ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution

7.0.3 5.0SID: 2020899Rev: 6Enabled4 views

Fileemerging-exploit.rules

CreatedApril 13, 2015

UpdatedApril 20, 2024

Classificationattempted-admin

alert http any any -> $HOME_NET any (msg:"ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution"; flow:established,to_server; http.method; content:"POST"; http.request_header; header_lowercase; content:"soapaction|3a|"; startswith; content:"http|3a|//purenetworks.com/HNAP1/"; distance:0; fast_pattern; pcre:"/^(?:[^\x2f]+?[\x2f])?[^\x2f]/R"; reference:url,devttys0.com/2015/04/hacking-the-d-link-dir-890l/; reference:cve,2016-6563; classtype:attempted-admin; sid:2020899; rev:6; metadata:created_at 2015_04_13, cve CVE_2016_6563, confidence Medium, signature_severity Major, updated_at 2024_04_20;)

References

url	devttys0.com/2015/04/hacking-the-d-link-dir-890l/
cve	2016-6563

Metadata

created at2015_04_13

cve

CVE-2016-6563

confidenceMedium

signature severityMajor

updated at2024_04_20

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!