SID 1:50858

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Siemens TIA Administrator authentication bypass attempt

Rule Explanation

This event is generated when a Siemens TIA Administrator authentication bypass is detected. Impact: A Network Trojan was detected Details: Ease of Attack: Attacker needs to be local to the network.

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group