Intrusion PreventionISF.CIP.Scanner
Description
This indicates detection of an attempted scan from CIP Scanner.
The signature detects for CIP requests from the scanner at a rate of 6 per second.
Affected Products
CIP Service
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Monitor the traffic from that network for any suspicious activity.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
References
https://github.com/dark-lbp/isf| ID | 49363 |
| Created | Jul 20, 2020 |
| Updated | Apr 21, 2023 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | SCADA |
| Profile Type | Anomaly |