id: schneider-tac-vista-panel

info:
  name: Schneider TAC Vista - Login Panel
  author: rxerium
  severity: info
  description: |
    Schneider TAC Vista building automation panel has been detected.
  reference:
    - https://www.se.com/
  metadata:
    max-request: 2
    verified: true
    vendor: Schneider Electric
    product: tac-vista
    shodan-query: 'http.title:"TAC Vista"'
  tags: panel,schneider,tac,vista,ics,bms,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/webstation/"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'TAC Vista'
          - 'Webstation'
          - 'schneider-electric.com'
        condition: or

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100f2d7cfe4461d7861e79fd72827e7d665c3d1050271d93372d3cfea810e1a6d4e022100c1e1487c8e317f7d8a1f4b57390a3a0f9ecb7b433d03231ecee8935d86b42e16:922c64590222798bb761d5b6d8e72950