Version number
V7-IPS-1.0.341

MD5 number
98c16301fc944bf434369fca6245fc96

Update time
2025-03-06

Update attack list

Key new rules:
------------------------------

54629  Anevia_Flamingo_XL_3.6.20_Authenticated_Root_Remote_Commadn_Execution_Vulnerability[2]
---- Category: Vulnerability
---- Description: The affected device suffers from authenticated remote code execution vulnerability. A remote attacker can exploit this issue and execute arbitrary system
---- commands granting her system access with root privileges. Also, the application suffers from Insufficient Session Expiration vulnerability.

54610  CVE-2024-43425_Moodle_question.php_Remote_Code_Execution_Vulnerability[2]
---- Category: Vulnerability
---- Description: Moodle is an open-source, free e-learning software platform, also known as a course management system, learning management system, or virtual learning
---- environment. Moodle has a security vulnerability that arises from the need for additional restrictions to avoid remote code execution risks in computing problem types.

54613  Ollama_Large_Model_Framework_API_Unauthorized_Access_Vulnerability[2]
---- Category: Vulnerability
---- Description: Ollama is an open-source tool that facilitates local deployment and running of large language models such as Llama 3, Mistral, Gemma, etc. Due to Olama's
---- default deployment configuration not forcing the use of authentication mechanisms, if the service port (default 11434) is directly exposed to the public network, attackers
---- can directly access high-risk interfaces, read, download, or delete private model files, and steal sensitive business data or misuse model inference resources. If Olama is
---- deployed with Docker, attackers may achieve container escape through malicious instruction injection.

Note
[1] Indicates that this change is incorporated into all security products
[2] Indicates that this change is only incorporated into the full series of F5000, T5000, T9000, M9000, F1030 and above F series products
[3] The device memory is greater than 2GB. After loading the IPS rules library file of this version, 24396 predefined rules can be generated in "Intrusion Prevention System"
[4] The device memory is less than or equal to 2GB. After loading the IPS rules library file of this version, 3283 predefined rules can be generated in "Intrusion Prevention System"