Summary
Digital Vaccine #9494 January 19, 2021
Details
Thank you for subscribing to Digital Vaccine updates brought to you by Trend Micro™ TippingPoint DVLabs. New content is now available at the Threat Management Center (TMC): https://tmc.tippingpoint.com. SMS customers can update the Digital Vaccine through the SMS client. From the top-line menu, you can open the "File > Download Digital Vaccine from TMC" menu item to detect and load the latest update. |
System Requirements |
The 3.2.0 DV will run on IPS devices with TOS v3.2.0 and above, all NGFW, and all TPS systems. The 4.0.0 DV will only run on the Virtual Threat Protection System (vTPS) appliance. Please note that vTPS does not currently support pre-disclosed ZDI filters. |
The Digital Vaccine can be manually downloaded from the following URLs: https://tmc.tippingpoint.com/TMC/ViewPackage?parentFolderId=digital_vaccines&contentId=SIG_3.2.0_9494.pkg https://tmc.tippingpoint.com/TMC/ViewPackage?parentFolderId=vsa_dv&contentId=SIG_VTPS_4.0.0_9494.pkg |
Update Details
Table of Contents
--------------------------
Filters
New Filters - 50
Modified Filters (logic changes) - 24
Modified Filters (metadata changes only) - 4
Removed Filters - 9
Filters
----------------
New Filters: 38658: LDAP: Microsoft Windows Active Directory dnsRecord Buffer Overflow Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a buffer overflow vulnerability in Microsoft Windows Active Directory. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2020-0718 - Classification: Vulnerability - Other - Protocol: LDAP - Platform: Windows Server Application or Service - Release Date: January 19, 2021 38674: HTTP: Nagios XI autodiscovery_component_update_cron Command Injection Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a command injection vulnerability in Nagios XI. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2020-28648 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: January 19, 2021 38688: HTTP: Vulnerable Zyxel Product Access - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Security Policy - Severity: Moderate - Description: This filter detects access to a Zyxel product with a known security bypass vulnerability. - Deployment: Not enabled by default in any deployment. - References: - Common Vulnerabilities and Exposures: CVE-2020-29583 - Classification: Security Policy - Other - Protocol: HTTP - Platform: Networked Hardware Device Application or Service - Release Date: January 19, 2021 38695: HTTP: Joomla CMS mod_random_image link Stored Cross-Site Scripting Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a cross-site scripting vulnerability in Joomla CMS. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2020-15696 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: January 19, 2021 38697: HTTP: WordPress Woody Ad Snippets Multiple Vulnerabilities - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Exploits - Severity: High - Description: This filter detects an attempt to exploit multiple vulnerabilities in the Woody Ad Snippets plugin for WordPress. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2019-15858 CVSS 8.8 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Other Server Application or Service - Release Date: January 19, 2021 38699: HTTP: TerraMaster F2-420 Modgroup Cross-Site Scripting Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a cross-site scripting vulnerability in a TerraMaster F2-420 device. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2018-13359 - Classification: Vulnerability - Other - Protocol: HTTP - Platform: Networked Hardware Device Application or Service - Release Date: January 19, 2021 38700: ZDI-CAN-10880: Zero Day Initiative Vulnerability (D-Link DAP-1860) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting D-Link DAP-1860. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38701: ZDI-CAN-10894: Zero Day Initiative Vulnerability (D-Link DAP-1860) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting D-Link DAP-1860. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38702: ZDI-CAN-11076: Zero Day Initiative Vulnerability (NETGEAR Orbi) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting NETGEAR Orbi. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38703: ZDI-CAN-11797: Zero Day Initiative Vulnerability (Cisco RV340) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Cisco RV340. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38704: ZDI-CAN-11798: Zero Day Initiative Vulnerability (Cisco RV340) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Cisco RV340. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38705: ZDI-CAN-11800: Zero Day Initiative Vulnerability (Cisco RV340) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Vulnerabilities - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Cisco RV340. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38706: ZDI-CAN-12229: Zero Day Initiative Vulnerability (Autodesk FBX) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Autodesk FBX. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38707: ZDI-CAN-12241: Zero Day Initiative Vulnerability (Autodesk FBX) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Autodesk FBX. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38708: ZDI-CAN-12242: Zero Day Initiative Vulnerability (Autodesk FBX) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Autodesk FBX. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38709: ZDI-CAN-12244: Zero Day Initiative Vulnerability (Phoenix Contact Automationworx) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter provides protection against exploitation of a zero-day vulnerability affecting Phoenix Contact Automationworx. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38710: ZDI-CAN-12335: Zero Day Initiative Vulnerability (Delta Industrial Automation DOPSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation DOPSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38711: ZDI-CAN-12336: Zero Day Initiative Vulnerability (Delta Industrial Automation DOPSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation DOPSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38712: ZDI-CAN-12337: Zero Day Initiative Vulnerability (Delta Industrial Automation DOPSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation DOPSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38713: ZDI-CAN-12338: Zero Day Initiative Vulnerability (Delta Industrial Automation DOPSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation DOPSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38714: ZDI-CAN-12339: Zero Day Initiative Vulnerability (Delta Industrial Automation DOPSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation DOPSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38715: ZDI-CAN-12340: Zero Day Initiative Vulnerability (Delta Industrial Automation DOPSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation DOPSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38716: ZDI-CAN-12412: Zero Day Initiative Vulnerability (Delta Industrial Automation CNCSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation CNCSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38717: ZDI-CAN-12419: Zero Day Initiative Vulnerability (Delta Industrial Automation CNCSoft) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Delta Industrial Automation CNCSoft. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38718: HTTP: Adobe Acrobat Reader Trailer Dictionary Overlong ID - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Security Policy - Severity: Low - Description: This filter detects an overlong ID value in a PDF trailer dictionary. - Deployment: Not enabled by default in any deployment. - Classification: Security Policy - Other - Protocol: HTTP - Platform: Multi-Platform Client Application - Release Date: January 19, 2021 38719: ZDI-CAN-12518: Zero Day Initiative Vulnerability (Microsoft PowerPoint) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft PowerPoint. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38720: ZDI-CAN-12539: Zero Day Initiative Vulnerability (Adobe Bridge) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Adobe Bridge. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38722: ZDI-CAN-12546: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Adobe Acrobat Pro DC. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38723: ZDI-CAN-12594: Zero Day Initiative Vulnerability (Microsoft Excel) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft Excel. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38724: ZDI-CAN-12595: Zero Day Initiative Vulnerability (Esri ArcReader) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Category (3.2 DV): Vulnerabilities - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting Esri ArcReader. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38725: ZDI-CAN-12596: Zero Day Initiative Vulnerability (Esri ArcReader) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting Esri ArcReader. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38726: ZDI-CAN-12599: Zero Day Initiative Vulnerability (Schneider Electric IGSS) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting Schneider Electric IGSS. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38727: ZDI-CAN-12608: Zero Day Initiative Vulnerability (Siemens RobotExpert) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Siemens RobotExpert. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38728: ZDI-CAN-12612: Zero Day Initiative Vulnerability (Esri ArcReader) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting Esri ArcReader. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38729: ZDI-CAN-12613: Zero Day Initiative Vulnerability (Autodesk FBX) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Autodesk FBX. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38730: ZDI-CAN-12615: Zero Day Initiative Vulnerability (Autodesk FBX) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Autodesk FBX. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38731: ZDI-CAN-12636: Zero Day Initiative Vulnerability (Microsoft Windows) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft Windows. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38732: ZDI-CAN-12639: Zero Day Initiative Vulnerability (Microsoft Windows) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft Windows. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38733: ZDI-CAN-12642: Zero Day Initiative Vulnerability (Microsoft Windows) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft Windows. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38734: ZDI-CAN-12644: Zero Day Initiative Vulnerability (Microsoft Windows) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft Windows. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38735: ZDI-CAN-12666: Zero Day Initiative Vulnerability (Schneider Electric IGSS) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting Schneider Electric IGSS. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38736: ZDI-CAN-12669: Zero Day Initiative Vulnerability (Schneider Electric IGSS) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against exploitation of a zero-day vulnerability affecting Schneider Electric IGSS. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38739: ZDI-CAN-12753: Zero Day Initiative Vulnerability (Microsoft Windows) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Requires: N/NX-Platform, NGFW, or TPS devices - Category: Exploits - Severity: Critical - Description: This filter protects against the exploitation of a zero-day vulnerability affecting Microsoft Windows. - Deployments: - Deployment: Security-Optimized (Block / Notify / Trace) - Classification: Vulnerability - Other - Protocol: Other Protocol - Platform: Other Server Application or Service - Release Date: January 19, 2021 38740: HTTP: Supermicro IPMI Sensitive File Access - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Security Policy - Severity: Low - Description: This filter detects a sensitive file request to Supermicro Intelligent Platform Management Interface (IPMI). - Deployment: Not enabled by default in any deployment. - Classification: Security Policy - Forbidden Application Access or Service Request - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: January 19, 2021 38742: HTTP: Ericsson Drutt MSDP Directory Traversal Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: High - Description: This filter detects an attempt to exploit a directory traversal vulnerability in Ericsson Drutt Mobile Service Delivery Platform (MSDP). - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2015-2166 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: January 19, 2021 38743: TCP: HP Data Protector Command Execution Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: Critical - Description: This filter detects an attempt to exploit a command execution vulnerability in HP Data Protector. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2016-2004 - Classification: Vulnerability - Input Validation (Command injection, XSS, SQL injection, etc) - Protocol: TCP (Generic) - Platform: Windows Server Application or Service - Release Date: January 19, 2021 38744: RFB: libVNC LibVNCServer Divide by Zero Denial-of-Service Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Vulnerabilities - Severity: High - Description: This filter detects an attempt to exploit a denial-of-service vulnerability in LibVNCServer. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2020-25708 - Classification: Vulnerability - Denial of Service (Crash/Reboot) - Protocol: TCP (Generic) - Platform: Multi-Platform Server Application or Service - Release Date: January 19, 2021 38746: HTTP: Script Usage in JSON - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Security Policy - Severity: Moderate - Description: This filter detects an HTML script tag being embedded in a JSON object. - Deployment: Not enabled by default in any deployment. - Classification: Security Policy - Other - Protocol: HTTP - Platform: Multi-Platform Client Application - Release Date: January 19, 2021 38747: TCP: Microsoft Windows RDP WTSVirtualChannel Information Disclosure Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Exploits - Severity: High - Description: This filter detects an attempt to exploit an information disclosure vulnerability in Microsoft Windows Remote Desktop Protocol. - Deployments: - Deployment: Security-Optimized (Block / Notify) - References: - Common Vulnerabilities and Exposures: CVE-2019-1108 - Classification: Vulnerability - Other - Protocol: TCP (Generic) - Platform: Windows Client Application - Release Date: January 19, 2021 38750: HTTP: WordPress Contact Form 7 Plugin Enumeration - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Category: Exploits - Severity: Moderate - Description: This filter detects access to certain files in the WordPress Contact Form 7 plugin installation. - Deployment: Not enabled by default in any deployment. - References: - Common Vulnerabilities and Exposures: CVE-2020-35489 - Classification: Security Policy - Other - Protocol: HTTP - Platform: Multi-Platform Server Application or Service - Release Date: January 19, 2021 Modified Filters (logic changes): * = Enabled in Default deployments 34934: HTTP: Eaton EASYsoft E70 File Parsing Type Confusion Vulnerability (ZDI-20-1441) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "34934: ZDI-CAN-11078: Zero Day Initiative Vulnerability (Eaton EASYSoft)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 16, 2020 - Last Modified Date: January 19, 2021 34942: HTTP: Eaton EASYsoft E70 File Parsing Type Confusion Vulnerability (ZDI-20-1442) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "34942: ZDI-CAN-11080: Zero Day Initiative Vulnerability (Eaton EASYSoft)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 16, 2020 - Last Modified Date: January 19, 2021 34943: HTTP: Eaton EASYsoft E70 File Parsing Out-Of-Bounds Read Vulnerability (ZDI-20-1443) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "34943: ZDI-CAN-11082: Zero Day Initiative Vulnerability (Eaton EASYSoft)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 16, 2020 - Last Modified Date: January 19, 2021 34963: HTTP: Eaton EASYsoft E70 File Parsing Type Confusion Vulnerability (ZDI-20-1444) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "34963: ZDI-CAN-11083: Zero Day Initiative Vulnerability (Eaton EASYSoft)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 16, 2020 - Last Modified Date: January 19, 2021 * 36196: HTTP: Jenkins CI Server Groovy Pipeline Code Execution Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Detection logic updated. - Release Date: October 01, 2019 - Last Modified Date: January 19, 2021 37044: HTTP: D-Link Multiple Routers dhttpd Command Injection Vulnerability (ZDI-20-1426) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37044: ZDI-CAN-10911: Zero Day Initiative Vulnerability (D-Link Multiple Routers)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 23, 2020 - Last Modified Date: January 19, 2021 37045: HTTP: D-Link Multiple Routers dhttpd Authentication Bypass Vulnerability (ZDI-20-1427) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37045: ZDI-CAN-10912: Zero Day Initiative Vulnerability (D-Link Multiple Routers)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: June 23, 2020 - Last Modified Date: January 19, 2021 37477: HTTP: WECON LeviStudioU MultiLink WordAddr/bitaddr Buffer Overflow Vulnerability (ZDI-20-1067,1076) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37477: HTTP: WECON LeviStudioU MultiLink bitaddr Buffer Overflow Vulnerability (ZDI-20-1076)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: April 07, 2020 - Last Modified Date: January 19, 2021 37820: HTTP: Apple Safari RenderObject Use-After-Free Vulnerability (ZDI-20-1390) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37820: ZDI-CAN-11125: Zero Day Initiative Vulnerability (Apple Safari)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: July 07, 2020 - Last Modified Date: January 19, 2021 37943: HTTP: D-Link DCS-960L HNAP Authentication Bypass Vulnerability (ZDI-20-1437) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37943: ZDI-CAN-11352: Zero Day Initiative Vulnerability (D-Link DCS-960L)". - Severity changed from "Critical" to "High". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: August 11, 2020 - Last Modified Date: January 19, 2021 37944: HTTP: D-Link DCS-960L HNAP Cookie Format String Vulnerability (ZDI-20-1435,1436) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37944: ZDI-CAN-11360: Zero Day Initiative Vulnerability (D-Link DCS-960L)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: August 11, 2020 - Last Modified Date: January 19, 2021 37948: HTTP: Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Vulnerability (ZDI-20-1452) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "37948: ZDI-CAN-11486: Zero Day Initiative Vulnerability (Microsoft 3D Builder)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: August 11, 2020 - Last Modified Date: January 19, 2021 38009: HTTP: D-Link DCS-960L HTTP Authorization Header Buffer Overflow Vulnerability (ZDI-20-1438) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38009: ZDI-CAN-11359: Zero Day Initiative Vulnerability (D-Link DCS-960L)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: August 18, 2020 - Last Modified Date: January 19, 2021 38060: HTTP: NETGEAR Multiple Routers Authentication Bypass Vulnerability (ZDI-20-1451) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38060: ZDI-CAN-11355: Zero Day Initiative Vulnerability (Multiple NETGEAR Routers)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: September 01, 2020 - Last Modified Date: January 19, 2021 38067: HTTP: NETGEAR Multiple Routers mini_httpd Command Injection Vulnerability (ZDI-20-1423) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38067: ZDI-CAN-11653: Zero Day Initiative Vulnerability (Multiple NETGEAR Routers)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: September 01, 2020 - Last Modified Date: January 19, 2021 38146: HTTP: Foxit Reader XFA Template Out-Of-Bounds Write Vulnerability (ZDI-20-1415) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38146: ZDI-CAN-11727: Zero Day Initiative Vulnerability (Foxit Reader)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: September 22, 2020 - Last Modified Date: January 19, 2021 38280: HTTP: SolarWinds Network Performance Monitor WriteToFile SQL Injection Vulnerability (ZDI-21-064) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38280: ZDI-CAN-11804: Zero Day Initiative Vulnerability (SolarWinds Network Performance Monitor)". - Severity changed from "Critical" to "High". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: November 03, 2020 - Last Modified Date: January 19, 2021 38282: HTTP: SolarWinds Network Performance Monitor ExecuteExternalProgram Command Injection Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38282: ZDI-CAN-11858: Zero Day Initiative Vulnerability (SolarWinds Network Performance Monitor)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: November 03, 2020 - Last Modified Date: January 19, 2021 38283: HTTP: SolarWinds Network Performance Monitor Command Injection Vulnerability (ZDI-21-065) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38283: ZDI-CAN-11859: Zero Day Initiative Vulnerability (SolarWinds Network Performance Monitor)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: November 03, 2020 - Last Modified Date: January 19, 2021 38294: HTTP: SolarWinds Network Performance Monitor Arbitrary File Upload Vulnerability (ZDI-21-067) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38294: ZDI-CAN-11902: Zero Day Initiative Vulnerability (SolarWinds Network Performance Monitor)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: November 03, 2020 - Last Modified Date: January 19, 2021 38311: HTTP: SolarWinds Network Performance Monitor Directory Traversal Vulnerability (ZDI-21-066) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38311: ZDI-CAN-11917: Zero Day Initiative Vulnerability (SolarWinds Network Performance Monitor)". - Severity changed from "Critical" to "High". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: November 03, 2020 - Last Modified Date: January 19, 2021 38326: HTTP: Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability (ZDI-20-1355) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38326: ZDI-CAN-11957: Zero Day Initiative Vulnerability (Siemens Solid Edge Viewer)". - Description updated. - Detection logic updated. - Vulnerability references updated. - Release Date: November 03, 2020 - Last Modified Date: January 19, 2021 38516: HTTP: Apache Unomi Code Execution Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Detection logic updated. - Release Date: December 15, 2020 - Last Modified Date: January 19, 2021 38745: HTTP: SolarWinds Orion Platform Authentication Bypass Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Description updated. - Detection logic updated. - Release Date: January 12, 2021 - Last Modified Date: January 19, 2021 Modified Filters (metadata changes only): * = Enabled in Default deployments 13855: TCP: XML External Entity (XXE) Usage - IPS Version: 1.0.0 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Vulnerability references updated. - Release Date: April 28, 2014 - Last Modified Date: January 19, 2021 24705: TCP: ysoserial Java Deserialization Tool Usage (ZDI-17-953) - IPS Version: 3.1.3 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Vulnerability references updated. - Release Date: July 05, 2016 - Last Modified Date: January 19, 2021 38065: FTP: FreeBSD FTPD Exceptional Conditions Privilege Escalation Vulnerability (ZDI-20-1431) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Name changed from "38065: ZDI-CAN-11632: Zero Day Initiative Vulnerability (FreeBSD FTPD)". - Severity changed from "Critical" to "High". - Description updated. - Vulnerability references updated. - Release Date: September 01, 2020 - Last Modified Date: January 19, 2021 38638: HTTP: Open-AuditIT Professional Cross-Site Scripting Vulnerability - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: 4.0.1 and after. - Miscellaneous modification. - Release Date: December 22, 2020 - Last Modified Date: January 19, 2021 Removed Filters: 38348: ZDI-CAN-12076: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38349: ZDI-CAN-12077: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38350: ZDI-CAN-12094: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38352: ZDI-CAN-12117: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38353: ZDI-CAN-12118: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38354: ZDI-CAN-12119: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38356: ZDI-CAN-12150: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38359: ZDI-CAN-12181: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 03, 2020 - Last Modified Date: January 05, 2021 38400: ZDI-CAN-12281: Zero Day Initiative Vulnerability (Autodesk AutoCAD) - IPS Version: 3.6.2 and after. - NGFW Version: 1.0.0 and after. - TPS Version: 4.0.0 and after. - vTPS Version: Not available. - Release Date: November 17, 2020 - Last Modified Date: January 05, 2021Top of the Page