RULE(RULE ID:1005157)

Rule General Information
Release Date: 2024-12-24
Rule Name: ICMP Tunnel Detection - icmptunnel
Severity:
CVE ID:
Rule Protection Details
Description: ICMP tunnel is a technology that uses ICMP protocol to realize data covert transmission. By embedding data in ICMP echo requests and responses, attackers can bypass network firewalls to communicate and transfer data over a restricted network. This rule is used to detect the communication behavior of the ICMP tunnel tool icmptunnel.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.