Version number
V7-IPS-1.0.290

MD5 number
d0b2374e85e0fa5e8e11f48cedb9636b

Update time
2024-04-25

Update attack list

Key new rules:
------------------------------

52179  CVE-2024-0778_Uniview_ISC2500-S_Command_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: Uniview ISC2500-S is a network device owned by Uniview Technology in China.
---- A network hard disk recorder. Uniview ISC 2500-S has a security vulnerability due to the
---- setNatConfig function in/Interface/DevManage/VM.php, which causes operating system command
---- injection through the natAddress/natPort/natServerPort parameter.

52182  CVE-2024-2620_Fujian_Kelixin_SQL_Injection_Vulnerability[2]
---- Category: Vulnerability
---- Description: Fujian Kelixin Command and Dispatch Platform is a command and dispatch platform
---- of Fujian Kelixin Company. There is a SQL injection vulnerability in Fujian Kelixin Command and
---- Dispatch Platform version 20240318 and previous versions. The vulnerability stems from the
---- unknown function contained in /api/client/down_file.php, which causes SQL injection
---- through the parameter uuid.

52191  JeeSpringCloud_uploadFile.jsp_file_upload_vulnerability[2]
---- Category: Vulnerability
---- Description: JeeSpringCloud is a free and open source Java Internet cloud
---- rapid development platform. JeeSpringCloud access/static/uploadify/uploadFile.
---- JSP can upload any file, and can through uploadPath parameter specifies the file upload path,
---- cause the server to control.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 2GB. After loading the IPS rules library file of this version, 22139 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 3210 predefined rules can be generated in "Intrusion Prevention System"