ET EXPLOIT Tenda ADSL2/2+ Router DNS Change GET Request

7.0.35.0SID: 2020876Rev: 5Enabled1 views
Sourceet/open
Fileemerging-exploit.rules
CreatedApril 9, 2015
UpdatedMarch 6, 2024
Classificationattempted-admin
alert http any any -> $HOME_NET any (msg:"ET EXPLOIT Tenda ADSL2/2+ Router DNS Change GET Request"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/apply.cgi?wan_primary_dns="; fast_pattern; content:"&wan_secondary_dns="; reference:url,malwr.com/analysis/MGY1ZDFhYjE1MzQ4NDAwM2EyZTI5YmY3MWZjMWE5OGM; classtype:attempted-admin; sid:2020876; rev:5; metadata:created_at 2015_04_09, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_06;)

References

urlmalwr.com/analysis/MGY1ZDFhYjE1MzQ4NDAwM2EyZTI5YmY3MWZjMWE5OGM

Metadata

created at2015_04_09
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!