From 1d2d0e01aaff050fa496ef16a9dfbcb01fe7ee35 Mon Sep 17 00:00:00 2001
From: Anastassiya Torovik <anastassiya_torovik@rapid7.com>
Date: Wed, 18 Sep 2024 12:16:11 +0200
Subject: [PATCH] Make regex more precise for Cisco CE snmp fingerprinter

---
 xml/snmp_sysdescr.xml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index dff63fd8..f9d985ea 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -1564,17 +1564,21 @@
     <param pos="2" name="hw.product"/>
   </fingerprint>
 
-  <fingerprint pattern="^(ce\d+\S*)$">
-    <description>Cisco/Tandberg TelePresence</description>
-    <example os.version="ce9.15.0.d97b604b745">ce9.15.0.d97b604b745</example>
+  <fingerprint pattern="SoftW:\s+(ce\d+\S*)$$">
+    <description>Cisco TelePresence Collaboration Endpoint (RoomOS)</description>
+    <example os.version="ce9.15.0.d97b604b745">SNMP:
+  Uptime: 840410
+  Description: Cisco Codec
+SoftW: ce9.15.0.11.aec227943ed
+MCU: Cisco Webex Room Kit
+Date: 2021-01-28
+S/N: FOC2236NA6V</example>
     <param pos="0" name="os.vendor" value="Cisco"/>
     <param pos="0" name="os.family" value="TelePresence"/>
     <param pos="0" name="os.product" value="Collaboration Endpoint"/>
-    <param pos="0" name="os.device" value="Video Conferencing"/>
     <param pos="1" name="os.version"/>
     <param pos="0" name="hw.vendor" value="Cisco"/>
     <param pos="0" name="hw.family" value="TelePresence"/>
-    <param pos="0" name="hw.device" value="Video Conferencing"/>
   </fingerprint>
   <!-- NEC -->