Version number
V7-IPS-1.0.288

MD5 number
565888dc42e50598ca4cf9f257243bbc

Update time
2024-04-11

Update attack list

Key new rules:
------------------------------

52055  CVE-2024-29201_JumpServer_Remote_Code_Execution_Vulnerability[2]
---- Category: Vulnerability
---- Description: JumpServer is an open-source bastion computer developed by Hangzhou
---- Feizhi Cloud Information Technology Co., Ltd. in China. JumpServer v3.10.7 and earlier
---- versions have security vulnerabilities that allow attackers to bypass the input
---- validation mechanism in JumpServer's Ansible, execute arbitrary code in the
---- Cell container, and steal sensitive information or manipulate databases from all hosts.

52070  CVE-2024-3094_XZ_Utils_Tools_Backdoor_Vulnerability[1]
---- Category: Vulnerability
---- Description: Malicious code was discovered in the upstream tarballs of xz,
---- starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build
---- process extracts a prebuilt object file from a disguised test file existing
---- in the source code, which is then used to modify specific functions in the liblzma code.
---- This results in a modified liblzma library that can be used by any software linked
---- against this library, intercepting and modifying the data interaction with this library.

52094  CVE-2023-49105_OwnCloud_Authentication_Bypass_Vulnerability[2]
---- Category: Vulnerability
---- Description: OwnCloud is a personal cloud storage solution developed by American
---- company OwnCloud. There is a security vulnerability in versions 10.6.0 to 10.13.0 of
---- the ownCloud core, which arises from the use of pre signed URLs to bypass
---- WebDAV Api authentication.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 2GB. After loading the IPS rules library file of this version, 22043 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 3209 predefined rules can be generated in "Intrusion Prevention System"