'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app: microsoft_exchange_server_elevation_of_privilege_rce_vul（Rule ID：1070210229）

Release Date：2025/9/15

Rule Name：CVE-2018-8581: Microsoft Exchange Server Elevation of Privilege Vulnerability

Severity：high

CVE ID：CVE-2018-8581

 

Descripiton：

Microsoft Exchange Server is a set of e-mail service programs of Microsoft Corporation of the United States, which provides mail access, storage, forwarding, voice mail, mail filtering and other functions. An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker can exploit this vulnerability to impersonate any other account on the Exchange server by implementing a man-in-the-middle attack and sending an authentication request. The following versions are affected: Microsoft Exchange Server 2010, Exchange Server 2013, Exchange Server 2016, Exchange Server 2019. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.