Intrusion Prevention

Name Status Update
AlienVault.USM.And.OSSIM.fqdn.Command.Injection
Add
Apache.HTTP.Server.Authorization.Headers.Memory.Corruption
Add
Adobe.Reader.Mobile.JavaScript.Interface.Java.Code.Execution.
Mod
Modified
Backdoor.Cobalt.Strike.Beacon
Mod
Added Signature
Trend.Micro.SafeSync.Enterprise.Command.Injection
Mod
Added Signature
Wonderware.SuiteLink.Registration.Packet.Handling.DoS
Mod
Previous name: "Wonderware.SuiteLink.DoS"
Siemens.SIMATIC.WinCC.Default.Password
Mod
Previous name: "Siemens.Simatic.WinCC.Default.Password"
7-Technologies.IGSS.ODBC.Server.Memory.Corruption
Mod
Previous name: "7T.IGSS.ODBC.Server.Memory.Corruption"
Schneider.Electric.ClearSCADA.Remote.DoS
Mod
Previous name: "Control.Microsystems.ClearSCADA.Remote.DoS"
7-Technologies.IGSS.Opcode.Handling.Remote.Code.Execution
Mod
Previous name: "7T.Interactive.Graphical.SCADA.System.Code.Execution"
7-Technologies.IGSS.SCADA.System.Directory.Traversal
Mod
Previous name: "7Technologies.IGSS.SCADA.System.Directory.Traversal"
7-Technologies.IGSS.SCADA.System.Memory.Corruption
Mod
Previous name: "IGSS.SCADA.System.Memory.Corruption"
AzeoTech.DAQFactory.HMI.NETB.Request.Buffer.Overflow
Mod
Previous name: "AzeoTech.DaqFactory.HMI.NETB.Request.Buffer.Overflow"
Microsys.PROMOTIC.SaveCfg.ActiveX.Buffer.Overflow
Mod
Previous name: "Promotic.SCADA.SaveCfg.ActiveX.Overflow"
Microsys.PROMOTIC.ActiveX.GetPromoticSite.Method.Code.Execution
Mod
Previous name: "PROMATIC.ActiveX.GetPromoticSite.Method.Remote.Code.Execution"
3S-Smart.CODESYS.Gateway.Server.Directory.Traversal
Mod
Previous name: "SCADA.3S.CoDeSys.Gateway.Server.Directory.Traversal"
3S-Smart.CODESYS.Gateway.Server.Stack.Buffer.Overflow
Mod
Previous name: "SCADA.3S.CoDeSys.Gateway.Server.Stack.Buffer.Overflow"
3S-Smart.CODESYS.Gateway.Server.Memory.Access.Error
Mod
Previous name: "SCADA.3S.CoDeSys.Gateway.Server.Memory.Access.Error"
3S-Smart.CODESYS.Gateway.Server.Opcode.Heap.Buffer.Overflow
Mod
Previous name: "SCADA.3S.CoDeSys.Gateway.Server.Server.Heap.Buffer.Overflow"
3S-Smart.CODESYS.Gateway.Server.DoS
Mod
Previous name: "SCADA.3S.CoDeSys.Gateway.Server.DoS"
Schneider.Electric.ClearSCADA.ActiveX.Control.Vulnerability
Mod
Previous name: "Schneider.ClearSCADA.ActiveX.Control.Vulnerability"
Schneider.Electric.ClearSCADA.OPF.File.Parsing.Code.Execution
Mod
Previous name: "Schneider.ClearSCADA.OPF.File.Parsing.Out.of.Bounds.Array.Index"
Schneider.Electric.ClearSCADA.HTTP.Interface.XSS
Mod
Previous name: "Schneider.Electric.SCADA.Expert.ClearSCADA.XSS"
Schneider.Electric.ClearSCADA.Guest.User.Authentication.Bypass
Mod
Previous name: "Schneider.SCADA.Expert.ClearSCADA.Authentication.Bypass"
Schneider.Electric.ClearSCADA.Remote.Authentication.Bypass
Mod
Previous name: "Schneider.ClearSCADA.Remote.Authentication.Bypass"
Microsys.PROMOTIC.Stack.Buffer.Overflow
Mod
Previous name: "MICROSYS.PROMOTIC.Stack.Buffer.Overflow"
InduSoft.Web.Studio.Agent.Remote.Code.Execution
Mod
Previous name: "Schneider.Electric.InduSoftWebStudioAgent.Remote.Code.Execution"
Advantech.WebAccess.Datacore.Heap.Overflow
Mod
Previous name: "Advantech.WebAccess.Datacore..Heap.Overflow"
VideoLan.VLC.Media.Player.ParseJSS.Heap.Buffer.Overflow
Attr
Default_action updated to 'drop' from 'pass'
Schneider.Electric.Umotion.Runscript.Directory.Traversal
Attr
Default_action updated to 'drop' from 'pass'
HPE.Intelligent.Management.Center.RestartDB.Command.Injection
Attr
Default_action updated to 'drop' from 'pass'