ET EXPLOIT Possible Linksys WAP54Gv3 Remote Debug Root Shell Exploitation Attempt

7.0.35.0SID: 2027095Rev: 4Enabled1 views
Sourceet/open
Fileemerging-exploit.rules
CreatedMarch 18, 2019
UpdatedApril 13, 2024
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT Possible Linksys WAP54Gv3 Remote Debug Root Shell Exploitation Attempt"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/debug.cgi"; startswith; endswith; http.request_body; content:"data1=|3b|"; startswith; fast_pattern; content:"&command="; distance:0; reference:url,seclists.org/bugtraq/2010/Jun/93; classtype:attempted-user; sid:2027095; rev:4; metadata:attack_target Networking_Equipment, created_at 2019_03_18, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, updated_at 2024_04_13;)

Metadata

attack targetNetworking_Equipment
created at2019_03_18
deploymentPerimeter
performance impactLow
confidenceMedium
signature severityMajor
updated at2024_04_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!