADA interfaces.
  reference:
    - https://www.aveva.com/en/products/intouch-hmi/
    - https://www.aveva.com/en/products/intouch-access-anywhere/
  metadata:
    max-request: 1
    verified: true
    vendor: AVEVA
    product: aveva-intouch-access-anywhere
    shodan-query: 'http.html:"InTouch Access Anywhere"'
  tags: panel,ics,scada,aveva,intouch,hmi,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/AccessAnywhere/start.html"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'InTouch'
          - 'Access Anywhere'
          - 'AccessAnywhere'
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a0047304502210093bf81e88fad1e5764f3ddc247dacb9b47c6cae56a2dc8d5bdda1ad2c75b0fd602204d033ba8f1e9cb3f79f867be30031f334e59e121abe339608a7b793e34e8b639:922c64590222798bb761d5b6d8e72950