ET WEB_SPECIFIC_APPS MOVEit File Transfer - HTTP POST to /moveitaspi.dll (CVE-2023-34362) - Suricata Rule 2046053 (et/open)

ET WEB_SPECIFIC_APPS MOVEit File Transfer - HTTP POST to /moveitaspi.dll (CVE-2023-34362)

SID: 2046053Rev: 14 viewsHistory

Sourceet/open

CreatedJune 2, 2023

UpdatedJune 2, 2023

Classificationweb-application-activity

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS MOVEit File Transfer - HTTP POST to /moveitaspi.dll (CVE-2023-34362)"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/moveitisapi/moveitisapi.dll"; fast_pattern; content:"action="; reference:url,www.huntress.com/blog/moveit-transfer-critical-vulnerability-rapid-response; reference:url,community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023; reference:cve,2023-34362; classtype:web-application-activity; sid:2046053; rev:1; metadata:attack_target Web_Server, created_at 2023_06_02, cve CVE_2023_34362, deployment Perimeter, deployment SSLDecrypt, performance_impact Low, confidence Low, signature_severity Minor, tag CISA_KEV, updated_at 2023_06_02; target:dest_ip;)

References

url	www.huntress.com/blog/moveit-transfer-critical-vulnerability-rapid-response
url	community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023
cve	2023-34362

Metadata

attack targetWeb_Server

created at2023_06_02

cveCVE-2023-34362

deploymentSSLDecrypt

performance impactLow

confidenceLow

signature severityMinor

tagCISA_KEV

updated at2023_06_02

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!