VC-2316 Improved regex that detect both vendors name

rapid7 · Jun 13, 2024 · d19ad50 · d19ad50
1 parent 1571f7c
commit d19ad50
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
@@ -3586,10 +3586,12 @@ Copyright (c) 1995-2005 by Cisco Systems
                             Ivanti (Pulse Secure)
    =======================================================================-->
 
-  <fingerprint pattern="^Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,(\d+\.\d+R\d+(?:\.\d+)?) \(build .*\)$">
+  <fingerprint pattern="^(?:Pulse Secure, LLC|Ivanti Connect Secure),.*,(\d+\.\d+R\d+(?:\.\d+)?) \(build \d+\)$">
     <description>Pulse Secure, LLC, Ivanti Connect Secure</description>
     <example os.version="22.3R1">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R1 (build 1647)</example>
     <example os.version="22.3R2.1245">Pulse Secure, LLC,Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
+    <example os.version="22.3R1">Pulse Secure, LLC,ISA-V,22.3R1 (build 1647)</example>
+    <example os.version="22.3R2.1245">Ivanti Connect Secure,ISA-V,22.3R2.1245 (build 1647)</example>
     <param pos="0" name="os.certainty" value="0.99"/>
     <param pos="0" name="os.vendor" value="Pulse Secure"/>
     <param pos="0" name="os.product" value="Pulse Connect Secure"/>