SSHD Error Message CVE-2018-15473 Exploitation Attempt

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•27

Detects exploitation attempts targeting CVE-2018-15473 in OpenSSH, specifically looking for a characteristic error message generated during the pre-authentication phase when an attacker attempts to enumerate valid usernames.