September 22, 2025
10 months ago
Summary
- Free users now have access to Platform lookup API endpoints..
- Two new risk fingerprints for ASM.
- One new fingerprint for atvremote servers.
Platform
API
- Platform lookup API endpoints may now be used by Free users.
-
Lookup endpoints cost 1 credit per asset retrieved, which is the same cost to look up assets in the Platform web UI.
-
Free users can create Personal Access Tokens in the Platform web UI to execute API calls.
-
The lookup endpoints no longer require an organization ID to be executed.
- If you have access to a Starter or Enterprise organization ID and do not include it in your lookup API call, then the cost is deducted from your Free credit balance. Additionally, the endpoint will only return data that is available to Free users.
-
Free users have access to the following API endpoints:
-
New fingerprints
Added the following fingerprints.
| Type | Name | Description | Query |
|---|---|---|---|
| risk | GoAnywhere MFT Deserialization Vulnerability [CVE-2025-10035] | This service is running a version of GoAnywhere Managed File Transfer software vulnerable to a deserialization vulnerability that could lead to remote code execution. | ASM risk query: |
| risk | Exposed atvremote Device | This device is running atvremote, a tool used to control TV devices over the network. It communicates with services such as AirPlay, Media Remote Protocol (MRP), and Companion API, which are designed for local network use only and should not be exposed to the public internet. If left accessible, attackers could gain unauthorized control of the TV or compromise the device as part of a botnet. | ASM risk query: |
| software | atvremote | This is an atvremote server. | Platform query |