""ET EXPLOIT Furukawa Electric ConsciusMAP 2.8.1 Java Deserialization Remote Code Execution (CVE-2020-12133)""

SID: 2034260

Revision: 2

Class Type: attempted-admin

Metadata: created_at 2021_10_27, cve CVE_2020_12133, updated_at 2023_04_06, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application

Reference:

• cve

• 2020-12133

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: [$HOME_NET,$HTTP_SERVERS]

Destination Port: 8080

Flow: established,to_server

Contents:

• Value: "POST"

• Value: "javax.faces.ViewState"

• Value: "|3a|"

• Value: "|22|"

Within:

PCRE: "/\x2f(?:FURUKAWA|APROS)\x2f/Ui"

Special Options:

• http_method

• nocase

• fast_pattern

• http_client_body

• http_client_body

• http_client_body

source