Sagan high stable other

[FORTINET] Possible CVE-2022-40684 Indicators Detected v1

[FORTINET] Possible CVE-2022-40684 Indicators Detected v1

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[FORTINET] Possible CVE-2022-40684 Indicators Detected v1"; content:"type=
| 22
| event
| 22
| "; content:"user=
| 22
| Local_Process_Access
| 22
| "; content:"ui=
| 22
| Node.js
| 22
| "; reference:url,www.horizon3.ai/fortinet-iocs-cve-2022-40684/; content:!"- - - -"; classtype:attempted-admin; sid:5008401; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...