QueueJumper Vulnerability Exploitation
Last updated on:
In this page
About the rule
Rule Type
Advanced
Rule Description
QueueJumper Vulnerability Exploitation
Severity
Critical
Rule Requirement
Criteria
Action1: actionname = "Port 1801 Access Detection" AND (vulnerableTo(HOSTNAME, "CVE-2023-21554")) Action2: actionname = "null" AND (vulnerableTo(HOSTNAME, "CVE-2023-21554")) sequence:Action1 followedby Action2 within 10m select Action1.HOSTNAME,Action1.MESSAGE,Action1.DEST_IP,Action1.LAYERNAME,Action1.OBJECTNAME,Action1.PROTOCOL,Action1.SOURCEPORT,Action1.SOURCEPORTNO,
Detection
Execution Mode
realtime
Log Sources
Windows
