Remote Command Execution Vulnerability

pyrainath — Tue, 14 May 2024 05:10:06 GMT

Hi,

We have detected so may critical vulnerability in our firewall . i have attached the screenshots.

1.is there a way to avoid these kind of traffic?

2.where can i find more about how to block these kind of traffic?

Re: Remote Command Execution Vulnerability

kiwi — Tue, 14 May 2024 06:02:29 GMT

Using TID 58474 as an example.

As you can see you will find this TID in a vulnerability profile:

In this case the default action is "Reset-Both" but you can change it to whatever action you would like to configure:

Don't forget that you need to assign the vulnerability profile to your security rules so that the appropriate actions apply:

With the appropriate security profiles in place you're already better protected.

The following DOC is a good resource to create best practice security profiles:

Kind regards,

-Kim.