IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.261 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2025-06-16 | |||
| New Signature (13) |
Rule ID | Rule Name | StoneOS | Detail |
| 339064 | Cobalt Strike Shellcode Download (x32) Detection | 5.0R4 or above | click for more information | |
| 339074 | Weaver E-Cology changeUserInfo.jsp Infomation Leakage Vulnerability - 2 | 5.5R5 or above | click for more information | |
| 339065 | Samsung MagicINFO 9 Server Arbitrary File Upload Vulnerability (CVE-2024-7399) | 5.0R4 or above | click for more information | |
| 339075 | Weaver E-Cology changeUserInfo.jsp Infomation Leakage Vulnerability - 1 | 5.5R5 or above | click for more information | |
| 339072 | Roundcube Webmail PHP Deserialization vulnerability (CVE-2025-49113) | 5.0R4 or above | click for more information | |
| 339073 | Weaver E-Cology changeUserInfo.jsp Infomation Leakage Vulnerability - 3 | 5.5R5 or above | click for more information | |
| 339070 | TP-LINK TL-WR840N(ES)_V6.20_180709 Command Injection Vulnerability (CVE-2022-25061) -1 | 5.5R5 or above | click for more information | |
| 339071 | TP-LINK TL-WR840N(ES)_V6.20_180709 Command Injection Vulnerability (CVE-2022-25061) -2 | 5.5R5 or above | click for more information | |
| 339068 | Aruba Instant Access Point Cross-Site Scripting Vulnerability (CVE-2021-25161) | 5.5R5 or above | click for more information | |
| 339069 | ArForms Arbitrary File Upload Vulnerability (CVE-2024-4620) | 5.0R4 or above | click for more information | |
| 339066 | Ivanti Endpoint Manager Mobile Remote Code Execution Vulnerability (CVE-2025-4428) | 5.0R4 or above | click for more information | |
| 339076 | Dataease H2 Database JDBC Remote Code Execution Vulnerability (CVE-2025-32966 CVE-2025-49002) | 5.5R8 or above | click for more information | |
| 339067 | Grafana Path Traversal Vulnerability (CVE-2025-4123) | 5.0R4 or above | click for more information | |
| Updated Signature (22) |
Rule ID | Rule Name | StoneOS | Detail |
| 334872 | SQL Injection Detection - SELECT Injection 2 | 5.5R5 or above | Click here for more information | |
| 334858 | SQL Injection Detection - Suspicious Deletion Behavior 1 | 5.5R5 or above | Click here for more information | |
| 2005149 | Bootpd Buffer Overflow Vulnerability (CVE-1999-0799) | 5.5R4 or above | Click here for more information | |
| 334854 | SQL Injection Detection - Suspicious Create Statement 2 | 5.5R5 or above | Click here for more information | |
| 334864 | SQL Injection Detection - UNION SELECT 13 | 5.5R5 or above | Click here for more information | |
| 334861 | SQL Injection Detection - Suspicious Deletion Behavior 3 | 5.5R5 or above | Click here for more information | |
| 334878 | SQL Injection Detection - Backup 1 | 5.5R5 or above | Click here for more information | |
| 334857 | SQL Injection Detection - Suspicious Modification 2 | 5.5R5 or above | Click here for more information | |
| 334867 | SQL Injection Detection - Suspicious Modification 6 | 5.5R5 or above | Click here for more information | |
| 334874 | SQL Injection Detection - SELECT Injection 6 | 5.5R5 or above | Click here for more information | |
| 334853 | SQL Injection Detection - ORDER BY Injection 1 | 5.5R5 or above | Click here for more information | |
| 334860 | SQL Injection Detection - Suspicious Modification 3 | 5.5R5 or above | Click here for more information | |
| 334870 | SQL Injection Detection - Suspicious Modification 8 | 5.5R5 or above | Click here for more information | |
| 338485 | Cobalt Strike Shellcode Download (x64) Detection | 5.0R4 or above | Click here for more information | |
| 334856 | SQL Injection Detection - Suspicious Modification 1 | 5.5R5 or above | Click here for more information | |
| 334866 | SQL Injection Detection - Suspicious Modification 4 | 5.5R5 or above | Click here for more information | |
| 334852 | SQL Injection Detection - GROUP BY Injection 1 | 5.5R5 or above | Click here for more information | |
| 334873 | SQL Injection Detection - SELECT Injection 3 | 5.5R5 or above | Click here for more information | |
| 334859 | SQL Injection Detection - Suspicious Deletion Behavior 2 | 5.5R5 or above | Click here for more information | |
| 334869 | SQL Injection Detection - Suspicious Modification 7 | 5.5R5 or above | Click here for more information | |
| ...... | ||||