ET WEB_CLIENT Possible CVE-2014-4113 Exploit Download with Hurricane Panda IOC
Sourceet/open
CreatedOctober 15, 2014
UpdatedOctober 8, 2019
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Possible CVE-2014-4113 Exploit Download with Hurricane Panda IOC"; flow:to_client,established; flowbits:isset,ET.http.binary; file_data; content:"woqunimalegebi"; fast_pattern; reference:url,blog.crowdstrike.com/crowdstrike-discovers-use-64-bit-zero-day-privilege-escalation-exploit-cve-2014-4113-hurricane-panda/; reference:cve,2014-4113; classtype:attempted-user; sid:2019421; rev:3; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_Endpoint, created_at 2014_10_15, cve CVE_2014_4113, deployment Perimeter, confidence Medium, signature_severity Major, tag Web_Client_Attacks, tag CISA_KEV, updated_at 2019_10_08;)
References
Metadata
affected productWeb_Browser_Plugins
attack targetClient_Endpoint
created at2014_10_15
deploymentPerimeter
confidenceMedium
signature severityMajor
tagCISA_KEV
updated at2019_10_08
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!