Ruleset Update Summary - 2023/10/29 - v10451

Ruleset Updates
1

Summary:

3 new OPEN, 3 new PRO (3 + 0)

Thanks @assetnote

Special OOB Release for CVE-2023-4966 (CitrixBleed)

Added rules:

Open:

  • 2048930 - ET EXPLOIT Citrix ADC and NetScaler Gateway Information Disclosure Attempt (CVE-2023-4966) (exploit.rules)
  • 2048931 - ET EXPLOIT Citrix ADC and NetScaler Gateway Information Disclosure Attempt (CVE-2023-4966) (exploit.rules)
  • 2048932 - ET EXPLOIT Citrix ADC and NetScaler Gateway Information Disclosure - Successful Response (CVE-2023-4966) (exploit.rules)

Modified inactive rules:

  • 2048737 - ET EXPLOIT Cisco IOS XE Web Server Implant Check (CVE-2023-20198) (Outbound) M2 (exploit.rules)