ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery

7.0.35.0SID: 2021018Rev: 5Enabled0 views
Sourceet/open
Fileemerging-exploit.rules
CreatedApril 28, 2015
UpdatedMarch 6, 2024
Classificationattempted-admin
alert http any any -> $HOME_NET any (msg:"ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery"; flow:established,to_server; threshold:type both, track by_dst, count 10, seconds 60; http.method; content:"POST"; http.uri; content:"/apply_noauth.cgi"; fast_pattern; http.request_body; content:"timestamp="; reference:url,seclists.org/fulldisclosure/2015/Apr/72; classtype:attempted-admin; sid:2021018; rev:5; metadata:created_at 2015_04_28, confidence Medium, signature_severity Major, updated_at 2024_03_06;)

References

urlseclists.org/fulldisclosure/2015/Apr/72

Metadata

created at2015_04_28
confidenceMedium
signature severityMajor
updated at2024_03_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!