'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:cacti_deserialization_vulnerability（Rule ID：1070210388）

Release Date：2025/9/15

Rule Name：CVE-2023-30534:Cacti Deserialization Vulnerability

Severity：high

CVE ID：CVE-2023-30534

 

Descripiton：

Cacti is an open-source network traffic monitoring and analysis tool developed by the Cacti team. This tool obtains data through snmpget, uses RRDtool to draw graphics for analysis, and provides data and user management functions. Cacti versions before 1.2.25 have a code issue vulnerability that arises from the use of deserialization functions without cleaning up user input, resulting in unsafe deserialization instances.This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.