IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.330, 3.1.330 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-10-22 | |||
| XSS/SQL Injection Attack Engine Version | 1.260904 | |||
| XSS/SQL Injection Attack Engine Change Description | Refine signature matching patterns, eliminate inefficient regex backtracking, improve rule matching performance | |||
| New Signature (52) |
Rule ID | Rule Name | StoneOS | Detail |
| 346479 | Tenda AC10 Buffer Overflow Vulnerability (CVE-2022-42164) | 5.5R5 or above | click for more information | |
| 346444 | TOTOLINK A720R cloudupdate_check Command Injection Vulnerability (CVE-2025-60682) | 5.5R5 or above | click for more information | |
| 346454 | Ultimate Member Unauthenticated Privilege Escalation Vulnerability (CVE-2023-3460) | 5.5R5 or above | click for more information | |
| 346464 | Suprema BioStar 2 absence values SQL Injection Vulnerability (CVE-2023-27167) | 5.5R5 or above | click for more information | |
| 346475 | WordPress Plugin Customizer Export Import PHP Object Injection Vulnerability (CVE-2023-1347) | 5.5R5 or above | click for more information | |
| 346485 | SQL Injection Detection - DB_NAME | 5.5R5 or above | click for more information | |
| 346440 | TOTOLINK A3002R formMapDelDevice macstr Buffer Overflow Vulnerability (CVE-2025-45863) | 5.5R5 or above | click for more information | |
| 346450 | Realtek RTL819X Jungle SDK Boa Stack Buffer Overflow Vulnerability (CVE-2023-50239) | 5.5R5 or above | click for more information | |
| 346461 | Tenda O3V2 setNetworkService Command Injection Vulnerability (CVE-2024-36604) | 5.5R5 or above | click for more information | |
| 346471 | Sangfor NGAF Authentication Bypass Vulnerability (CVE-2023-30803) | 5.5R10 or above | click for more information | |
| 346478 | LB-LINK Router set_LimitClient_cfg Command Injection Vulnerability (CVE-2023-26801) | 5.5R5 or above | click for more information | |
| 346447 | Swissphone DiCal-RED Path Traversal Vulnerability (CVE-2024-36442) | 5.5R5 or above | click for more information | |
| 346457 | Advantech iView ConfigurationServlet SQL Injection Vulnerability (CVE-2022-3323) | 5.5R5 or above | click for more information | |
| 346467 | GL.iNet Router Arbitrary File Read Vulnerability (CVE-2023-31473) | 5.5R5 or above | click for more information | |
| 717313 | Siglent SDS Oscilloscope Denial of Service Vulnerability (CVE-2023-25369) | 5.5R5 or above | click for more information | |
| 346474 | Ubiquiti EdgeRouter X OSPF Batch API Command Injection Vulnerability (CVE-2023-1458) | 5.5R5 or above | click for more information | |
| 346477 | Tool Scanner AWVS Detection | 5.5R10 or above | click for more information | |
| 346484 | PHP Core Remote Code Execution Vulnerability (CVE-2026-109618 CVE-2026-109619) | 5.5R5 or above | click for more information | |
| 346443 | TOTOLINK N600R setWiFiAclAddConfig Buffer Overflow Vulnerability (CVE-2022-29394) | 5.5R5 or above | click for more information | |
| 346453 | WordPress WPML Twig Server-Side Template Injection Vulnerability (CVE-2024-6386) | 5.5R5 or above | click for more information | |
| ...... | ||||
| Updated Signature (2) |
Rule ID | Rule Name | StoneOS | Detail |
| 332775 | Tool Scanner AWVS Detection | 5.5R5 or above | Click here for more information | |
| 346269 | WordPress File Manager Advanced Shortcode Unauthenticated File Upload Vulnerability (CVE-2023-2068) | 5.5R5 or above | Click here for more information | |