""ET EXPLOIT Possible NSDP (Netgear) Unauthenticated Buffer Overflow (CVE-2020-35232)""

SID: 2031938

Revision: 3

Class Type: attempted-admin

Metadata: attack_target Networking_Equipment, created_at 2021_03_11, cve CVE_2020_35232, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, updated_at 2023_04_05

Reference:

  • cve

  • 2020-35232

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: any

Destination Port: 60000:

Flow:

Contents:

  • Value: "|00 1a 00 0a|" Depth: 4

  • Value: "|ff ff 00 00|"

Within:

PCRE:

Special Options:

  • fast_pattern

source