ET EXPLOIT Microsoft Windows Malformed IPv6 Destination Options Packet Inbound (CVE-2024-38063)

7.0.35.0SID: 2055641Rev: 1Enabled0 views
Sourceet/open
Fileemerging-exploit.rules
CreatedAugust 30, 2024
UpdatedAugust 30, 2024
Classificationattempted-admin
alert ip any any -> $HOME_NET any (msg:"ET EXPLOIT Microsoft Windows Malformed IPv6 Destination Options Packet Inbound (CVE-2024-38063)"; flowbits:set,ET.CVE-2024-38063; ipv6.hdr; content:"|3c|"; offset:6; depth:1; content:"|00|"; distance:34; within:1; byte_test:1,>,0x80,0,relative; reference:cve,2024-38063; classtype:attempted-admin; sid:2055641; rev:1; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, affected_product Windows_11, attack_target Client_and_Server, tls_state plaintext, created_at 2024_08_30, cve CVE_2024_38063, deployment Perimeter, deployment Internal, confidence Medium, signature_severity Critical, updated_at 2024_08_30; target:dest_ip;)

References

cve2024-38063

Metadata

affected productWindows_11
attack targetClient_and_Server
tls stateplaintext
created at2024_08_30
deploymentInternal
confidenceMedium
signature severityCritical
updated at2024_08_30

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!