SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.
SERVER-WEBAPP Zyxel NAS326 remote_help-cgi backdoor creation attempt
This rule looks for requests to an HTTP endpoint that create a backdoor on the Zyxel NAS326.
This rule fires on attempts to create a backdoor on the Zyxel NAS326.
Public information/Proof of Concept available
No known false positives
Cisco Talos Intelligence Group
No rule groups
Authentication Bypass
An Authentication Bypass occurs when there is a way to avoid providing user credentials to a system before performing restricted operations on said system.
CVE-2024-29972 |
Loading description
|