ATTACK [PTsecurity] Cisco Adaptive Security Appliance 8.x SNMP overflow RCE Probe

SID: 10000098Rev: 2Enabled32 views
Fileptopen-attacks.rules
CreatedJuly 24, 2025
UpdatedJuly 24, 2025
Classificationattempted-admin
alert udp any any -> any 161 (msg:"ATTACK [PTsecurity] Cisco Adaptive Security Appliance 8.x SNMP overflow RCE Probe"; content:"|a035020100020100020100302a300c06082b060102010101000500300c06082b060102010103000500300c06082b060102010105000500|"; isdataat:!1, relative; reference:url, blogs.cisco.com/security/shadow-brokers; reference:cve, 2016-6366; reference:url, rules.ptsecurity.com; classtype:attempted-admin; sid:10000098; rev:2;)

References

urlblogs.cisco.com/security/shadow-brokers
cve2016-6366
urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!