Intrusion PreventionTFTP.Request.NC.EXE.File
Description
This signature detectings exe file transmission over TFTP, and is not for any specific vulnerability.
It is uncommon that an exe file be transmitted by TFTP. When it happens, the user should check whether it is permitted. This could indicate possible worm activity.
Affected Products
Any unprotected Windows system may be affected.
Impact
Malicious program execution
Recommended Actions
Check whether it's permitted to download NC.EXE file to your PC over TFTP and use antivirus software to scan the system.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-04-13 | 18.057 | Sig Added |
| ID | 30187 |
| Created | Nov 30, 2011 |
| Updated | May 15, 2023 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |