Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Signatures are fired only during compilation.

I have noticed a lot of messages are fired only after I issue

a copy flash:IOS-S414-CLI.pkg idconf

After signature building process completes I do not see them any more.

The same I see in case of rebooting a router.

Here are theses messages:

*Jul 25 05:55:53.499: %IPS-4-SIGNATURE: Sig:5601 Subsig:1 Sev:100 Windows LSASS RPC Overflow [192.168.100.10:1343 -> 192.168.106.74:139] VRF:NONE RiskRating:85

*Jul 25 05:55:53.499: %IPS-4-SIGNATURE: Sig:6946 Subsig:0 Sev:100 Web Client Remote Code Execution Vulnerability [192.168.100.10:1343 -> 192.168.106.74:139] VRF:NONE RiskRating:90

*Jul 25 05:55:53.499: %IPS-4-SIGNATURE: Sig:7280 Subsig:0 Sev:100 Windows Server Service Remote Code Execution [192.168.100.10:1343 -> 192.168.106.74:139] VRF:NONE RiskRating:90

118
Views
0
Helpful
0
Replies
CreatePlease to create content