ET DOS CallStranger - Attempted UPnP Reflected Amplified TCP with Multiple Callbacks (CVE-2020-12695) - Suricata Rule 2030339 (et/open)

ET DOS CallStranger - Attempted UPnP Reflected Amplified TCP with Multiple Callbacks (CVE-2020-12695)

7.0.3 5.0SID: 2030339Rev: 3Enabled1 views

Fileemerging-dos.rules

CreatedJune 15, 2020

UpdatedApril 22, 2024

Classificationattempted-dos

alert http $EXTERNAL_NET any -> any any (msg:"ET DOS CallStranger - Attempted UPnP Reflected Amplified TCP with Multiple Callbacks (CVE-2020-12695)"; flow:established,to_server; http.method; content:"SUBSCRIBE"; http.request_header; header_lowercase; content:"callback|3a 20|"; fast_pattern; startswith; content:"<http"; distance:0; content:"><http"; distance:0; reference:url,github.com/yunuscadirci/CallStranger; reference:cve,2020-12695; classtype:attempted-dos; sid:2030339; rev:3; metadata:affected_product UPnP, attack_target IoT, created_at 2020_06_15, cve CVE_2020_12695, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_22;)

References

url	github.com/yunuscadirci/CallStranger
cve	2020-12695

Metadata

affected productUPnP

attack targetIoT

created at2020_06_15

cve

CVE-2020-12695

deploymentPerimeter

performance impactLow

confidenceMedium

signature severityMajor

tagDescription_Generated_By_Proofpoint_Nexus

updated at2024_04_22

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!