Versions (4)
Version DetailsCurrent
Rev: 3 • Sep 26, 2024, 12:00 PMET INFO Observed UDP cups-browsed Add Printer Packet Inbound (HTTP)
alert udp any any -> [$HOME_NET,$HTTP_SERVERS] 631 (msg:"ET INFO Observed UDP cups-browsed Add Printer Packet Inbound (HTTP)"; content:"|20|"; within:3; content:"|20|http"; distance:1; within:8; fast_pattern; pcre:"/^(?:[A-Fa-f0-9]{1,2}\x20){2}https?\x3a\x2f\x2f/"; reference:cve,2024-47176; classtype:misc-activity; sid:2056210; rev:3; metadata:created_at 2024_09_26, cve CVE_2024_47176, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_09_27; target:dest_ip;)
Sep 26, 2024, 12:00 PM
Sep 27, 2024, 12:00 PM
Sep 26, 2024, 11:00 PM
Jul 23, 2025, 8:34 PM
rules/emerging-info.rules