Version number
V7-IPS-1.0.289

MD5 number
9bad153fed5f14d9845860bf7a10b4bc

Update time
2024-04-18

Update attack list

Key new rules:
------------------------------

52099  Yonyou_GRP-RMIS_datalist.jsp_SQL_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: Sql injection vulnerability exists in datalist.jsp of UF GRP-RMIS system. Unauthenticated attackers
---- can not only use SQL injection vulnerability to obtain information in the database (such as administrator background password,
---- site user personal information), but also write Trojan horses to the server with high permission.
---- Obtain the system permission of the server.

52100 Pingsheng_Electronic_Reservoir_Security_Supervision_Platform_DeviceNodeService.asmx_SQL_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: There is SQL injection vulnerability in Pingsheng electronic reservoir security supervision platform.
---- In addition to using SQL injection vulnerability to obtain information in the database, attackers can even write trojans
---- to the server in the case of high permissions to further obtain server system permissions.

52101  CVE-2024-1012_Wanhu_ezOFFICE_SQL_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: Wanhu ezOFFICE is a comprehensive office suite from Chinese company Wanhu. Wanhu ezOFFICE 11.1.0 version
---- have SQL injection vulnerabilities, the vulnerability stems from defaultroot/platform/BPM/work_flow/operate/wf_printnum
---- JSPS contain some unknown process, SQL injection is caused by the recordId parameter.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 2GB. After loading the IPS rules library file of this version, 22046 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 3209 predefined rules can be generated in "Intrusion Prevention System"