ET EXPLOIT Possible ZyXELs ZynOS Configuration Download Attempt (Contains Passwords)
Sourceet/open
CreatedMarch 8, 2014
UpdatedAugust 18, 2020
Classificationattempted-admin
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT Possible ZyXELs ZynOS Configuration Download Attempt (Contains Passwords)"; flow:established,to_server; urilen:6; http.uri; content:"/rom-0"; nocase; reference:url,www.team-cymru.com/ReadingRoom/Whitepapers/2013/TeamCymruSOHOPharming.pdf; classtype:attempted-admin; sid:2018232; rev:4; metadata:created_at 2014_03_08, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_08_18;)
Metadata
created at2014_03_08
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2020_08_18
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!