Port 2048 Details
known port assignments and vulnerabilities
threat/application/port search:
Port(s) |
Protocol |
Service |
Details |
Source |
2048 |
udp |
applications |
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
References: [CVE-1999-1175]
Port is IANA registered for dls-monitor |
SG
|
2048 |
tcp |
malware |
Backdoor.Win32.Zxman / Missing Authentication - Backdoor.Win32.Zxman by Zx-man listens on TCP port 2048 for commands. However, anyone who can reach the infected host can take control as there is no authentication in place. Not much of a self-respecting backdoor. Third party intruders or incident responders who logon will be greeted with a welcome screen and help menu allowing for a wide-range of commands.
References: [MVID-2021-0041]
Backdoor.Win32.Zxman / Unauthenticated Remote Code Execution - the malware by "Zx-man" listens on TCP port 2048. Third-party attackers who can reach an infected system can run commands made available by the backdoor.
References: [MVID-2022-0478] |
SG
|
1971,2047,2048 |
udp |
applications |
Camerades |
Portforward
|
2047,2048 |
tcp |
applications |
Camerades |
Portforward
|
2048 |
tcp,udp |
dls-monitor |
dls-monitor |
Nmap
|
2048 |
tcp |
threat |
Some Shiva/Spider Integrator routers listen on this port for a Telnet connection for configuration. |
Bekkoame
|
|
6 records found
|