ET EXPLOIT Possible Linksys WAP54Gv3 Remote Debug Root Shell Exploitation Attempt
Sourceet/open
CreatedMarch 18, 2019
UpdatedSeptember 16, 2020
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT Possible Linksys WAP54Gv3 Remote Debug Root Shell Exploitation Attempt"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/debug.cgi"; depth:10; endswith; http.request_body; content:"data1=|3b|"; depth:7; fast_pattern; content:"&command="; distance:0; reference:url,seclists.org/bugtraq/2010/Jun/93; classtype:attempted-user; sid:2027095; rev:3; metadata:attack_target Networking_Equipment, created_at 2019_03_18, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, updated_at 2020_09_16;)
References
Metadata
attack targetNetworking_Equipment
created at2019_03_18
deploymentPerimeter
performance impactLow
confidenceMedium
signature severityMajor
updated at2020_09_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!