🐾 - 🚨 Connection to Zyxel UTM 🧱 ATP 500 with default TLS Certificate 🔒 exposed on Internet - Suricata Rule 3300264 (pawpatrules)

🐾 - 🚨 Connection to Zyxel UTM 🧱 ATP 500 with default TLS Certificate 🔒 exposed on Internet

SID: 3300264Rev: 30 views

Sourcepawpatrules

CreatedMay 20, 2022

UpdatedOctober 15, 2022

Classificationpolicy-violation

alert tls $EXTERNAL_NET any -> any any (msg:"🐾 - 🚨 Connection to Zyxel UTM 🧱 ATP 500 with default TLS Certificate 🔒 exposed on Internet"; flow:to_client, stateless; tls.cert_subject; content:"CN=atp500_"; nocase; reference:url,https://www.zyxel.com/fr/fr/products_services/ATP-Firewall-ZyWALL-ATP500/; metadata:created_at 2022_05_20, updated_at 2022_10_15; sid:3300264; rev:3; classtype:policy-violation;)

References

url	https://www.zyxel.com/fr/fr/products_services/ATP-Firewall-ZyWALL-ATP500/

🐾 - 🚨 Connection to Zyxel UTM 🧱 ATP 500 with default TLS Certificate 🔒 exposed on Internet

References

Metadata

Comments (0)