Rule History

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download"; flow:established,to_server; http.uri; content:"/download.sh?script=/cgi-bin/"; content:"/system-editor.sh&path=/etc/"; fast_pattern; reference:url,exploit-db.com/exploits/45036/; classtype:attempted-recon; sid:2025845; rev:2; metadata:attack_target Server, created_at 2018_07_17, deployment Datacenter, confidence High, signature_severity Major, updated_at 2020_08_25;)