Rule History

SID: 2027770 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 2 • Aug 1, 2019, 12:00 PM

Message:

ET EXPLOIT Possible VXWORKS Urgent11 RCE Attempt - Illegal Urgent Flag

Rule:

alert tcp any any -> any any (msg:"ET EXPLOIT Possible VXWORKS Urgent11 RCE Attempt - Illegal Urgent Flag"; flags:SUF+; reference:url,armis.com/urgent11; reference:cve,2019-12255; reference:cve,2019-12260; reference:cve,2019-12261; reference:cve,2019-12263; classtype:attempted-admin; sid:2027770; rev:2; metadata:attack_target Client_Endpoint, created_at 2019_08_01, deployment Perimeter, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_08_01;)

Created:

Aug 1, 2019, 12:00 PM

Updated:

Aug 1, 2019, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

Sep 23, 2025, 9:34 PM

Filename:

rules/emerging-exploit.rules