ET EXPLOIT Possible NSDP (Netgear) Write Command Buffer Overflow Attempt - 0x000a (CVE-2020-35225) - Suricata Rule 2031945 (et/open)

ET EXPLOIT Possible NSDP (Netgear) Write Command Buffer Overflow Attempt - 0x000a (CVE-2020-35225)

SID: 2031945Rev: 10 viewsHistory

Sourceet/open

CreatedMarch 11, 2021

UpdatedMarch 11, 2021

Classificationattempted-admin

alert udp $HOME_NET any -> any 60000: (msg:"ET EXPLOIT Possible NSDP (Netgear) Write Command Buffer Overflow Attempt - 0x000a (CVE-2020-35225)"; content:"|00 1a 00|"; startswith; content:"|00 0a|"; content:"|ff|"; distance:1; within:1; content:"|ff ff 00 00|"; endswith; fast_pattern; reference:url,research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/; reference:cve,2020-35226; classtype:attempted-admin; sid:2031945; rev:1; metadata:attack_target Networking_Equipment, created_at 2021_03_11, cve CVE_2020_35225, deployment Perimeter, deployment Internal, confidence Low, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_03_11;)

References

url	research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
cve	2020-35226

Metadata

attack targetNetworking_Equipment

created at2021_03_11

cveCVE-2020-35225

deploymentInternal

confidenceLow

signature severityMajor

tagDescription_Generated_By_Proofpoint_Nexus

updated at2021_03_11

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!