valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 17:35:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix for CVE tag

Browse Source
This commit is contained in:
Bhabesh Rai 2021-08-25 10:24:15 +05:45
parent ce6141e318
commit a4d0e3453d
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
rules/web/web_arcadyan_router_cve_2021_20090_2021_20091_exploit.yml
View File

@ -4,21 +4,20 @@ id: f0500377-bc70-425d-ac8c-e956cd906871
status: experimental status: experimental
description: Detects exploitation of vulnerabilities in Arcadyan routers as reported in CVE-2021-20090 and CVE-2021-20091. description: Detects exploitation of vulnerabilities in Arcadyan routers as reported in CVE-2021-20090 and CVE-2021-20091.
references: references:
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20090 - https://nvd.nist.gov/vuln/detail/cve-2021-20090
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20091 - https://nvd.nist.gov/vuln/detail/cve-2021-20091
- https://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2 - https://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2
- https://www.tenable.com/security/research/tra-2021-13 - https://www.tenable.com/security/research/tra-2021-13
- https://blogs.juniper.net/en-us/security/freshly-disclosed-vulnerability-cve-2021-20090-exploited-in-the-wild - https://blogs.juniper.net/en-us/security/freshly-disclosed-vulnerability-cve-2021-20090-exploited-in-the-wild
author: Bhabesh Raj author: Bhabesh Raj
date: 2021/08/24 date: 2021/08/24
modified: 2021/08/25
falsepositives: falsepositives:
- Unknown - Unknown
level: critical level: critical
tags: tags:
- attack.initial_access - attack.initial_access
- attack.t1190 - attack.t1190
- cve.2021-20090
- cve.2021-20091
--- ---
logsource: # CVE-2021-20090 (Path Traversal) logsource: # CVE-2021-20090 (Path Traversal)
category: webserver category: webserver