Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects exploitation attempts targeting Arcadyan routers, specifically looking for path traversal (CVE-2021-20090) and configuration file injection (CVE-2021-20091) vulnerabilities. The rule identifies requests containing '..%2f' (URL-encoded path traversal) and, for the configuration file injection, also 'apply_abstract.cgi', combined with requests to unauthenticated paths.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
1021