Rule in Wazuh for CVE-2021-1675

[Nemo191 Nm]

Hi. Please tell me if there is a rule in Wazzub for vulnerability CVE-2021-1675?

[Nemo191 Nm]

Hi. Please tell me if there is a rule in Wazuh for vulnerability CVE-2021-1675?

среда, 17 апреля 2024 г. в 10:32:42 UTC+3, Nemo191 Nm:

[Farouk Musa]

Hello,

Wazuh pulls vulnerabilities listing from publicly available CVE repositories such as NVD, MSU, canonical etc. CVE-2021-1675 is captured by NVD as seen here. This means Wazuh vulnerability detector will identify the vulnerability in a monitored endpoint and trigger an alert 

I hope this helps.

Regards.

[Nemo191 Nm]

I need a rule to detect this vulnerability CVE-2021-1675, can it be found in the standard rules?

среда, 17 апреля 2024 г. в 11:28:03 UTC+3, Farouk Musa:

[Farouk Musa]

Yes it does. You can also use the field vulnerability.cve to create a filter.