""ET EXPLOIT Possible MicroLogix 1100 PCCC DoS Condition (CVE-2017-7924)""

SID: 2026917

Revision: 1

Class Type: attempted-dos

Metadata: created_at 2019_02_18, cve CVE_2017_7924, deployment Perimeter, performance_impact Moderate, signature_severity Major, updated_at 2019_02_18, reviewed_at 2024_05_06

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: 44818

Flow: to_server,established

Contents:

  • Value: "|4b 02 20 67 24 01|"

  • Value: "|a2|"

  • Value: "|05 47|"

Within: 2

PCRE:

Special Options:

source