IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.119 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2022-08-01 | |||
| New Signature (33) |
Rule ID | Rule Name | StoneOS | Detail |
| 336716 | Netgear ProSAFE NMS300 ConfigImageController addConfigFile Arbitrary File Deletion Vulnerability | 5.0R4 or above | click for more information | |
| 336813 | Gitlist Unauthenticated Remote Command Execution Vulnerability | 5.0R4 or above | click for more information | |
| 336833 | Mingyu Web Application Firewall Remote Code Execution Vulnerability | 5.0R4 or above | click for more information | |
| 336840 | Delta Industrial Automation DIAEnergie DIAE_loopmapHandler.ashx SQL Injection Vulnerability (CVE-2022-26887) | 5.0R4 or above | click for more information | |
| 336850 | Hikvision Video Instruction Weak Password -11 | 5.5R5 or above | click for more information | |
| 715632 | Apache Log4j Server Deserialization Command Execution Vulnerability (CVE-2017-5645) | 5.0R4 or above | click for more information | |
| 336844 | SQL Injection Detected | 5.0R4 or above | click for more information | |
| 336836 | OctoBot WebInterface 0.4.3 Remote Code Execution Vulnerability (CVE-2021-36711) | 5.0R4 or above | click for more information | |
| 336847 | JAVA Unsafe Class Reference Detected | 5.5R5 or above | click for more information | |
| 336812 | Mako Server Remote Command Execution Vulnerability | 5.0R4 or above | click for more information | |
| 336832 | Confluence Disabledsystemuser Password Leak Vulnerability (CVE-2022-26138) | 5.0R4 or above | click for more information | |
| 715640 | Tool Nmap RDP Scan Behavior Detected | 5.0R4 or above | click for more information | |
| 336843 | Fastjson <=1.2.83 Deserialization Vulnerability (CVE-2022-25845) | 5.0R4 or above | click for more information | |
| 336713 | Oracle Document Capture Actbar2.ocx Insecure Method Vulnerability (CVE-2010-3591) | 5.0R4 or above | click for more information | |
| 336839 | Delta Industrial Automation DIAEnergie DIAE_pgHandler.ashx GETOBJECT SQL Injection Vulnerability (CVE-2022-1378) | 5.0R4 or above | click for more information | |
| 336849 | Java Code Injection Detected | 5.0R4 or above | click for more information | |
| 336846 | Hikvision Abnormal Video Instruction Message Vulnerability -1 | 5.0R4 or above | click for more information | |
| 336835 | OctoBot WebInterface 0.4.3 Remote Code Execution Vulnerability (CVE-2021-36711) | 5.0R4 or above | click for more information | |
| 336842 | Simple HTTP Transfer | 5.0R4 or above | click for more information | |
| 336811 | Apache Shiro Authorization Bypass Vulnerability (CVE-2022-32532) | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (745) |
Rule ID | Rule Name | StoneOS | Detail |
| 333039 | VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow Vulnerability (CVE-2009-2484) | 5.5R4 or above | Click here for more information | |
| 335087 | Tool Web Vulnerability Scanner Acunetix Detected | 5.0R4 or above | Click here for more information | |
| 2005155 | Microsoft Windows DHCP Server Vendor Specific Remote Code Execution Vulnerability (CVE-2019-0626) | 5.5R4 or above | Click here for more information | |
| 315755 | Adobe Flash Player Shader Memory Corruption Vulnerability -2 (CVE-2014-0515) | 5.5R5 or above | Click here for more information | |
| 713906 | CyberLink LabelPrint Stack Buffer Overflow Vulnerability (CVE-2017-14627) | 5.5R4 or above | Click here for more information | |
| 335093 | Tool Web Vulnerability Scanner ZAP Detected | 5.0R4 or above | Click here for more information | |
| 1905848 | Microsoft Lync Insecure Library Loading Vulnerability (CVE-2012-1849) | 5.5R4 or above | Click here for more information | |
| 711699 | Microsoft Internet Explorer 8 Remote Code Execution Vulnerability -1 (CVE-2013-1347) | 5.5R5 or above | Click here for more information | |
| 316560 | Microsoft Windows OLE Code Execution Vulnerability -2 (CVE-2016-0091) | 5.0R4 or above | Click here for more information | |
| 336378 | Tool Scanner Qualys Security Detection | 5.0R4 or above | Click here for more information | |
| 335234 | CraftCMS Server-Side Template Injection Vulnerability (CVE-2020-9757) | 5.5R5 or above | Click here for more information | |
| 711617 | Microsoft Internet Explorer Use After Free Vulnerability -1 (CVE-2013-3163) | 5.5R5 or above | Click here for more information | |
| 321943 | Microsoft Internet Explorer and Edge Font Lang Parameter Use After Free Vulnerability (CVE-2016-3297) | 5.0R4 or above | Click here for more information | |
| 335009 | Tool Vulnerability Scanner RSAS Detected | 5.0R4 or above | Click here for more information | |
| 321611 | Xiph.org Icecast Server auth_url Stack Buffer Overflow Vulnerability -1 (CVE-2018-18820) | 5.5R4 or above | Click here for more information | |
| 335144 | Tool Web Vulnerability Scanner Arachni Detected | 5.0R4 or above | Click here for more information | |
| 316640 | Adobe Flash Player and AIR Unspecified Remote Code Execution Vulnerability (CVE-2016-4121) | 5.0R4 or above | Click here for more information | |
| 333577 | Pulse Secure Pulse Connect Secure Authentication Bypass Vulnerability (CVE-2021-22893) | 5.0R4 or above | Click here for more information | |
| 805458 | Microsoft Internet Explorer 8 Remote Code Execution Vulnerability -2 (CVE-2013-1347) | 5.0R4 or above | Click here for more information | |
| 705931 | Openssl TLS DTLS Heartbeat Information Disclosure Vulnerability (CVE-2014-0160) | 5.5R4 or above | Click here for more information | |
| ...... | ||||