ET EXPLOIT SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution

SID: 2025835Rev: 34 views
History
Sourceet/open
CreatedJuly 12, 2018
UpdatedAugust 25, 2020
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET EXPLOIT SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution"; flow:established,to_server; http.uri; content:"/init.do?"; content:"java.util"; content:"Runtime.getRuntime().exec"; fast_pattern; content:"cmd"; reference:url,exploit-db.com/exploits/44292/; reference:cve,2018-2380; classtype:attempted-user; sid:2025835; rev:3; metadata:attack_target Web_Server, created_at 2018_07_12, cve CVE_2018_2380, deployment Datacenter, performance_impact Low, confidence Medium, signature_severity Major, updated_at 2020_08_25;)

References

urlexploit-db.com/exploits/44292/
cve2018-2380

Metadata

attack targetWeb_Server
created at2018_07_12
deploymentDatacenter
performance impactLow
confidenceMedium
signature severityMajor
updated at2020_08_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!