Version number
V7-IPS-1.0.286

MD5 number
ba348487ee2e047a146c30db63aee10b

Update time
2024-03-22

Update attack list

Key new rules:
------------------------------

51795  CVE-2024-1019_ModSecurity_Encoding_Policy_Bypass[2]
---- Category: Vulnerability
---- Description: ModSecurity is an intrusion detection and prevention engine
---- that can be run as a module of the Apache Web server or as a separate application to
---- enhance the security of Web applications and protect Web applications from known and unknown attacks.
---- ModSecurity libModSecurity versions 3.0.0 to 3.0.11 have a security vulnerability
---- that results from decoding the percent-encoded characters present in the request URL,
---- which results in a mismatch with RFC-compliant back-end applications.

51825  CVE-2024-20683_Windows_Win32k_Elevation_Of_Privilege_Vulnerability[2]
---- Category: Vulnerability
---- Description: Microsoft Win32k is a system file used for Windows multi-user management
---- by Microsoft in the United States. Microsoft Win32K has a security vulnerability.
---- Attackers can exploit this vulnerability to increase privileges.

51835  CVE-2024-24333_TOTOLINK_A3300R_Command_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: The TOTOLINK A3300R is a wireless router from the Chinese company TOTOLINK.
---- There is a security vulnerability in TOTOLINK A3300R V17.0.0cu.557_B20221024 due to
---- a command injection vulnerability in the desc parameter of the setWiFiAclRules method.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 2GB. After loading the IPS rules library file of this version, 21927 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 3204 predefined rules can be generated in "Intrusion Prevention System"