Background#
During a vulnerability scan at a customer site, the scanner reported a weak certificate issue on port 8443/tcp of a NetGear M4300. After some research, I found that 8443/tcp is the REST API feature of the NetGear M4300. (What?! A switch has an API feature? I had no idea! XD) Since the customer does not use the API at all, we decided to simply turn off the feature, instead of fixing the weak certificate itself.
How to disable it#
Before turning it off, we ran an nmap scan to confirm that 8443/tcp was indeed open.
With the command below, we can see the running applications are ConfigAgent & Discovery Agent.
show applicationIn config mode, use the command below to remove ConfigAgent.
no application install ConfigAgent
After running nmap again, 8443/tcp no longer shows up. The API feature is now disabled.
