ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery
Sourceet/open
CreatedApril 28, 2015
UpdatedSeptember 30, 2020
Classificationattempted-admin
alert http any any -> $HOME_NET any (msg:"ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery"; flow:to_server,established; threshold:type both, track by_dst, count 10, seconds 60; http.method; content:"POST"; http.uri; content:"/apply_noauth.cgi"; fast_pattern; http.request_body; content:"timestamp="; reference:url,seclists.org/fulldisclosure/2015/Apr/72; classtype:attempted-admin; sid:2021018; rev:4; metadata:created_at 2015_04_28, confidence Medium, signature_severity Major, updated_at 2020_09_30;)
References
Metadata
created at2015_04_28
confidenceMedium
signature severityMajor
updated at2020_09_30
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!