Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Emerging Threats
    CVE2023

    CVE-2023-27997

    1Rules
    4References
    1Folders
    2023-07-28Latest
    Summary

    CVE-2023-27997 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2023. Coverage centers on webserver.

    Related Detections
    Search this threat
    1 rulesInspect a rule without leaving your results.
    mediumtestEmerging Threat

    Potential CVE-2023-27997 Exploitation Indicators

    Detects indicators of potential exploitation of CVE-2023-27997 in Frotigate weblogs. To avoid false positives it is best to look for successive requests to the endpoints mentioned as well as weird values of the "enc" parameter

    Generalwebserver
    2023-07-28
    References
    1
    Resolving title…
    blog.lexfo.fr
    2
    Resolving title…
    blog.lexfo.fr
    3
    Resolving title…
    research.kudelskisecurity.com
    4
    Resolving title…
    labs.watchtowr.com