On this page
Atomicorp WAF Rule 390811
Rule Summary
- Rule ID: 390811
- Status: Active
- Alert message: Atomicorp.com WAF Rules: Possible attack: Generic Attempt to insert shell code
- Observed CWEs: CWE-77 (1), CWE-78 (2), CWE-434 (1)
- Revision: 2
- Rule severity: Critical (2)
- Request surfaces: Request URI
- Rule action: deny
- HTTP status: 403
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “Possible attack: Generic Attempt to insert shell code” in the request URI. denies matching traffic with HTTP status 403.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2020-28188 | TerraMaster TOS 4.2.06 or lower - Unauthenticated Remote Code Execution | tos | 9.8 (v3.1) | Critical |
| CVE-2020-28871 | Monitorr unauthenticated Remote Code Execution (RCE) | monitorr | 9.8 (v3.1) | Critical |
| CVE-2020-35665 | TerraMaster TOS 4.2.06 or lower - Unauthenticated Remote Code Execution | terramaster operating system | 9.8 (v3.1) | Critical |
| CVE-2023-34960 | Chamilo unauthenticated command injection in PowerPoint upload | chamilo | 9.8 (v3.1) | Critical |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-77 | CVE-2023-34960 |
| CWE-78 | CVE-2020-28188 , CVE-2020-35665 |
| CWE-434 | CVE-2020-28871 |