本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.752。

规则新增或更新列表如下:
修改: 10291 Apache HTTP Server畸形Range选项处理远程拒绝服务漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 10291 Apache HTTP Server Range Denial of Service Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.751。

规则新增或更新列表如下:
新增：24365 ThinkPHP 5.x远程命令执行漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24365 ThinkPHP 5.x Remote Command Execution Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.750。

规则新增或更新列表如下:
修改: 30131 Microsoft FrontPage fp30reg.dll漏洞扫描探测

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 30131 Microsoft FrontPage fp30reg.dll Vulnerability Detection

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.749。

规则新增或更新列表如下:
修改: 21274 Microsoft Report Viewer 信息泄露漏洞 (CVE-2011-1976)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 21274 Microsoft Report Viewer Information Disclosure Vulnerability (CVE-2011-1976)
Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.748。

规则新增或更新列表如下:
修改: 20905 WEBinsta FM login.php远程文件包含攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20905 WEBinsta FM login.php Remote File Inclusion

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.747。

规则新增或更新列表如下:
新增: 24333 Apache Struts2 Commons FileUpload反序列远程代码执行漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24333 Apache Struts2 Commons FileUpload Unserialization Remote Code Execution Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.746。

规则新增或更新列表如下:
修改: 41489 后门程序Doublepulsar通信

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41489 Backdoor Doublepulsar Communication

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.745。

规则新增或更新列表如下:
修改: 20921 Microsoft DirectX SAMI及WAV/AVI文件解析远程代码执行漏洞(MS07-064)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20921 Microsoft DirectX SAMI and WAV/AVI File Parsing Stack Buffer Overflow Vulnerability(MS07-064)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.744。

规则新增或更新列表如下:
修改: 24292 Zoho ManageEngine Desktop Central 任意文件删除

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 24292 Zoho ManageEngine Desktop Central Arbitrary File Deletion
Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.743。

规则新增或更新列表如下:
修改: 10291 Apache HTTP Server畸形Range选项处理远程拒绝服务漏

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 10291 Apache HTTP Server Range Denial of Service Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.742。

规则新增或更新列表如下:
修改: 30441 Microsoft IIS 5.0 .printer ISAPI扩展映射远程缓冲区溢出攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20380 30441 Microsoft IIS 5.0 .printer ISAPI Extension Mapping Remote Buffer Overflow

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.741。

规则新增或更新列表如下:
修改: 20380 Real Networks Helix Universal Server RTSP URI处理远程缓冲区溢出攻击;

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Update:
20380 Real Networks Helix Universal Server RTSP URI handles remote buffer overflow attacks;

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.740。

规则新增或更新列表如下:
修改: 20569 Oracle 9i/10g XML组件存储过程缓冲区溢出攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Update: 20569 Oracle 9i/10g XML Component Stored Procedure Buffer Overflow

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.739。

规则新增或更新列表如下:
新增: 24263 Apache Hadoop YARN ResourceManager远程命令执行漏洞
新增: 24309 Apache ActiveMQ Fileserver文件上传目录遍历漏洞(CVE-2016-3088)
新增: 41618 恶意软件Xbash C2服务器通信
新增: 41619 恶意软件Xbash向C2服务器上传扫描结果信息

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified:
add:24263 Apache Hadoop YARN ResourceManager Remote Command Execution Vulnerability
add:24309 Apache ActiveMQ Fileserver File Upload Directory Traversal Vulnerability(CVE-2016-3088)
add:41618 Malware Xbash C2 Server Communication
add:41619 Malware Xbash uploads scan result information to C2 server
Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.737。

规则新增或更新列表如下:
修改: 24292 Zoho ManageEngine Desktop Central 任意文件删除

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Update: 24292 Zoho ManageEngine Desktop Central Arbitrary File Deletion

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.736。

规则新增或更新列表如下:
新增: 24304 Trend Micro Control Manager SQL注入漏洞(CVE-2018-3602)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24304 Trend Micro Control Manager SQL Injection Vulnerability (CVE-2018-3602)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.735。

规则新增或更新列表如下:
新增: 21274 Microsoft Report Viewer 信息泄露漏洞 (CVE-2011-1976)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 21274 Microsoft Report Viewer Information Disclosure Vulnerability(CVE-2011-1976)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.734。

规则新增或更新列表如下:
新增: 24302 可疑XML外部实体(XXE)注入攻击尝试

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24302 Suspicious XML External Entity(XXE) Injection Attempt

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.733。

规则新增或更新列表如下:
修改: 50066 RLOGIN服务信任用户认证;

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 50066 The RLOGIN service trusts user authentication;

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.732。

规则新增或更新列表如下:
新增: 24298 Struts2远程命令执行漏洞(CVE-2018-11776)(S2-057)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24298 Struts2 Remote Command Execution Vulnerability(CVE-2018-11776)(S2-057)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.730。

规则新增或更新列表如下:
新增: 41601 恶意程序Linux/Fbot.Linux.Agent.fy_a网络通信
41602 恶意程序windows/hellbot_a网络通信
注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41601 Malicious Program Linux/Fbot.Linux.Agent.fy_a Network Communications
41602 Malicious Program windows/hellbot_a Network Communications

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.729。

规则新增或更新列表如下:
新增: 24289 Zoho ManageEngine ApplicationManager testCredential.do 命令注入(CVE-2018-7890)
修改: 24233 D-Link Router service.cgi 任意代码执行漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 24289 Zoho ManageEngine ApplicationManager testCredential.do Command Injection(CVE-2018-7890)
24233 D-Link Router service.cgi Arbitrary Code Execution Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.727。

规则新增或更新列表如下:
修改: 30214 Microsoft IIS .idq ISAPI扩展获取绝对路径攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 30214 Microsoft IIS .idq ISAPI Extension Absolute Path Disclosure

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.725。

规则新增或更新列表如下:
新增: 24284 Cisco Prime Infrastructure和DCNM目录遍历漏洞(CVE-2018-0258)
新增: 24286 WebLogic 任意文件上传远程代码执行漏洞(CVE-2018-2894)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24284 Cisco Prime Infrastructure And DCNM Directory Traversal Vulnerability(CVE-2018-0258)
Added: 24286 WebLogic Arbitrary File Upload Remote Code Execution Vulnerability(CVE-2018-2894)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.724。

规则新增或更新列表如下:
修改: 24174 WebLogic WLS 组件远程命令执行漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 24174 WebLogic WLS Component Remote Command Execution Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.723。

规则新增或更新列表如下:
修改: 30149 Microsoft Index Server .htw读取文件漏洞扫描探测


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 30149 Microsoft Index Server .htw File Reading Vulnerability Detection


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.722。

规则新增或更新列表如下:
修改: 30435 Web服务访问password.txt文件获取数据信息


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 30435 Web Service password.txt Access Data Disclosure


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.721。

规则新增或更新列表如下:
修改: 20904 MyBB calendar.php脚本远程SQL注入攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20904 MyBB calendar.php Script Remote SQL Injection


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.720。

规则新增或更新列表如下:
修改: 23843 Cisco ASA防火墙SNMP溢出漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23843 Cisco ASA SNMP OID parsing stack buffer overflow Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.719。

规则新增或更新列表如下:
修改: 20905 WEBinsta FM login.php远程文件包含攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20905 WEBinsta FM login.php Remote File Inclusion


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.718。

规则新增或更新列表如下:
修改: 20907 WordPress插件远程文件包含攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20907 WordPress Plugin Remote File Inclusion


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.717。

规则新增或更新列表如下:
修改: 24255 Web服务远程命令执行攻击
修改: 10471 TCP畸形报文圣诞树攻击



注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 24255 Web Service Remote Command Execution Attack
Modified: 10471 Christmas Tree Attack



Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.716。

规则新增或更新列表如下:
新增: 49019 挖矿蠕虫WannaMine下载行为
修改: 10471 TCP畸形报文圣诞树攻击



注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 49019 Miner Worm WannaMine Download Behavior
Modified: 10471 Christmas Tree Attack



Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.715。

规则新增或更新列表如下:
新增: 24255 Web服务远程命令执行攻击
新增: 24259 TBK DVR硬盘录像机认证绕过漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24255 Web Service Remote Command Execution Attack
Added: 24259 TBK DVR Devices Authentication Bypass Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.714。

规则新增或更新列表如下:
修改: 41523 门罗币挖矿程序网络通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41523 Monero XMR Mining Programs Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.713。

规则新增或更新列表如下:
新增: 24255 Web服务远程命令执行攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24255 Web Service Remote Command Execution Attack


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.712。

规则新增或更新列表如下:
修改: 21460 木马后门程序Backdoor.ASP.Ace ASP Web访问


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 21460 木马后门程序Backdoor.ASP.Ace ASP Web访问


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.711。

规则新增或更新列表如下:
新增: 24250 Drupal核心远程代码执行漏洞
新增: 50546 Allen Bradley Micrologix 1400 Series B Session泄露风险


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24250 Drupal Core Remote Code Execution Vulnerability
Added: 50546 Allen Bradley Micrologix 1400 Series B Session Revelation Risk


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.710。

规则新增或更新列表如下:
修改: 23614 Oracle Weblogic Server Java反序列化漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23614 Oracle Weblogic Server Java Unserialization Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.709。

规则新增或更新列表如下:
新增: 24246 Cisco IOS and IOS XE Software Smart Install 远程代码执行漏洞
新增: 10480 Allen Bradley Micrologix 1400 Series B Ethernet功能拒绝服务漏洞
新增: 24245 锐捷网关设备远程命令执行漏洞
修改: 41386 TrickBot银行木马通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24246 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Added: 10480 Allen Bradley Micrologix 1400 Series B Ethernet Card Malformed Packet Denial of Service Vulnerability
Added: 24245 Ruijie Gateway Device Remote Command Execution Vulnerability
Modified: 41386 TrickBot Banking Trojan Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.708。

规则新增或更新列表如下:
修改: 41534 网页包含挖矿脚本代码


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41534 Web Page Contains Mining Script Code


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.707。

规则新增或更新列表如下:
新增: 41542 PHP木马文件phpspy2014上传
修改: 23612 Jboss JMX Java反序列化漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41542 PHP Trojan File phpspy2014 Uploading
Modified: 23612 Jboss JMX Java Unserialization Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.706。

规则新增或更新列表如下:
修改: 20610 DistCC守护程序远程命令执行攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20610 DistCC Daemon Remote Command Execution


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.705。

规则新增或更新列表如下:
修改: 24186 华为HG532路由器远程命令执行漏洞(CVE-2017-17215)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 24186 HUAWEI HG532 Routers Remote Command Execution Vulnerability(CVE-2017-17215)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.704。

规则新增或更新列表如下:
新增: 41533 Gafgyt僵尸网络通信行
新增: 41534 网页包含挖矿脚本代码
修改: 24105 Spring Data REST远程代码执行漏洞(CVE-2017-8046)
修改: 50545 比特币矿机尝试连接矿池服务器


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41533 Botnet Gafgyt Communication
Added: 41534 Web Page Contains Mining Script Code
Modified: 24105 Spring Data REST Remote Code Execution Vulnerability(CVE-2017-8046)
Modified: 50545 Bitcoin Miners Attempt to Connect the Mining Pool


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.702。

规则新增或更新列表如下:
新增: 24223 NetEx HyperIP 6.1.0 Post-Auth 远程命令执行
新增: 24224 CMS Made Simple 2.1.6 远程代码执行漏洞
新增: 24225 AsusWRT LAN 未经身份验证的远程代码执行漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24223 NetEx HyperIP Post-Auth Command Execution
Added: 24223 CMS Made Simple 2.1.6 - Remote Code Execution Vulnerability
Added: 24223 AsusWRT LAN Unauthenticated Remote Code Execution Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.701。

规则新增或更新列表如下:
修改: 40335 木马后门程序wollf木马建立连接


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 40335 Backdoor/Trojan wollf Connection


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.700。

规则新增或更新列表如下:
修改: 20556 HP OpenView网络节点管理器远程命令执行攻击(CVE-2005-2773)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20556 HP OpenView Network Node Manager Remote Command Execution(CVE-2005-2773)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.699。

规则新增或更新列表如下:
新增: 24209 施耐德派尔高Sarix Pro摄像头session.cgi程序缓冲区溢出漏洞
新增: 24210 施耐德派尔高Sarix enhanced摄像头命令执行漏洞
新增: 24213 施耐德派尔高Sarix Pro网络摄像头web界面空帐号密码账号漏洞
新增: 24217 施耐德派尔高Sarix Pro网络摄像头import.cgi XML实体注入漏洞
新增: 24218 施耐德派尔高Sarix Pro网络摄像头set_param程序system.opkg.remove命令执行漏洞
新增: 24219 施耐德派尔高Sarix Pro网络摄像头set_param程序network.ieee8021x.delete_certs命令执行漏洞
修改: 23896 Memcached Append/Prepend操作整数溢出漏洞(CVE-2016-8704)
修改: 23897 Memcached Update整数溢出漏洞(CVE-2016-8705)
修改: 23898 Memcached SASL认证整数溢出漏洞(CVE-2016-8706)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24209 Schneider Pelco Sarix Pro camera session.cgi program buffer overflow vulnerability
Added: 24210 Schneider Pelco Sarix enhanced Camera Command Execution Vulnerability
Added: 24213 Schneider Pelco Sarix Pro webcam's web management interface has an empty username and password account
Added: 24217 Schneider Pelco Sarix Pro Webcam import.cgi XML Entity Injection Vulnerability
Added: 24218 Schneider Pelco Sarix Pro webcam set_param program system.opkg.remove Command Execution Vulnerability
Added: 24219 Schneider Pelco Sarix Pro webcam set_param program network.ieee8021x.delete_certs Command Execution Vulnerability
Modified: 23896 Memcached Append/Prepend Operations Integer Overflow Vulnerability(CVE-2016-8704)
Modified: 23897 Memcached Update Integer Overflow Vulnerability(CVE-2016-8705)
Modified: 23898 Memcached SASL Authentication Integer Overflow Vulnerability(CVE-2016-8706)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.698。

规则新增或更新列表如下:
修改: 41523 门罗币挖矿程序网络通信
修改: 50545 比特币矿机尝试连接矿池服务器


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41523 Monero XMR Mining Programs Communication
Modified: 50545 Bitcoin Miners Attempt to Connect the Mining Pool


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.697。

规则新增或更新列表如下:
新增: 49017 恶意软件RubyMiner挖矿程序连接服务器
新增: 24200 Microsoft Internet Explorer/Edge脚本引擎远程内存破坏漏洞(CVE-2018-0762)
新增: 10471 TCP畸形报文圣诞树攻击
修改: 41523 门罗币挖矿程序网络通信
修改: 10274 Smurf拒绝服务攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 49017 Malware RubyMiner Connect to Server
Added: 24200 Microsoft Internet Explorer/Edge Script Engine Memory Corruption Vulnerability(CVE-2018-0762)
Added: 10471 Christmas Tree Attack
Modified: 41523 Monero XMR Mining Programs Communication
Modified: 10274 Smurf denial of service


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.696。

规则新增或更新列表如下:
新增: 24200 Microsoft Internet Explorer/Edge脚本引擎远程内存破坏漏洞(CVE-2018-0762)
新增: 10471 TCP畸形报文圣诞树攻击
新增: 24198 Microsoft Edge Scripting Engine内存破坏漏洞(CVE-2018-0776)
新增: 24199 Microsoft Edge Scripting Engine Remote内存破坏漏洞(CVE-2018-0773)
新增: 24197 Microsoft Edge Scripting Engine内存破坏漏洞(CVE-2018-0758)
新增: 24196 Microsoft Edge类型混淆漏洞(CVE-2018-0775)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24200 Microsoft Internet Explorer/Edge Script Engine Memory Corruption Vulnerability(CVE-2018-0762)
Added: 10471 Christmas Tree Attack
Added: 24198 Microsoft Edge Scripting Engine Memory Corruption Vulnerability(CVE-2018-0776)
Added: 24199 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2018-0773)
Added: 24197 Microsoft Edge Scripting Engine Memory Corruption Vulnerability(CVE-2018-0758)
Added: 24196 Microsoft Edge type confusion vulnerability(CVE-2018-0775)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.695。

规则新增或更新列表如下:
新增: 24195 浏览器CPU Spectre 漏洞(CVE-2017-5753 and CVE-2017-5715)
新增: 41525 IoT蠕虫DarkCat传播
修改: 24174 WebLogic WLS 组件远程命令执行漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24195 Browser CPU Spectre vulnerability(CVE-2017-5753 and CVE-2017-5715)
Added: 41525 IoT Worm DarkCat Spreading
Modified: 24174 WebLogic WLS Component Remote Command Execution Vulnerability



Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.693。

规则新增或更新列表如下:
新增: 24186 华为HG532路由器远程命令执行漏洞(CVE-2017-17215)
新增: 24187 vBulletin routestring Unauthenticated远程代码执行漏洞
新增: 24189 Realtek rtl81xx SDK远程代码执行漏洞(CVE-2014-8361)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24186 HUAWEI HG532 Routers Remote Command Execution Vulnerability(CVE-2017-17215)
Added: 24187 vBulletin routestring Unauthenticated Remote Code Execution Vulnerability
Added: 24189 Realtek rtl81xx SDK Remote Code Execution Vulnerability(CVE-2014-8361)



Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.692。

规则新增或更新列表如下:
新增: 24163 GoAhead httpd LD_PRELOAD 远程代码执行漏洞
修改: 41523 门罗币挖矿程序网络通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24163 GoAhead httpd LD_PRELOAD Remote Code Execution Vulnerability
Modified: 41523 Monero XMR Mining Programs Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.690。

规则新增或更新列表如下:
新增: 24174 WebLogic WLS 组件远程命令执行漏洞
新增: 41523 门罗币挖矿程序网络通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24174 WebLogic WLS Component Remote Command Execution Vulnerability
Added: 41523 Monero XMR Mining Programs Communication

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.689。

规则新增或更新列表如下:
修改: 40023 木马后门程序DeepThroat木马通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 40023 Backdoor/Trojan DeepThroat Communication

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.688。

规则新增或更新列表如下:
新增: 24163 GoAhead httpd LD_PRELOAD 远程代码执行漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24163 GoAhead httpd LD_PRELOAD Remote Code Execution Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.687。

规则新增或更新列表如下:
新增: 41523 门罗币挖矿程序网络通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41523 Monero XMR Mining Programs Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.686。

规则新增或更新列表如下:
新增：24146 JbossAS反序列化远程命令执行漏洞(CVE-2017-12149)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24146 JbossAS Serialized Object Remote Code Execution Vulnerability(CVE-2017-12149)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.685。

规则新增或更新列表如下:
修改: 41498 暗云木马通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41498 Dark clouds Trojan Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.684。

规则新增或更新列表如下:
新增: 24123 西门子SICAM RTUs SM-2556 COM 模块跨站脚本执行漏洞


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24123 Siemens SICAM RTUs SM-2556 COM Modules XSS Vulnerability


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.683。

规则新增或更新列表如下:
修改: 10190 CA BrightStor ARCserve Backup caloggerd.exe远程拒绝服务攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 10190 CA BrightStor ARCserve Backup caloggerd.exe Remote Denial of Service Attack


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.682。

规则新增或更新列表如下:
新增: 24119 FasterXML Jackson-databind反序列化代码执行漏洞(CVE-2017-15095)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24119 FasterXML Jackson-databind Deserialization Remote Code Execution Vulnerability(CVE-2017-15095)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.681。

规则新增或更新列表如下:
新增: 50545 比特币矿机尝试连接矿池服务器

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 50545 Bitcoin Miners Attempt to Connect the Mining Pool

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.680。

规则新增或更新列表如下:
新增: 41521 DownLoader:Win32/flexible恶意程序通信
新增: 41522 Spyware:Win32/flexible恶意程序通信
修改: 24109 Apache Solr/Lucene信息泄露及远程代码执行漏洞(CVE-2017-12629)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41521 DownLoader:Win32/flexible Communication
Added: 41522 Spyware:Win32/flexible Communication
Modified: 24109 Apache Solr/Lucene Information Disclosure and Remote Code Execution Vulnerabilities(CVE-2017-12629)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.679。

规则新增或更新列表如下:
新增: 24109 Apache Solr/Lucene信息泄露及远程代码执行漏洞(CVE-2017-12629)
新增: 41520 恶意程序Downloader:Win32/Carbanak-20171016-2C0CFDC5B5653CB3E8B0F8EEEF55FC32网络通信

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24109 Apache Solr/Lucene Information Disclosure and Remote Code Execution Vulnerabilities(CVE-2017-12629)
Added: 41520 Malicious File Downloader:Win32/Carbanak-20171016-2C0CFDC5B5653CB3E8B0F8EEEF55FC32 Network Communication

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.678。

规则新增或更新列表如下:
新增: 24106 Apache Tomcat远程代码执行漏洞（CVE-2017-12617）

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24106 Apache Tomcat remote Code Execution Vulnerability（CVE-2017-12617）

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.677。

规则新增或更新列表如下:
新增: 30700 Microsoft Windows XXE 信息泄露漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 30700 Microsoft Windows XXE Information Disclosure

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.676。

规则新增或更新列表如下:
新增: 24105 Spring Data REST远程代码执行漏洞(CVE-2017-8046)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24105 Spring Data REST Remote Code Execution Vulnerability(CVE-2017-8046)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.675。

规则新增或更新列表如下:
修改: 23579 Elasticsearch 目录遍历漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23579 Elasticsearch Path Traversal Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.674。

规则新增或更新列表如下:
新增: 41507 konni木马链接
新增: 24101 Apache Tomcat 远程代码执行漏洞（CVE-2017-12615）

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41507 konni trojan connect
Added: 24101 Apache Tomcat Remote Code Execution Vulnerability（CVE-2017-12615）

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.672。

规则新增或更新列表如下:
修改: 24098 Apache Struts2 REST插件远程代码执行漏洞(S2-052)
修改: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll后门程序通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 24098 Apache Struts2 REST Plugin Remote Code Execution Vulnerability(S2-052)
Modified: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll Backdoor Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.671。

规则新增或更新列表如下:
新增: 24098 Apache Struts2 REST插件远程代码执行漏洞(S2-052)
修改: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll后门程序通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24098 Apache Struts2 REST Plugin Remote Code Execution Vulnerability(S2-052)
Modified: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll Backdoor Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.669。

规则新增或更新列表如下:
修改: 10190 CA BrightStor ARCserve Backup caloggerd.exe远程拒绝服务攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 10190 CA BrightStor ARCserve Backup caloggerd.exe Remote Denial of Service Attack


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.668。


规则新增或更新列表如下:
新增: 41503 Microsoft Edge NetSarang XShell/Xmanager/Xftp nssock2.dll后门程序通信
修改: 41388 Mirai僵尸连接服务器


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll Backdoor Communication
Modified: 41388 Mirai Botnet Connecting to the Server


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.667。

规则新增或更新列表如下:
修改: 41388 Mirai僵尸连接服务器

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41388 Mirai Botnet Connecting to the Server

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.666。

规则新增或更新列表如下:
新增: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll后门程序通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41503 NetSarang XShell/Xmanager/Xftp nssock2.dll Backdoor Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.664。

规则新增或更新列表如下:
修改: 23994 Windows SMB远程代码执行漏洞(Shadow Brokers EternalBlue)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23994 Windows SMB Remote Code Execution Vulnerability(Shadow Brokers EternalBlue)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.663。

规则新增或更新列表如下:
修改: 23993 Microsoft Office OLE功能远程代码执行漏洞(CVE-2017-0199)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23993 Microsoft Office OLE Feature Remote Code Execution Vulnerability(CVE-2017-0199)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.662。

规则新增或更新列表如下:
新增: 24082 Microsoft Windows OLE远程代码执行漏洞(CVE-2017-8487)(Englishmansdentis)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24082 Microsoft Windows OLE Remote Code Execution Vulnerability(CVE-2017-8487)(Englishmansdentis)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.661。

规则新增或更新列表如下:
新增: 24078 Microsoft Edge 远程内存破坏漏洞(CVE-2017-8605)
新增: 24079 Microsoft Edge 远程代码执行漏洞（CVE-2017-8619）
新增: 24080 Microsoft Edge 远程代码执行漏洞(CVE-2017-8617)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24078 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2017-8605)
Added: 24079 Microsoft Edge Remote Code Execution Vulnerability(CVE-2017-8619)
Added: 41496 Microsoft Edge Remote Code Execution Vulnerability(CVE-2017-8617)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.660。


该升级包新增/改进的规则有:
新增：24073 HP Enterprise Operations Orchestration远程代码执行漏洞
修改：10453 Apache HTTP Server mod_http2 空指针间接引用漏洞(CVE-2017-7659)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .


List of added or modified signatures:
Added: 24073 HP Enterprise Operations Orchestration Remote Code Execution Vulnerability
Modified: 10453 Apache HTTP Server mod_http2 Null Pointer Dereference Vulnerability(CVE-2017-7659)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.659。


该升级包新增/改进的规则有:
新增：10453 Apache HTTP Server mod_http2 空指针间接引用漏洞(CVE-2017-7659)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:10453 Apache HTTP Server mod_http2 Null Pointer Dereference Vulnerability(CVE-2017-7659)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.657。

规则新增或更新列表如下:
新增: 10451 PHP Exception toString反序列化拒绝服务攻击漏洞
新增: 24064 VegaDNS axfr_get.php命令注入漏洞
修改: 23614 Oracle Weblogic Server Java反序列化漏洞
修改: 23993 Microsoft Office OLE功能远程代码执行漏洞(CVE-2017-0199)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 10451 PHP exception toString Unserialization Denial of Service
Added: 24064 VegaDNS axfr_get.php Command Injection Vulnerability
Modified: 23614 Oracle Weblogic Server Java Unserialization Vulnerability
Modified: 23993 Microsoft Office OLE Feature Remote Code Execution Vulnerability(CVE-2017-0199)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.656。

规则新增或更新列表如下:
新增: 24059 Microsoft Windows LNK远程代码执行漏洞(CVE-2017-8464)
新增: 24060 Microsoft Edge远程内存破坏漏洞(CVE-2017-8496)
新增: 24061 Microsoft Edge远程内存破坏漏洞(CVE-2017-8497)
新增: 24062 Microsoft Internet Explorer/Edge远程内存破坏漏洞(CVE-2017-8524)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24059 Microsoft Windows LNK Remote Code Execution Vulnerability(CVE-2017-8464)
Added: 24060 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2017-8496)
Added: 24061 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2017-8497)
Added: 24062 Microsoft Internet Explorer/Edge Remote Memory Corruption Vulnerability(CVE-2017-8524)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.655。

规则新增或更新列表如下:
修改: 23005 POP3S 服务暴力猜测用户口令


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23005 POP3S Service User Password Brute Forcce

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.654。

规则新增或更新列表如下:
新增: 41498 暗云木马通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41498 Dark clouds Trojan Communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.652。

规则新增或更新列表如下:
新增: 24007 Windows 远程桌面代码执行漏洞(Shadow Broker ESTEEMAUDIT)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24007 Windows RDP Code Execution Vulnerability(Shadow Broker ESTEEMAUDIT)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.649。

规则新增或更新列表如下:
修改: 41496 Blackmoon银行木马通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 41496 Blackmoon Banking Trojan Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.650。

规则新增或更新列表如下:
新增: 24005 Samba远程代码执行漏洞(CVE-2017-7494)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 24005 Samba Remote Code Execution Vulnerability(CVE-2017-7494)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.649。

规则新增或更新列表如下:
新增: 41496 Blackmoon银行木马通信


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41496 Blackmoon Banking Trojan Communication


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.648。

规则新增或更新列表如下:
新增: 23999 Microsoft Edge远程内存破坏漏洞(CVE-2017-0236)
新增: 24000 Microsoft Edge远程内存破坏漏洞(CVE-2017-0240)
修改: 40379 DDOS工具TFN主控端向分布端发送指令


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23999 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2017-0236)
Added: 24000 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2017-0240)
Modified: 40379 DDOS Tool TFN Console Sending Command to Distributed End


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.647。

规则新增或更新列表如下:
新增: 41490 artemis僵尸网络肉鸡上线
新增: 41491 UUgangT僵尸网络肉鸡上线
新增: 41494 WinHelp32僵尸网络肉鸡上线
新增: 41495 9527win僵尸网络肉鸡上线

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41490 Zombies of Botnet artemis Connect to the Server
Added: 41491 Zombies of Botnet UUgangT Connect to the Server
Added: 41494 Zombies of Botnet WinHelp32 Connect to the Server
Added: 41495 Zombies of Botnet 9527win Connect to the Server


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.646。

规则新增或更新列表如下:
新增: 23998 WordPress远程命令执行漏洞(PHPMailer)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23998 WordPress Remote Code Execution Vulnerability(PHPMailer)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.644。

规则新增或更新列表如下:
新增: 23997 Jackson-Databind框架json反序列化代码执行漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23997 Jackson-Databind framework json deserialization code execution vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.643。

规则新增或更新列表如下:
新增: 41489 后门程序Doublepulsar通信
新增: 23993 Microsoft Office OLE功能远程代码执行漏洞(CVE-2017-0199)
修改: 41388 Mirai僵尸连接服务器

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41489 Backdoor Doublepulsar Communication
Added: 23993 Microsoft Office OLE Feature Remote Code Execution Vulnerability(CVE-2017-0199)
Modified: 41388 Mirai Botnet Connecting to the Server

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.642。

规则新增或更新列表如下:
新增: 23994 Windows SMB远程代码执行漏洞(Shadow Brokers EternalBlue)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23994 Windows SMB Remote Code Execution Vulnerability(Shadow Brokers EternalBlue)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.640。

规则新增或更新列表如下:
新增: 41488 felismus木马恶意通信
新增: 30695 施耐德Modicon TM221CE16R固件1.3.3.3远程密码信息泄露漏洞

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41488 Trojan felismus malicious communication
Added: 30695 Schneider Modicon TM221CE16R firmware 1.3.3.3 Password Information Disclosure Vulnerability

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.639。

规则新增或更新列表如下:
新增: 41487 Shamoon2木马恶意通信

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41487 Trojan Shamoon2 malicious communication

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.638。

规则新增或更新列表如下:
新增: 23992 IIS 6.0远程代码执行漏洞(CVE-2017-7269)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23992 IIS 6.0Remote Code Execution Vulnerability(CVE-2017-7269)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.635。

规则新增或更新列表如下:
新增: 23991 Fastjson远程代码执行漏洞
修改: 23986 Struts2远程命令执行漏洞(s2-045)(s2-046)(CVE-2017-5638)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23991 Fastjson Remote Code Execution Vulnerability
Modified: 23986 Struts2 Remote Command Execution Vulnerability(s2-045)(s2-046)(CVE-2017-5638)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.633。

规则新增或更新列表如下:
新增: 41484 大华监控设备非授权访问漏洞
修改: 23986 Struts2远程命令执行漏洞(s2-045)(CVE-2017-5638)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41484 Dahua DVR/NVR/IP Camera Unauthorized Access Vulnerability
Modified: 23986 Struts2 Remote Command Execution Vulnerability(s2-045)(CVE-2017-5638)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.631。

规则新增或更新列表如下:
修改: 23986 Struts2远程命令执行漏洞(s2-045)(CVE-2017-5638)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23986 Struts2 Remote Command Execution Vulnerability(s2-045)(CVE-2017-5638)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.630。

规则新增或更新列表如下:
修改: 23986 Struts2远程命令执行漏洞(s2-045)(CVE-2017-5638)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23986 Struts2 Remote Command Execution Vulnerability(s2-045)(CVE-2017-5638)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.629。

规则新增或更新列表如下:
新增: 23986 Struts2远程命令执行漏洞(s2-045)(CVE-2017-5638)
新增: 41478 Baidu下载器被捆绑恶意代码

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23986 Struts2 Remote Command Execution Vulnerability(s2-045)(CVE-2017-5638)
Added: 41478 Baidu downloader is bundled with malicious code


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.627。

规则新增或更新列表如下:
修改: 10132 Microsoft IIS WebDAV超长请求远程拒绝服务攻击


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modify: 10132 Microsoft IIS WebDAV Over-long Request Remote Denial of Service

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.626。

规则新增或更新列表如下:
新增: 23980 大华摄像头远程密码信息泄露漏洞
修改: 41388 Mirai僵尸连接服务器


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23980 DAHUA Camera Password Information Disclosure Vulnerability
Modified: 41388 Mirai Botnet Connecting to the Server


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.625。

规则新增或更新列表如下:
修改: 23833 phpMyAdmin远程代码执行漏洞(CVE-2016-5734)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23833 phpMyAdmin Remote Code Execution Vulnerability(CVE-2016-5734)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.624。

规则新增或更新列表如下:
修改: 10135 Microsoft Windows畸形IGMPv3报文远程拒绝服务攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modify: 10135 Microsoft Windows Malformed IGMPv3 Message Remote Denial of Service

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.623。

规则新增或更新列表如下:
修改: 23833 phpMyAdmin远程代码执行漏洞(CVE-2016-5734)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23833 phpMyAdmin Remote Code Execution Vulnerability(CVE-2016-5734)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.622。

规则新增或更新列表如下:
新增: 23976 Adobe Flash Player 堆缓冲区溢出漏洞(CVE-2017-2933)(APSB17-02)
新增: 23977 Adobe Flash Player 堆缓冲区溢出漏洞(CVE-2017-2934)(APSB17-02)
新增: 23978 Adobe Flash Player 堆缓冲区溢出漏洞(CVE-2017-2935)(APSB17-02)


注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23976 Adobe Flash Player Heap Overflow Vulnerability(CVE-2017-2933)(APSB17-02)
Added: 23977 Adobe Flash Player Heap Overflow Vulnerability(CVE-2017-2934)(APSB17-02)
Added: 23978 Adobe Flash Player Heap Buffer Overflow Vulnerability(CVE-2017-2935)(APSB17-02)


Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.621。

规则新增或更新列表如下:
修改: 40379 DDOS工具TFN主控端向分布端发送指令
修改: 40375 DDOS工具Shaft分布端和主控端通信

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modify: 40379 DDOS Tool TFN Console Sending Command to Distributed End
Modify: 40375 Communication Between DDOS Shaft Distributed End and Console

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.620。

规则新增或更新列表如下:
修改: 23971 HTTP请求X-Forwarded-For字段注入攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modify: 23971 HTTP Request X-Forwarded-For Field Injection Attack

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.619。

规则新增或更新列表如下:
修改: 10255 Microsoft IIS FTP服务拒绝服务攻击

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modify: 10255 Microsoft IIS FTP Service Denial of Service

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.618。

规则新增或更新列表如下:
新增：23970 NETGEAR Management System NMS300任意文件上传漏洞
新增：23963 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2016-7283)(MS16-144)
新增：23964 Microsoft Edge远程信息泄露漏洞(CVE-2016-7206)(MS16-145)
新增：23965 Microsoft Edge远程内存破坏漏洞(CVE-2016-7286)(MS16-145)
新增：23966 Microsoft Edge远程内存破坏漏洞(CVE-2016-7288)(MS16-145)
新增：23967 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2016-7287)(MS16-144)

注意事项：
1.该升级包升级后需手动重启引擎，会造成网络瞬断，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23970 NETGEAR Management System NMS300 Arbitrary File Upload Vulnerability
Added: 23963 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-7283)(MS16-144)
Added: 23964 Microsoft Edge Information Disclosure Vulnerability(CVE-2016-7206)(MS16-145)
Added: 23965 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2016-7286)(MS16-145)
Added: 23966 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2016-7288)(MS16-145)
Added: 23967 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-7287)(MS16-144)

Notes:
1.The engine must be restarted manually after the upgrade package is imported, and this will cause a momentary network interruption, please choose an appropriate time to upgrade.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.617。

该升级包新增/改进的规则有:
新增：23956 Windows 图形远程代码执行漏洞(CVE-2016-7272)
新增：23957 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2016-7202) (MS16-144)
新增：23960 Microsoft Edge远程内存破坏漏洞(CVE-2016-7297)(MS16-145)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；



NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23956 Microsoft Windows Graphics Component Remote Code Execution Vulnerability(CVE-2016-7272)
Added: 23957 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-7202) (MS16-144)
Added: 23960 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2016-7297)(MS16-145)


Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.616。

该升级包新增/改进的规则有:
修改：23787 Magento 2.0.6反序列化远程代码执行漏洞(CVE-2016-4010)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；



NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23787 Magento 2.0.6 Unserialize Remote Code Execution Vulnerability(CVE-2016-4010)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.615。

该升级包新增/改进的规则有:
修改：21623 Unreal IRCd 3.2.8.1后门远程访问


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 21623 Unreal IRCd 3.2.8.1 Backdoor Remote Access


Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.614。

该升级包新增/改进的规则有:
新增：23930 Firefox/Tor Browser SVG 代码执行漏洞(CVE-2016-9079)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23930 Firefox/Tor Browser SVG Code execution vulnerability(CVE-2016-9079)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.613。

该升级包新增/改进的规则有:
新增：41471 Crane木马通信
新增：10441 NTP拒绝服务漏洞(CVE-2016-9312)
修改：41386 TrickBot银行木马通信


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41471 Trojan.Crane Communication
Added: 10441 NTP Denial of Service Vulnerability(CVE-2016-9312)
Modified: 41386 TrickBot Banking Trojan Communication


Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.612。

该升级包新增/改进的规则有:
新增：23908 Edge浏览器Chakra引擎prototype_concat类型混乱漏洞(CVE-2016-7242)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23908 Edge_Chakra__array_prototype_concat_Type_Confusion Vulnerability(CVE-2016-7242)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111及以上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.611。

该升级包新增/改进的规则有:
新增：23901 Microsoft Internet Explorer和Edge远程内存破坏漏洞(CVE-2016-7196)(MS16-142)
新增：23903 Microsoft Edge远程内存破坏漏洞(CVE-2016-7200)(MS16-129)
新增：23904 Microsoft Edge远程内存破坏漏洞(CVE-2016-7201)(MS16-129)
新增：23905 Microsoft Edge远程内存破坏漏洞(CVE-2016-7203)(MS16-129)
新增：23906 Edge浏览器ntdll_LdrpValidateUserCallTarget栈变量未初始化漏洞(CVE-2016-7198)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23901 Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability(CVE-2016-7196)(MS16-142)
Added: 23903 Microsoft Edge Scripting Engine Memory Corruption Vulnerability(CVE-2016-7200)(MS16-129)
Added: 23904 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-7201)(MS16-129)
Added: 23905 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-7203)(MS16-129)
Added: 23906 Edge_ntdll_LdrpValidateUserCallTarget_Uninitialize_Stack_Variable Vulnerability(CVE-2016-7198)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate",please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.610。

该升级包新增/改进的规则有:
修改：20920 IMAP服务器SEARCH命令超长参数远程缓冲区溢出攻击


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 20920 IMAP Server SEARCH Command Over-Long Parameter Remote Buffer Overflow Attack


Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.111上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.609。

该升级包新增/改进的规则有:
新增：41388 Mirai僵尸连接服务器
新增：41389 红黑远控受控端与服务器通信
新增：41387 远程控制工具hav-rat通信
新增：41386 TrickBot银行木马通信
新增：41376 1937CN远程控制工具通信
新增：41384 僵尸网络程序bluebot客户端连接服务器
新增：41383 远程控制工具PcShare通信
修改：30034 Traceroute UDP探测网络拓扑操作


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.111.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41388 Mirai Botnet Connecting to the Server
Added: 41389 Remote Control Tool RedBlack Clients Connecting to Server
Added: 41387 Remote Control Tool hav-rat Communication
Added: 41386 TrickBot Banking Trojan Communication
Added: 41376 1937CN Remote Control Tool Communication
Added: 41384 Botnet bluebot Client Connecting to Server
Added: 41383 Remote Control Tool PcShare Communication
Modified: 30034 Traceroute UDP Network Topology Detection


Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.608。

该升级包新增/改进的规则有:
新增: 23896 Memcached Append/Prepend操作整数溢出漏洞(CVE-2016-8704)
新增: 23897 Memcached Update整数溢出漏洞(CVE-2016-8705)
新增: 23898 Memcached SASL认证整数溢出漏洞(CVE-2016-8706)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23896 Memcached Append/Prepend Operations Integer Overflow Vulnerability(CVE-2016-8704)
Added: 23897 Memcached Update Integer Overflow Vulnerability(CVE-2016-8705)
Added: 23898 Memcached SASL Authentication Integer Overflow Vulnerability(CVE-2016-8706)


Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.606。

该升级包新增/改进的规则有:
新增：23883 Adobe Reader DC XFA maxChars 释放后重利用漏洞(CVE-2016-6946)
新增：23884 Adobe Flash Player远程代码执行漏洞(CVE-2016-6981)(apsb16-32)(MS16-127)
新增：23885 Adobe Flash Player内存破坏漏洞(CVE-2016-6986)(apsb16-32)(MS16-127)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23883 Adobe Reader DC XFA maxChars Use-After-Free Remote Code Execution Vulnerability(CVE-2016-6946)
Added: 23884 Adobe Flash Player Remote Code Execution Vulnerability(CVE-2016-6981)(apsb16-32)(MS16-127)
Added: 23885 Adobe Flash SWF Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability(CVE-2016-6986)(apsb16-32)(MS16-127)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.605。

该升级包新增/改进的规则有:
新增：10439 OpenSSH KEXINIT请求内存耗尽漏洞(CVE-2016-8858)


注意事项：

1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 10439 OpenSSH KEXINIT Request Memory exhaustion Vulnerability(CVE-2016-8858)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.604。

该升级包新增/改进的规则有:
新增：23875 IE vb脚本 VbsStrComp类型混乱漏洞(CVE-2016-3385)
新增：23874 Microsoft Edge Scripting Engine远程代码执行漏洞(CVE-2016-7189)


注意事项：

1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23875 IE_vbscript_VbsStrComp_Type_Confusion Vulnerability(CVE-2016-3385)
Added: 23874 Microsoft Edge Scripting Engine Remote Code Execution Vulnerability(CVE-2016-7189)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.603。

该升级包新增/改进的规则有:
新增: 10438 ISC BIND buffer.c拒绝服务漏洞(CVE-2016-2776)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 10438 ISC BIND buffer.c Denial of Service Vulnerability(CVE-2016-2776)

Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.602。

该升级包新增/改进的规则有:
修改: 10291 Apache HTTP Server畸形Range选项处理远程拒绝服务漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modify: 10291 Apache HTTP Server Range Denial of Service Vulnerability

Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.601。

该升级包新增/改进的规则有:
新增：23859 齐博CMS splitword.php后门


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23859 qiboCMS splitword.php webshell


Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.110上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.600。

该升级包新增/改进的规则有:
新增：23860 MuJS JavaScript解释器越界读取漏洞
新增：41381 恶意勒索软件传输
新增：23858 Microsoft Edge Remote内存破坏漏洞(CVE-2016-3377)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.110.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23860 MuJS JavaScript Interpreter Out-of-Bound Read Vulnerability
Added: 41381 Malicious Ransomware Transmission
Added: 23858 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2016-3377)

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.599。

该升级包新增/改进的规则有:
新增：23853 Microsoft Edge Remote内存破坏漏洞(CVE-2016-3294)
新增：23854 Microsoft Internet Explorer and Edge Remote内存破坏漏洞(CVE-2016-3295)
新增：23855 Microsoft VBScript Remote内存破坏漏洞(CVE-2016-3375)
新增：23857 Microsoft Internet Explorer/Edge内存破坏漏洞(CVE-2016-3297)(MS16-104)
新增：23851 SugarCRM REST Unserialize PHP代码执行漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23853 Microsoft Edge Remote Memory Corruption Vulnerability(CVE-2016-3294)
Added: 23854 Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability(CVE-2016-3295)
Added: 23855 Microsoft VBScript Remote Memory Corruption Vulnerability(CVE-2016-3375)
Added: 23857 Microsoft Internet Explorer/Edge Memory Corruption Vulnerability(CVE-2016-3297)(MS16-104)
Added: 23851 SugarCRM REST Unserialize PHP Code Execution Vulnerability

Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.598。

该升级包新增/改进的规则有:
新增：23852 Mysql远程Root代码执行漏洞(CVE-2016-6662)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23852 Mysql Remote Root Code Execution Vulnerability(CVE-2016-6662)


Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.597。

该升级包新增/改进的规则有:
修改: 30214 Microsoft IIS .idq ISAPI扩展获取绝对路径攻击


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 30214 Microsoft IIS .idq ISAPI Extension Absolute Path Disclosure


Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.596。

该升级包新增/改进的规则有:
新增：41375 鬼影DDoS工具受控端上线通信
新增：23846 天融信防火墙cookie字段溢出漏洞
新增：23850 SugarCRM PHP代码执行漏洞
新增：23849 IRC通讯木马后门程序PHP木马
新增：23845 天融信防火墙maincgi.cgi参数命令执行漏洞
新增：23847 天融信防火墙cookie cid参数命令注入漏洞
新增：23844 天融信Topsec防火墙管理端口溢出漏洞
新增：23843 Cisco ASA防火墙SNMP溢出漏洞


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 41375 Guiying DDoS Tools Client Lauch Communication
Added: 23846 Topsec Firewall Cookie Buffer Overflow Vulnerability
Added: 23850 SugarCRM PHP Code Injection Vulnerability
Added: 23849 Trojan/Backdoor IRC PHP trojan
Added: 23845 Topsec Firewall maincgi.cgi Command Execution Vulnerability
Added: 23847 Topsec Firewall cookie cid Command Injection Vulnerability
Added: 23844 Topsec Firewall Manage Port Buffer Overflow Vulnerability
Added: 23843 Cisco ASA SNMP OID parsing stack buffer overflow Vulnerability

Announcements:

1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.595。

该升级包新增/改进的规则有:
修改：23828 Drupal RESTWS Module 7.x PHP远程代码执行漏洞


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Modified: 23828 Drupal RESTWS Module 7.x Remote PHP Code Execution Vulnerability

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.594。

该升级包新增/改进的规则有:
新增：23842 Zabbix SQL注入漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23842 Zabbix SQL Injection Vulnerability

Announcements:
1. After update the package, the engine will restart automatically, this will don't interrupt sessions, but will cause 3-5 packets loss on ping opereate", please update on a suitable time.

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.593。

该升级包新增/改进的规则有:
新增：23835 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-3288)(MS16-095)
新增：23836 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-3290)(MS16-095)
新增：23837 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-3322)(MS16-095)(MS16-096)
新增：23838 Microsoft Edge内存破坏漏洞(CVE-2016-3289)(MS16-096)
新增：23839 Microsoft Edge内存破坏漏洞(CVE-2016-3293)(MS16-096)
新增：23840 Microsoft Internet Explorer/Edge信息泄露漏洞(CVE-2016-3327)(MS16-095)(MS16-096)
新增：30685 Microsoft Internet Explorer本地文件名信息泄露漏洞(CVE-2016-3321)(MS16-095)
新增：41368 iSpySoft变种间谍软件窃取用户信息
新增：41370 木马后门程序流萤firefly反向连接
新增：41372 木马后门程序XOR.DDoS连接控制服务器
新增：41373 远程控制木马大灰狼连接C&C服务器
新增：41374 疑似IRC botnet通信
修改：21125 Microsoft Word RTF文件解析栈溢出漏洞
修改：22796 Apache Struts远程代码执行漏洞 (CVE-2013-2251)
修改：41310 Bill Gates僵尸网络通讯
修改：41328 DNS回应包长度异常
修改：41339 Locky 勒索软件恶意通信


注意事项：
1．该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23835 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-3288)(MS16-095)
Added: 23836 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-3290)(MS16-095)
Added: 23837 Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability(CVE-2016-3322)(MS16-095)(MS16-096)
Added: 23838 Microsoft Edge Memory Corruption Vulnerability(CVE-2016-3289)(MS16-096)
Added: 23839 Microsoft Edge Memory Corruption Vulnerability(CVE-2016-3293)(MS16-096)
Added: 23840 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability(CVE-2016-3327)(MS16-095)(MS16-096)
Added: 30685 Microsoft Internet Explorer Local File Name Information Disclosure Vulnerability(CVE-2016-3321)(MS16-095)
Added: 41368 iSpySoft Variant Spyware Stealing User Information
Added: 41370 Trojan firefly Reverse connection
Added: 41372 Trojan.XOR.DDos Connecting the C&C Server
Added: 41373 Remote Control Trojan Dahuilang Connecting the C&C Server
Added: 41374 Suspicious IRC Botnet Communication
Modified: 21125 Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability
Modified: 22796 Apache Struts Remote Code Execution(CVE-2013-2251)
Modified: 41310 Bill Gates BotNet Communication
Modified: 41328 DNS Response Packet Overlong
Modified: 41339 Locky ransomeware malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.592。

该升级包新增/改进的规则有:
新增：23834 IPS Community Suite PHP远程代码执行漏洞(CVE-2016-6174)
新增：23833 phpMyAdmin远程代码执行漏洞(CVE-2016-5734)
新增：41367 JavaScript脚本木马下载器下载行为
修改：23816 Ruby on Rails ActionPack Inline ERB代码执行漏洞(CVE-2016-2098)

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically.

List of added or modified signatures:
Added: 23834 IPS Community Suite PHP Code Injection Vulnerability(CVE-2016-6174)
Added: 23833 phpMyAdmin Remote Code Execution Vulnerability(CVE-2016-5734)
Added: 41367 Trojan-Downloader.JS Downloading
Modified: 23816 Ruby on Rails ActionPack Inline ERB Code Execution Vulnerability(CVE-2016-2098)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.591。

该升级包新增/改进的规则有:
新增：23831 微软浏览器欺骗漏洞(CVE-2016-3274)(MS16-084/85)
新增：23830 Centreon Web Useralias命令执行漏洞
新增：23829 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-3242)(MS16-084)
新增：23828 Drupal RESTWS Module 7.x PHP远程代码执行漏洞


注意事项：
1．该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23831 Microsoft Internet Explorer/Edge Spoofing Vulnerability(CVE-2016-3274)(MS16-084/85)
Added: 23830 Centreon Web Useralias Command Execution Vulnerability
Added: 23829 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2016
-3242)(MS16-084)
Added: 23828 Drupal RESTWS Module 7.x Remote PHP Code Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.590。

该升级包新增/改进的规则有:
新增：41365 可疑僵尸网络通信
新增：23825 Microsoft Internet Explorer信息泄露漏洞(CVE-2016-3261)(MS16-084)
新增：23822 微软浏览器内存破坏漏洞(CVE-2016-3259)(MS16-084/85)
新增：23823 微软浏览器脚本引擎信息泄露漏洞(CVE-2016-3271)(MS16-085)
新增：23824 微软浏览器信息泄露漏洞(CVE-2016-3277)(MS16-084/85)
新增：23821 Microsoft Edge 安全功能绕过漏洞(CVE-2016-3244)(MS16-085)
新增：23820 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-3241)(MS16-084)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41365 Suspicious Botnet Communication
Added: 23825 Microsoft Internet Explorer Information Disclosure Vulnerability(CVE-2016-3261)(MS16-084)
Added: 23822 Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability(CVE-2016-3259)(MS16-084/85)
Added: 23823 Microsoft Edge Scripting Engine Information Disclosure Vulnerability(CVE-2016-3271)(MS16-085)
Added: 23824 Microsoft Edge and Internet Explorer Information Disclosure Vulnerability(CVE-2016-3277)(MS16-084/85)
Added: 23821 Microsoft Edge ASLR Security Bypass Vulnerability(CVE-2016-3244)(MS16-085)
Added: 23820 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-3241)(MS16-084)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.589。

该升级包新增/改进的规则有:
修改: 20358 Samba服务器call_trans2open远程缓冲区溢出攻击

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modified: 20358 Samba Server call_trans2open Remote Buffer Overflow

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.588。

该升级包新增/改进的规则有:
新增：23816 Ruby on Rails ActionPack Inline ERB代码执行漏洞(CVE-2016-2098)
新增：23818 Spring Boot框架SPEL表达式注入漏洞
修改：41086 木马后门程序 China Chopper asp WebShell控制命令
修改：41085 木马后门程序China Chopper aspx WebShell 控制命令
修改：41088 木马后门程序 China Chopper php WebShell控制命令

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added：23816 Ruby on Rails ActionPack Inline ERB Code Execution Vulnerability(CVE-2016-2098)
Added：23818 Spring Boot Framework SPEL Expressions Injection Vulnerability
Modified：41086 Suspicious Webshell China Chopper asp Control Command
Modified：41085 Suspicious Webshell China Chopper aspx Control Command
Modified：41087 Suspicious Webshell China Chopper php Control Command

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.587。

该升级包新增/改进的规则有:
新增：23817 wget下载重定向任意文件写入漏洞(CVE-2016-4971)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23817 wget Download Redirection Arbitrary Files Written Vulnerability(CVE-2016-4971)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.585。

该升级包新增/改进的规则有:
新增：23805 MyLittleForum v2.3.5 PHP命令注入漏洞
新增：23806 木马后门程序JSP一句话木马


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23805 MyLittleForum v2.3.5 PHP Command Injection Vulnerability
Added: 23806 Trojan/Backdoor General JSP trojan

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.584。

该升级包新增/改进的规则有:
新增：23803 Wolfcms 0.8.2 任意PHP文件上传漏洞
新增：23802 SAP NetWeaver Java AS XXE注入漏洞(CVE-2016-3974)
新增：23797 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-0199)(MS16-063)
新增：23796 phpwind哈希长度扩展攻击
新增：23798 Microsoft Edge 安全功能绕过漏洞(CVE-2016-3198)(MS16-068)
新增：23799 Microsoft Edge 内存破坏漏洞(CVE-2016-3222)(MS16-068)
修改：41086 木马后门程序 China Chopper asp WebShell控制命令
修改：41085 木马后门程序China Chopper aspx WebShell 控制命令
修改：41088 木马后门程序 China Chopper php WebShell控制命令

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23803 Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability
Added: 23802 SAP NetWeaver Java AS XXE Injection Vulnerability(CVE-2016-3974)
Added: 23797 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2016-0199)(MS16-063)
Added: 23796 phpwind hash length attack hashpump getshell
Added: 23798 Microsoft Edge Content Security Policy Bypass Vulnerability(CVE-2016-3198)(MS16-068)
Added: 23799 Microsoft Edge Memory Corruption Vulnerability(CVE-2016-3222)(MS16-068)
Modified：41086 Suspicious Webshell China Chopper asp Control Command
Modified：41085 Suspicious Webshell China Chopper aspx Control Command
Modified：41087 Suspicious Webshell China Chopper php Control Command

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.583。

该升级包新增/改进的规则有:
新增：23788 ESC 8832 Data Controller会话劫持漏洞
新增：23789 Paessler PRTG Network Monitor本地文件读取漏洞
新增：23790 Apache Continuum 1.4.2任意命令执行漏洞
新增：23793 Microsoft Internet Explorer Scripting Engine远程内存破坏漏洞(CVE-2016-3210)
新增：23791 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-0200)
新增：23792 Microsoft Edge脚本引擎内存破坏漏洞(CVE-2016-3199)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23788 ESC 8832 Data Controller Session Hijack Vulnerability
Added: 23789 Paessler PRTG Network Monitor 14.4.12.3282 XXE Injection
Added: 23790 Apache Continuum 1.4.2 Arbitrary Command Execution Vulnerability
Added: 23793 Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-3210)
Added: 23791 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-0200)
Added: 23792 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-3199)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.582。

该升级包新增/改进的规则有:
新增：23795 Microsoft Windows WPAD权限提升漏洞(BadTunnel漏洞) (CVE-2016-3213)(MS16-063)(MS16-077)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23795 Microsoft Windows WPAD Privilege Escalation Vulnerability(BadTunnel) (CVE-2016-3213)(MS16-063)(MS16-077)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.580。

该升级包新增/改进的规则有:
新增：23794 Apache Struts远程代码执行漏洞(S2-033)(S2-037)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23794 Apache Struts Remote Code Execute Vulnerability(S2-033)(S2-037)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.578。

该升级包新增/改进的规则有:
新增：23784 JobScript远程代码执行漏洞
新增：23785 HP Data Protector A.09.00任意命令执行漏洞
新增：23786 Real Estate Portal v4.1远程代码执行漏洞


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23784 JobScript Remote Code Execution Vulnerability
Added: 23785 HP Data Protector A.09.00 Arbitrary Command Execution Vulnerability
Added: 23786 Real Estate Portal v4.1 Remote Code Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.577。

该升级包新增/改进的规则有:
修改：23777 GraphicsMagick和ImageMagick远程命令执行漏洞


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modified: 23777 GraphicsMagick and ImageMagick Remote code execution vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.575。

该升级包新增/改进的规则有:
新增：23782 Microsoft IE/Edge内存破坏漏洞(CVE-2016-0192)(MS16-052/051)
修改：22796 Apache Struts多个前缀参数远程代码执行漏洞(CVE-2013-2251)
修改：21374 Apache Struts远程命令执行漏洞


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23782 Microsoft IE/Edge Memory Corruption Vulnerability(CVE-2016-0192)(MS16-052/051)
Modified: 22796 Apache Struts Remote Code Execution(CVE-2013-2251)
Modified: 21374 Apache Struts Remote Command Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.574。

该升级包新增/改进的规则有:
新增：23778 Microsoft Edge脚本引擎内存破坏漏洞(CVE-2016-0191)(MS16-052)
新增：23779 Microsoft Edge脚本引擎内存破坏漏洞(CVE-2016-0193)(MS16-052)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23778 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-0191)(MS16-052)
Added: 23779 Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2016-0193)(MS16-052)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.573。

该升级包新增/改进的规则有:
新增：41355 Qakbot恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41355 Qakbot malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.109上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.572。

该升级包新增/改进的规则有:
修改：23777 ImageMagick远程命令执行漏洞(CVE-2016-3714)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.109.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modified: 23777 ImageMagick Remote code execution vulnerability(CVE-2016-3714)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.571。

该升级包新增/改进的规则有:
新增：23777 ImageMagick远程命令执行漏洞(CVE-2016-3714)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23777 ImageMagick Remote code execution vulnerability(CVE-2016-3714)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.570。


该升级包新增/改进的规则有:
新增：23772 Microsoft Edge 内存破坏漏洞(CVE-2016-0155)(MS16-038)
新增：23773 Advantech WebAccess Dashboard Viewer文件上传漏洞
新增：23774 Microsoft Edge 权限提升漏洞(CVE-2016-0158)(MS16-038)
新增：23775 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-0164)(MS16-037)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23772 Microsoft Edge Memory Corruption Vulnerability(CVE-2016-0155)(MS16-038)
Added: 23773 Advantech WebAccess Dashboard Viewer Arbitrary File Upload Vulnerability
Added: 23774 Microsoft Edge Remote Privilege Escalation Vulnerability(CVE-2016-0158)(MS16-038)
Added: 23775 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-0164)(MS16-037)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.569。


该升级包新增/改进的规则有:
新增：23763 WordPress Robo Gallery 2.0.14代码执行漏洞
新增：23764 Joomla SimpleImageUpload任意文件上传漏洞
新增：23767 Oracle Application Testing Suite UploadFileAction Servlet远程代码执行漏洞
新增：23768 PostScript畸形文件头缓冲区溢出漏洞
新增：23769 论坛杀手(Net-Worm.Perl.Santy.a)蠕虫病毒攻击
新增：23770 Adobe Flash缓冲区溢出漏洞
新增：41347 C99 PHP Webshell访问
新增：23766 Dell KACE K1000文件上传漏洞
修改: 21374 Apache Struts远程命令执行漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23763 WordPress Robo Gallery 2.0.14 Code Execution Vulnerability
Added: 23764 Joomla SimpleImageUpload Arbitrary File Upload Vulnerability
Added: 23767 Oracle Application Testing Suite UploadFileAction Servlet Remote Code Execution Vulnerability
Added: 23768 PostScript Malformed File Header Buffer Overflow Vulnerability
Added: 23769 Net-Worm.Perl.Santy.a Attacking
Added: 23770 Adobe Flash Buffer Overflow Vulnerability
Added: 41347 C99 PHP Webshell Access
Added: 23766 Dell KACE K1000 File Upload Vulnerability
Modified: 21374 Apache Struts Remote Command Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.567。

该升级包新增/改进的规则有:
新增：41348 黑暗幽灵木马恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41348 Trojan DCM malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.565。

该升级包新增/改进的规则有:
新增：23761 MeshCMS 3.6远程命令执行漏洞
新增：23762 Wordpress Plugin HB Audio Gallery Lite 任意文件下载漏洞
修改：41339 Locky 勒索软件恶意通信


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23761 MeshCMS 3.6 Remote Command Execution Vulnerability
Added: 23762 Wordpress Plugin HB Audio Gallery Lite Arbitrary File Download Vulnerability
Modified: 41339 Locky ransomeware malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.564。

该升级包新增/改进的规则有:
新增：23757 Apache Jetspeed目录穿越漏洞
新增：23758 Apache Jetspeed用户管理REST API未授权访问漏洞
新增：23756 多种安防监控系统存在远程代码执行漏洞
新增：23755 Sysax Multi Server 6.50 HTTP文件共享SEH溢出RCE利用
新增：41340 疑似恶意勒索软件通信


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23757 Apache Jetspeed Directory Traversal Vulnerabiliy
Added: 23758 Apache Jetspeed User Manager REST API Unauthorized Access Vulnerability
Added: 23756 Multiple CCTV-DVR Systems Remote Command Execution Vulnerability
Added: 23755 Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit
Added: 41340 Suspicious Malicious Ransomware Communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.563。

该升级包新增/改进的规则有:
新增：41341 僵尸网络程序KTN-RM(Linux/Remaiten)连接服务器


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41341 Botnet Malware KTN-RM(Linux/Remaiten) Connecting to the Server

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.561。

该升级包新增/改进的规则有:
修改: 40382 DDOS工具Mstream主控端探测分布端
新增: 41336 远程控制工具PSEXEC建立连接
新增: 23752 Wordpress Site Import Plugin 1.0.1本地和远程文件包含漏洞
新增: 23753 Microsoft Office畸形EPS文件漏洞(CVE-2015-2545)(MS15-099)
新增: 23754 Zenphoto 1.4.11远程文件包含漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modified: 40382 DDOS Tool Mstream Console and Distributed End Detection
Added: 41336 Remote Control Tool PSEXEC Establish Connections
Added: 23752 Wordpress Site Import Plugin 1.0.1 Local and Remote File Inclusion Vulnerability
Added: 23753 Microsoft Office Malformed EPS File Vulnerability(CVE-2015-2545)(MS15-099)
Added: 23754 Zenphoto 1.4.11 Remote File Inclusion Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.560。

该升级包新增/改进的规则有:
修改: 41339 Locky 勒索软件恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modify: 41339 Locky ransomeware malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.559。

该升级包新增/改进的规则有:
新增: 41339 Locky 勒索软件恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41339 Locky ransomeware malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.557。

该升级包新增/改进的规则有：
新增: 23751 Microsoft Edge内存破坏漏洞(CVE-2016-0124)(MS16-024)
新增: 23741 Microsoft 浏览器内存破坏漏洞(CVE-2016-0110)
新增: 23746 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-0111)(MS16-023)
新增: 23747 Microsoft Internet Explorer SNeighborPosi释放后重利用远程代码执行漏洞(CVE-2016-0109)(MS16-023)
新增: 23745 Microsoft Internet Explorer 10缓冲区溢出漏洞(CVE-2016-0104)
新增: 23743 PHP Utility Belt远程代码执行漏洞
新增: 23750 Microsoft Internet Explorer 释放后重利用远程代码执行漏洞(CVE-2016-0114)(MS16-023)
新增: 23749 Microsoft Edge GetLineBoxForReuse远程代码执行漏洞(CVE-2016-0123) (MS16-024)
新增: 23742 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-0113)
新增: 23740 Microsoft 浏览器内存破坏漏洞(CVE-2016-0105)
新增: 23748 Microsoft Internet Explorer setAttribute释放后重利用信息泄露漏洞(CVE-2016-0112)（MS16-023）
新增: 23744 Microsoft Internet Explorer CDataset RemoveItem信息泄露漏洞(CVE-2016-0106)(MS16-023)
新增: 23739 Open-Xchange Guard PGP私钥检索信息泄露漏洞(CVE-2015-8542)
新增: 41335 Trojan.Downloader.Rozena 恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23751 Microsoft Edge Memory Corruption Vulnerability(CVE-2016-0124)(MS16-024)
Added: 23741 Microsoft Browser Memory Corruption Vulnerability(CVE-2016-0110)
Added: 23746 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2016-0111)(MS16-023)
Added: 23747 Microsoft Internet Explorer SNeighborPosi Use After Free Remote Code Execution Vulnerability(CVE-2016-0109)(MS16-023)
Added: 23745 Microsoft Internet Explorer 10 buffer overflow Vulnerability(CVE-2016-0104)
Added: 23743 PHP Utility Belt Remote Code Execution Vulnerability
Added: 23750 Microsoft Internet Explorer Use-After-Free Remote Code Execution Vulnerability(CVE-2016-0114)(MS16-023)
Added: 23749 Microsoft Edge GetLineBoxForReuse Remote Code Execution Vulnerability(CVE-2016-0123) (MS16-024)
Added: 23742 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2016-0113)
Added: 23740 Microsoft Browser Memory Corruption Vulnerability(CVE-2016-0105)
Added: 23748 Microsoft Internet Explorer setAttribute Use After Free Remote Code Execution Vulnerability(CVE-2016-0112)（MS16-023）
Added: 23744 Microsoft Internet Explorer CDataset RemoveItem Information Disclosure Vulnerability(CVE-2016-0106)(MS16-023)
Added: 23739 Open-Xchange Guard PGP Private Key Retrieval Information Disclosure Vulnerability(CVE-2015-8542)
Added: 41335 Trojan.Downloader.Rozena malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.556。

该升级包新增/改进的规则有：
新增: 41329 Trojan.GenericKD.3044676 恶意通信
新增: 23735 Cisco ASA Software IKEv1/IKEv2缓冲区溢出漏洞
新增: 23734 MetInfo 5.1.7任意文件包含漏洞
新增: 41330 Trojan.Win32.Zbot.iuk 恶意通信
新增: 23733 D-Link DCS-930L Authenticated 远程命令执行漏洞
新增: 10415 Microsoft Network Policy Server RADIUS拒绝服务漏洞(CVE-2016-0050)(MS16-021)
新增: 23736 NETGEAR ProSafe Network Management System 300任意文件上传漏洞(CVE-2016-1525)
新增: 41331 Trojan.Ransom.Bitman.kcp 恶意通信
新增: 41332 Trojan.Agent.BQHF 恶意通信
新增: 41333 Trojan.Ransom.Bitman.kwk 恶意通信
新增: 41334 Trojan.forucon.bme 恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41329 Trojan.GenericKD.3044676 malicious communication
Added: 23735 Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability
Added: 23734 MetInfo 5.1.7 Arbitrary File Inclusion Vulnerability
Added: 41330 Trojan.Win32.Zbot.iuk malicious communication
Added: 23733 D-Link DCS-930L Authenticated Remote Command Execution Vulnerability
Added: 10415 Microsoft Network Policy Server RADIUS Denial of Service Vulnerability(CVE-2016-0050)(MS16-021)
Added: 23736 NETGEAR ProSafe Network Management System 300 Arbitrary File Upload Vulnerability(CVE-2016-1525)
Added: 41331 Trojan.Ransom.Bitman.kcp malicious communication
Added: 41332 Trojan.Agent.BQHF malicious communication
Added: 41333 Trojan.Ransom.Bitman.kwk malicious communication
Added: 41334 Trojan.forucon.bme malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.555。

该升级包新增/改进的规则有：
新增: 23737 OpenSSl SSLv2 DROWN攻击(CVE-2016-0800)
新增: 23738 Jenkins Java反序列化漏洞(CVE-2016-0792)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23737 OpenSSl SSLv2 DROWN Attack(CVE-2016-0800)
Added: 23738 Jenkins Java Unserialization Vulnerability(CVE-2016-0792)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.553。

该升级包新增/改进的规则有：
新增: 23729 Microsoft IE远程内存破坏漏洞(CVE-2016-0063)
新增: 41328 DNS回应包长度异常
新增: 23730 Microsoft Internet Explorer内存破坏漏洞(CVE-2016-0067)(MS16-009)
新增: 23731 Microsoft Browser IE内存破坏漏洞(CVE-2016-0060)
新增: 23732 Microsoft Edge ASLR 绕过漏洞(CVE-2016-0080)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23729 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2016-0063)
Added:41328 DNS Response Packet Overlong
Added:23730 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2016-0067)(MS16-009)
Added:23731 Microsoft Browser IE Memory Corruption Vulnerability(CVE-2016-0060)
Added:23732 Microsoft Edge ASLR Bypass Vulnerability(CVE-2016-0080)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.552。

该升级包新增/改进的规则有：
新增: 41327 Trojan.GenericKD.2994738 恶意通信
新增: 41323 Trojan.Win32.Zlader 恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41327 Trojan.GenericKD.2994738 malicious communication
Added: 41323 Trojan.Win32.Zlader malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.551。

该升级包新增/改进的规则有：
新增: 41322 Trojan.GenericKD.2994078 恶意通信
新增: 41326 Trojan.Heur.LP.aq5@a0xTOg 恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41322 Trojan.GenericKD.2994078 malicious communication
Added: 41326 Trojan.Heur.LP.aq5@a0xTOg malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.550。

该升级包新增/改进的规则有：
新增: 30684 联想茄子快传 ShareIT 信息泄露漏洞
新增: 41324 Trojan.GenericKD.2993536 恶意通信
新增: 41325 Trojan.GenericKD.2998289 恶意通信
新增: 10413 HTML5 history.pushState拒绝服务攻击

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 30684 Lenovo ShareIT Information Disclosure
Added: 41324 Trojan.GenericKD.2993536 malicious communication
Added: 41325 Trojan.GenericKD.2998289 malicious communication
Added: 10413 HTML5 history.pushState Denial of Service Attack

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.549。

该升级包新增/改进的规则有：
新增: 23727 Gwolle Guestbook WordPress插件远程文件包含漏洞(CVE-2015-8351)
新增: 41320 Trojan.GenericKD.2984067 恶意通信
新增: 41317 Trojan.Win32.Banker.qeo 恶意通信
新增: 41318 Trojan.Agent.BPSY 恶意通信
新增: 41319 Trojan.GenericKD.2986749 恶意通信
新增: 41312 Trojan.Win32.Banker.kqr 恶意通信
新增: 41321 Trojan.GenericKD.2986731 恶意通信
新增: 41313 Trojan.Win32.Banker.lgb 恶意通信
新增: 41314 Trojan.Win32.Banker.kxq 恶意通信
新增: 41315 Trojan.Win32.Banker.mir 恶意通信
新增: 41316 Trojan.Win32.Banker.3693056 恶意通信
新增: 23726 owncloud信息泄露漏洞(CVE-2015-1499)
新增: 41310 Bill Gates僵尸网络通讯
新增: 23724 SevOne NMS Remote Root利用
新增: 23725 应用服务器glassfish任意文件读取漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23727 WordPress Gwolle Guestbook Plugin Remote File Inclusion (CVE-2015-8351)
Added: 41320 Trojan.GenericKD.2984067 malicious communication
Added: 41317 Trojan.Win32.Banker.qeo malicious communication
Added: 41318 Trojan.Agent.BPSY malicious communication
Added: 41319 Trojan.GenericKD.2986749 malicious communication
Added: 41312 Trojan.Win32.Banker.kqr malicious communication
Added: 41321 Trojan.GenericKD.2986731 malicious communication
Added: 41313 Trojan.Win32.Banker.lgb malicious communication
Added: 41314 Trojan.Win32.Banker.kxq malicious communication
Added: 41315 Trojan.Win32.Banker.mir malicious communication
Added: 41316 Trojan.Win32.Banker.3693056 malicious communication
Added: 23726 owncloud Information Disclosure Vulnerability (CVE-2015-1499)
Added: 41310 Bill Gates BotNet Communication
Added: 23724 SevOne NMS Remote Root Exploit
Added: 23725 Application server Glassfish Directory Traversal Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.548。

该升级包新增/改进的规则有：
新增: 23723 Ipswitch WhatsUp Gold 远程代码执行漏洞
新增: 23721 Microsoft Edge TextData类型混淆信息泄露漏洞(CVE-2016-0003)(MS16-002)
新增: 23720 D-Link DCS-931L文件上传漏洞
新增: 41299 Backdoor.Win32.Androm.izgs 恶意通信
新增: 41300 Trojan.GenericKD.2972491 恶意通信
新增: 41301 Trojan.GenericKD.2971542 恶意通信
新增: 41302 Trojan.Win32.Banker.acvi 恶意通信
新增: 41303 Trojan.Strictor.24290 恶意通信
新增: 41304 Trojan.Heur.PT.FmJdbCI2YAk 恶意通信
新增: 41305 Trojan.GenericKD.2972826 恶意通信
新增: 41306 Backdoor.Win32.Zegost.msysn 恶意通信
新增: 41307 Trojan-Banker.Win32.BestaFera.git 恶意通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23723 Ipswitch WhatsUp Gold Remote Code Execution Vulnerability
Added: 23721 Microsoft Edge Memory Corruption Vulnerability(CVE-2016-0003)(MS16-002)
Added: 23720 D-Link DCS-931L File Upload Vulnerability
Added: 41299 Backdoor.Win32.Androm.izgs malicious communication
Added: 41300 Trojan.GenericKD.2972491 malicious communication
Added: 41301 Trojan.GenericKD.2971542 malicious communication
Added: 41302 Trojan.Win32.Banker.acvi malicious communication
Added: 41303 Trojan.Strictor.24290 malicious communication
Added: 41304 Trojan.Heur.PT.FmJdbCI2YAk malicious communication
Added: 41305 Trojan.GenericKD.2972826 malicious communication
Added: 41306 Backdoor.Win32.Zegost.msysn malicious communication
Added: 41307 Trojan-Banker.Win32.BestaFera.git malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.547。

该升级包新增/改进的规则有：
新增: 41309 黑暗力量(Black Energy)木马通信

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.107.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41309 Trojan.BlackEnergy Communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.107上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.545。

该升级包新增/改进的规则有：
新增: 41297 Trojan.GenericKD.2942632 收集信息
新增: 41298 Trojan.GenericKD.2942632 获取恶意文件

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41297 Trojan.GenericKD.2942632 collect info
Added: 41298 Trojan.GenericKD.2942632 get malicious files

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.544。

该升级包新增/改进的规则有：
修改: 23580 Zpanel 10.1.0未经身份验证远程代码执行漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modified: 23580 Zpanel 10.1.0 Remote Unauthenticated Code Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.543。

该升级包新增/改进的规则有：
新增: 41295 Worm.Win32.Viking.4125C284 恶意通信
新增: 41296 Worm.Brontok.A 恶意通信
修改: 23614 Oracle Weblogic Server Java反序列化漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41295 Worm.Win32.Viking.4125C284 malicious communication
Added: 41296 Worm.Brontok.A malicious communication
Modified: 23614 Oracle Weblogic Server Java Unserialization Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.542。

该升级包新增/改进的规则有：
新增：23684 Juniper NetScreenOS系统未授权登录后门
新增：41291 Trojan.Kazy.290327 恶意通信
新增：41290 Trojan.Generic.8406478 恶意通信
新增：41292 Trojan.Variant.Symmi.13690 恶意通信
新增：41293 Worm.Win32.Viking.bb 恶意通信
新增：23680 Microsoft Edge 权限提升漏洞(CVE-2015-6170)(MS15-125)
新增：23676 Microsoft IE 脚本引擎内存破坏漏洞(CVE-2015-6136)(MS15-124)
新增：23678 Microsoft IE 远程内存破坏漏洞(CVE-2015-6150)(MS15-124)
新增：23671 Microsoft IE 远程内存破坏漏洞(CVE-2015-6147)(MS15-124)
新增：23679 Microsoft IE 远程内存破坏漏洞(CVE-2015-6156)(MS15-124)
新增：23672 Microsoft IE 远程内存破坏漏洞(CVE-2015-6152)(MS15-124)
新增：23673 Microsoft IE及Edge远程内存破坏漏洞(CVE-2015-6159)(MS15-125)
新增：23665 Microsoft Internet Explorer 内存破坏漏洞(CVE-2015-6134)
新增：23675 Microsoft Windows信息泄露漏洞(CVE-2015-6127)
新增：23667 Microsoft IE 远程内存破坏漏洞(CVE-2015-6149)(MS15-124)
新增：23668 Microsoft IE及Edge远程内存破坏漏洞(CVE-2015-6154)(MS15-125)
新增：23669 Microsoft IE Mutation Observer释放后重利用远程代码执行漏洞(CVE-2015-6160)(MS15-124)
新增：23670 Microsoft IE/Edge 远程内存破坏漏洞(CVE-2015-6140)(MS15-124)
新增：23666 Microsoft IE/Edge 远程内存破坏漏洞(MS15-124)
新增：23674 Microsoft Internet Explorer 内存损坏漏洞(CVE-2015-6083)(MS15-124)
新增：41289 Android AndroidKungFu Malware 命令控制
新增：41288 Worm.Win32.Viking.mi
新增：23663 F5 iControl iCall Script Root命令执行漏洞(CVE-2015-3628)
新增：23664 phpFileManager 0.9.8远程代码执行漏洞(CVE-2015-5958)
新增：23660 Atlassian HipChat for Jira插件快速模板注入漏洞(CVE-2015-5603)
新增：23661 Piwigo install.php脚本目录遍历漏洞
新增：23659 多个ManageEngine产品任意文件上传漏洞（CVE-2014-5006）
新增：23681 ManageEngine Desktop Central 9 文件上传Servlet ConnectionId 漏洞(CVE-2015-8249)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23684 Juniper NetScreenOS System Backdoor Authentication Backdoor
Added: 41291 Trojan.Kazy.290327 malicious communication
Added: 41290 Trojan.Generic.8406478 malicious communication
Added: 41292 Trojan.Variant.Symmi.13690 malicious communication
Added: 41293 Worm.Win32.Viking.bb malicious communication
Added: 23680 Microsoft Edge Elevated Privileges Vulnerability(CVE-2015-6170)(MS15-125)
Added: 23676 Microsoft IE Script Engine Memory Corruption Vulnerability(CVE-2015-6136)(MS15-124)
Added: 23678 Microsoft IE Remote Memory Corruption Vulnerability(CVE-2015-6150)(MS15-124)
Added: 23671 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6147)(MS15-124)
Added: 23679 Microsoft IE Remote Memory Corruption Vulnerability(CVE-2015-6156)(MS15-124)
Added: 23672 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6152)(MS15-124)
Added: 23673 Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability(CVE-2015-6159)(MS15-125)
Added: 23665 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6134)
Added: 23675 Microsoft Windows Information Disclosure Vulnerability(CVE-2015-6127)
Added: 23667 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6149)(ms15-124)
Added: 23668 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6154)(ms15-125)
Added: 23669 Microsoft IE Mutation Observer Use After Free Remote Code Execution Vulnerability(CVE-2015-6160)(MS15-124)
Added: 23670 Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability(CVE-2015-6140)(MS15-124)
Added: 23666 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(ms15-124)
Added: 23674 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6083)(MS15-124)
Added: 41289 Android AndroidKungFu Malware Command and Control
Added: 41288 Worm.Win32.Viking.mi
Added: 23663 F5 iControl iCall Script Root Command Execution Vulnerability(CVE-2015-3628)
Added: 23664 phpFileManager 0.9.8 Remote Command Execution Vulnerability(CVE-2015-5958)
Added: 23660 Atlassian HipChat for Jira Plugin Velocity Template Injection Vulnerability(CVE-2015-5603)
Added: 23661 Piwigo install.php Script Path Traversal Vulnerability
Added: 23659 ManageEngine Desktop Central StatusUpdate Arbitrary File Upload(CVE-2014-5006)
Added: 23681 ManageEngine Desktop Central 9 FileUploadServlet ConnectionId Vulnerability(CVE-2015-8249)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.540。

该升级包新增/改进的规则有：
新增：23682 Joomla反序列化远程命令执行漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23682 Joomla Unserialize Remote Code Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.538。

该升级包新增/改进的规则有：
新增：23654 Easy File Sharing Web Server 7.2 - 远程溢出漏洞
新增：23655 WordPress theme parallelus-salutation任意文件下载漏洞
新增：41283 webshell三剑客之jspspy命令执行
新增：41284 webshell三剑客之phpspy命令执行
新增：41285 Trojan.Dalexis.Gen.1 恶意通信
新增：41286 Trojan.Generic.13058195 utilmall 恶意通信
新增：41287 Trojan.Generic.13058195 cyutil 恶意通信
新增：23656 Oracle BeeHive 2 voice-servlet processEvaluation()漏洞
新增：23657 Limesurvey Unauthenticated文件下载漏洞
修改：40297 Web服务"../"路径串目录遍历攻击

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23654 Easy File Sharing Web Server 7.2 - Remote SEH Buffer Overflow
Added:23655 WordPress theme parallelus-salutation Arbitrary File Download Vulnerability
Added:41283 webshell The Three Musketeers (jspspy Command Execution)
Added:41284 webshell ( The Three Musketeers) phpspy Command Execution
Added:41285 Trojan.Dalexis.Gen.1 malicious communication
Added:41286 Trojan.Generic.13058195 utilmall malicious communication
Added:41287 Trojan.Generic.13058195 cyutil malicious communication
Added:23656 Oracle BeeHive 2 voice-servlet processEvaluation() Vulnerability
Added:23657 Limesurvey Unauthenticated File Download Vulnerability
Modified:40297 Web Service Directory Traversal Attack

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.537。

该升级包新增/改进的规则有：
新增：23615 Joomla com_autostand文件上传漏洞
新增：23616 Joomla com_media远程代码执行漏洞
新增：41281 Trojan.IPZ.7 获取恶意信息
新增：41282 Trojan.Win32.Teslacrypt.380928 获取恶意信息

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added：23615 Joomla com_autostand File Upload Vulnerability
Added：23616 Joomla com_media Remote File Upload Vulnerability
Added：41281 Trojan.IPZ.7 Get malicious info
Added：41282 Trojan.Win32.Teslacrypt.380928 Get malicious info

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.536。

该升级包新增/改进的规则有：
新增：23612 Jboss JMX Java反序列化漏洞
新增：41280 Trojan.Filecoder.gr.nl 勒索软件
新增：23614 Oracle Weblogic Server Java反序列化漏洞
新增：23613 IBM Websphere Java反序列化漏洞
新增：41278 Trojan.MSIL.NetSeal 恶意通信
新增：41279 Trojan.Win32.Fareit.gi 恶意通信
新增：23605 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6066)(MS15-112)
新增：23606 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6070)(MS15-112)
新增：23607 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6071)(MS15-112)
新增：23604 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6065)(MS15-112)
新增：23608 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6075)(MS15-112)
新增：23609 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6076)(MS15-112)
新增：23610 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6078)(MS15-112)
新增：23603 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6064)(MS15-112)
修改: 22486 PhpTax pfilez Parameter Exec 远程代码注入漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added：23612 Jboss JMX Java Unserialization Vulnerability
Added：41280 Trojan.Filecoder.gr.nl Nransomware
Added：23614 Oracle Weblogic Server Java Unserialization Vulnerability
Added：23613 IBM Websphere Java Unserialization Vulnerability
Added：41278 Trojan.MSIL.NetSeal malicious communication
Added：41279 Trojan.Win32.Fareit.gi malicious communication
Added：23605 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6066)(MS15-112)
Added：23606 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6070)(MS15-112)
Added：23607 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6071)(MS15-112)
Added：23604 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6065)(MS15-112)
Added：23608 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6075)(MS15-112)
Added：23609 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6076)(MS15-112)
Added：23610 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6078)(MS15-112)
Added：23603 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6064)(MS15-112)
Modified: 22486 PhpTax pfilez Parameter Exec Remote Code Injection

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.535。

该升级包新增/改进的规则有：
新增：23593 Apache Jackrabbit XML外部实体信息泄露漏洞
新增：23595 Huawei HG532路由器路径遍历漏洞
新增：23598 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6079)(MS15-112)
新增：23599 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6081)(MS15-112)
新增：23600 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-6084)(MS15-112)
新增：23601 Microsoft Internet Explorer ASLR绕过漏洞(CVE-2015-6088)(MS15-112)
新增：23602 Microsoft Internet Explorer脚本引擎内存破坏漏洞(CVE-2015-6089)(MS15-112)
新增：41277 ZeroAccess 节点恶意流量
修改：10388 Apache Tomcat哈希碰撞拒绝服务漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23593 Apache Jackrabbit XML External Entity Information Disclosure Vulnerability
Added:23595 Huawei HG532 Router Device Directory Traversal Vulnerability
Added:23598 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6079)(MS15-112)
Added:23599 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6081)(MS15-112)
Added:23600 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6084)(MS15-112)
Added:23601 Microsoft Internet Explorer ASLR Bypass Vulnerability(CVE-2015-6088)(MS15-112)
Added:23602 Microsoft Internet Explorer Script Engine Memory Corruption Vulnerability(CVE-2015-6089)(MS15-112)
Added:41277 ZeroAccess Supernode malicious Traffic
Modified:10388 Apache Tomcat Hash Collision Denial of Service Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.534。

该升级包新增/改进的规则有：
新增：23597 Redis未授权访问远程获得服务器权限漏洞
新增：23594 vBulletin论坛平台预授权远程代码执行漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23597 Redis Unauthorized Access obtain Remote server permission Vulnerability
Added:23594 vBulletin Platform PreAuth Remote Code Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.533。

该升级包新增/改进的规则有：
新增：23585 Redis 未授权访问漏洞
新增：23584 Memcached 未授权访问漏洞
新增：23583 articleFR 3.0.7 任意文件读取漏洞
新增：41263 Trojan.Mikey.22923 恶意通信
新增：41264 Trojan.Win32.Tinba 恶意通信
新增：41265 Backdoor.Win32.Pex 恶意通信
新增：41261 Trojan.Ransom.CRYPAURA.D 恶意通信
新增：41266 Trojan.Win32.Delf.QEZ 恶意通信
新增：23582 Th3 MMA mma.php Backdoor任意文件上传漏洞
新增：41262 Trojan.Kazy.608877 恶意通信
新增：41246 Trojan.Win32.Tepfer.pws 恶意通信
新增：41247 Trojan.Dropper.ZAccess.tc 恶意通信
新增：23592 WebPagetest多个输入验证漏洞
新增：41271 Trojan.Kazy.2137 恶意通信
新增：41267 Trojan.Variant.Mikey.27069 勒索软件
新增：41268 Trojan.GenericKD.2779333 恶意通信
新增：41269 Trojan.Kazy.307404 恶意通信
新增：41270 Trojan.W32.Napolar.A 恶意通信
新增：41248 Trojan.GenericKD.2829208 恶意通信
新增：23586 PHPCMS V9 api.php Authkey 信息泄漏漏洞
新增：23587 ThinkPHP framework 任意代码执行漏洞
新增：23590 JBoss DeploymentFileRepository代码执行漏洞
新增：23591 XODA 任意PHP文件上传漏洞
新增：23589 Mongodb未授权访问漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23585 Redis Unauthorized Access Vulnerability
Added:23584 Memcached Unauthorized Access Vulnerability
Added:23583 articleFR 3.0.7 Arbitrary File Read
Added:41263 Trojan.Mikey.22923 malicious communication
Added:41264 Trojan.Win32.Tinba malicious communication
Added:41265 Backdoor.Win32.Pex malicious communication
Added:41261 Trojan.Ransom.CRYPAURA.D malicious communication
Added:41266 Trojan.Win32.Delf.QEZ malicious communication
Added:23582 Th3 MMA mma.php Backdoor Arbitrary File Upload Vulnerability
Added:41262 Trojan.Kazy.608877 malicious communication
Added:41246 Trojan.Win32.Tepfer.pws malicious communication
Added:41247 Trojan.Dropper.ZAccess.tc malicious communication
Added:23592 WebPagetest Multiple File Upload Vulnerability
Added:41271 Trojan.Kazy.2137 malicious communication
Added:41267 Trojan.Variant.Mikey.27069 Nransomware
Added:41268 Trojan.GenericKD.2779333 malicious communication
Added:41269 Trojan.Kazy.307404 malicious communication
Added:41270 Trojan.W32.Napolar.A malicious communication
Added:41248 Trojan.GenericKD.2829208 malicious communication
Added:23586 PHPCMS V9 api.php Authkey Information Disclosure Vulnerability
Added:23587 ThinkPHP framework Code Execution
Added:23590 JBoss DeploymentFileRepository Code Execution
Added:23591 XODA Arbitrary PHP File Upload Vulnerability
Added:23589 Mongodb Unauthorized Access Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.532。

该升级包新增/改进的规则有：
新增：41275 百度moplus SDK虫洞(WormHole)漏洞


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:41275 Baidu moplus SDK WormHole Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.530。

该升级包新增/改进的规则有：
新增：41259 BackDoor.Ircbot发送本机数据
新增：41260 Trojan.Variant.Graftor.247439恶意通信
新增：23580 Zpanel 10.1.0未经身份验证远程代码执行漏洞
新增：23579 Elasticsearch 目录遍历漏洞
新增：23581 Belkin N150目录遍历漏洞
新增：41250 Trojan.Variant.Mikey.23662获取恶意信息
新增：41255 Trojan.Generic.15041907恶意通信
新增：41254 TrojanClicker.Autoit访问恶意网址
新增：41251 Trojan.Variant.Mikey.23662发送本机数据
新增：41252 Trojan.Win32.LoadMoney恶意通信
新增：41258 Trojan.Filecoder.2783034勒索软件
新增：41253 Gen.Variant.Graftor.207203恶意通信
新增：23578 Nibbleblog文件上传漏洞
新增：41256 Packer.Enigma.A恶意通信
新增：41257 Trojan.Win32.Autoit恶意通信


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:41259 BackDoor.Ircbot Send local info
Added:41260 Trojan.Variant.Graftor.247439 malicious communication
Added:23580 Zpanel 10.1.0 Remote Unauthenticated Code Execution Vulnerability
Added:23579 Elasticsearch Path Traversal Vulnerability
Added:23581 Belkin Router N150 Path Traversal
Added:41250 Trojan.Variant.Mikey.23662Get malicious info
Added:41255 Trojan.Generic.15041907 malicious communication
Added:41254 TrojanClicker.Autoit access malicious website
Added:41251 Trojan.Variant.Mikey.23662Send local info
Added:41252 Trojan.Win32.LoadMoney malicious communication
Added:41258 Trojan.Filecoder.2783034Nransomware
Added:41253 Gen.Variant.Graftor.207203 malicious communication
Added:23578 Nibbleblog File Upload Vulnerability
Added:41256 Packer.Enigma.A malicious communication
Added:41257 Trojan.Win32.Autoit malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.529。

该升级包新增/改进的规则有：
新增：23576 Microsoft Tablet Input Band释放后重利用漏洞(CVE-2015-2548)(MS15-109)
新增：23577 Microsoft Edge XSS过滤器绕过漏洞(CVE-2015-6058)(MS15-106)
新增：23573 Microsoft Internet Explorer 内存破坏漏洞(CVE-2015-6042)(ms15-106)
新增：23571 Microsoft Windows Shell工具栏释放后使用漏洞(CVE-2015-2515)(MS15-109)
新增：23574 Microsoft Internet Explorer 内存破坏漏洞(CVE-2015-6049)(MS15-106)
新增：23572 Microsoft Internet Explorer 内存破坏漏洞(CVE-2015-6048)(MS15-106)
新增：30678 Microsoft Internet Explorer信息泄露漏洞(CVE-2015-6053)(MS15-106)
新增：41244 Gen.Heur.Conjar.11恶意通信
新增：23570 F5 BIG-IP和Enterprise Manager 目录遍历漏洞
新增：41238 Trojan.Dropper.VBM收集信息
新增：30677 BisonWare BisonFTP信息泄露漏洞(CVE-2015-7602)
新增：23565 Kaseya Virtual System Administrator任意文件上传漏洞
新增：23566 Simple Backdoor Shell远程代码执行漏洞
新增：23567 KaseyaVirtual System远程升级特权(添加主管理员帐户)


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23576 Microsoft Tablet Input Band UAF Vulnerability(CVE-2015-2548)(MS15-109)
Added: 23577 Microsoft Edge HTTP Response Handler cross site scripting Vulnerability(CVE-2015-6058)(MS15-106)
Added: 23573 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6042)(ms15-106)
Added: 23571 Microsoft Windows Shell ToolBar Use After Free Vulnerability(CVE-2015-2515)(MS15-109)
Added: 23574 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-6049)(ms15-106)
Added: 23572 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-6048)(MS15-106)
Added: 30678 Microsoft Internet Explorer Information Disclosure Vulnerability(CVE-2015-6053)(MS15-106)
Added: 41244 Gen.Heur.Conjar.11 malicious communication
Added: 23570 F5 BIG-IP And Enterprise Manager Path Traversal Vulnerability
Added: 41238 Trojan.Dropper.VBM Collect local info
Added: 30677 BisonWare BisonFTP Information Disclosure Vulnerability(CVE-2015-7602)
Added: 23565 Kaseya Virtual System Administrator Arbitrary File Upload Vulnerability
Added: 23566 Simple Backdoor Shell Remote Code Execution
Added: 23567 Kaseya Virtual System Remote privilege escalation(add Master Administrator account)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.528。

该升级包新增/改进的规则有：
新增：41237 Trojan.Win32.Tepfer恶意通信


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41237 Trojan.Win32.Tepfer malicious communication

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.527。

该升级包新增/改进的规则有：
修改: 20909 Borland InterBase ibserver.exe远程栈缓冲区溢出攻击


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Modified: 20909 Borland InterBase ibserver.exe Remote Stack Buffer Overflow

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.526。

该升级包新增/改进的规则有：
新增：23557 Mindbite SiteFactory CMS 绝对路径遍历漏洞
新增：23559 WordPress eShop插件任意文件覆盖漏洞(CVE-2015-3421)
新增：23556 Octogate UTM 3.0.12 - 管理界面目录遍历漏洞
新增：23555 Synology Video Station 1.5-0757命令注入漏洞
新增：23561 ManageEngine OpManager远程代码执行漏洞
新增：23563 Konica Minolta FTP Utility 1.0远程命令执行
新增：41231 Adware.ConvertAd.24 收集本机信息
新增：41232 Adware.ConvertAd.24 获取恶意软件(livestatscounter.com)
新增：41233 Adware.ConvertAd.24 获取恶意软件(cloudfront.net)
新增：41234 GenVariant.Jaik.8690 收集本机信息
新增：41235 Trojan.Cryptolocker.N勒索软件
新增：41236 Trojan.GenericKD.2726293下载恶意文件


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23557 SiteFactory CMS 5.5.9 Directory Traversal
Added: 23559 WordPress eShop Plugin Arbitrary File Overwrite Vulnerability(CVE-2015-3421)
Added: 23556 Octogate UTM 3.0.12 - Admin Interface Directory Traversal
Added: 23555 Synology Video Station 1.5-0757 Command Injection
Added: 23561 ManageEngine OpManager Remote Code Execution
Added: 23563 Konica Minolta FTP Utility 1.0 Remote Command Execution
Added: 41231 Adware.ConvertAd.24 Collect local info
Added: 41232 Adware.ConvertAd.24 GET malware from livestatscounter.com
Added: 41233 Adware.ConvertAd.24 GET malware from cloudfront.net
Added: 41234 GenVariant.Jaik.8690 Collect local info
Added: 41235 Trojan.Cryptolocker.Nransomware
Added: 41236 Trojan.GenericKD.2726293 download malicious files

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.525。

该升级包新增/改进的规则有：
新增：41230 苹果XcodeGhost木马连接服务器


注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 41230 Apple XcodeGhost Trojan Connecting Server

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.523。

该升级包新增/改进的规则有：
新增：23544 Endian Firewall Proxy Password修改命令注入漏洞
新增：23547 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-2486)(MS15-094)
新增：23548 Microsoft Internet Explorer脚本引擎内存破坏漏洞(CVE-2015-2493)(MS15-094)
新增：23549 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-2501)(MS15-094)
新增：23550 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-2498)(MS15-094)
新增：23551 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-2500)(MS15-094)
新增：23553 Microsoft Internet Explorer内存破坏漏洞(CVE-2015-2491)(MS15-094)
新增：23554 CMS Bolt File上传漏洞
新增：30676 Microsoft Internet Explorer信息泄露漏洞(CVE-2015-2483)(MS15-094)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added: 23544 Endian Firewall Proxy Password Change Command Injection
Added: 23547 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-2486)(MS15-094)
Added: 23548 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability(CVE-2015-2493)(MS15-094
Added: 23549 Microsoft Internet Explorer Memory Corruption Vulnerability(CVE-2015-2501)(MS15-094)
Added: 23550 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2498)(MS15-094)
Added: 23551 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2500)(MS15-094)
Added: 23553 Microsoft Internet Explorer Momery Corruption Vulnerability CVE-2015-2491)(MS15-094)
Added: 23554 CMS Bolt File Upload Vulnerability
Added: 30676 Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2015-2483)(MS15-094)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.522。

该升级包新增/改进的规则有：
新增：23543 PCMan FTP Server 2.0.7 GET命令缓冲区溢出漏洞
新增：23542 PCMan FTP Server 2.0.7 RENAME命令缓冲区溢出漏洞
新增：23541 phpwiki 1.5.4 本地文件包含漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23543 PCMan FTP Server 2.0.7 GET Command Buffer Overflow
Added:23542 PCMan FTP Server 2.0.7 RENAME Command Buffer Overflow
Added:23541 phpwiki 1.5.4 Local File Inclusion Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.521。

该升级包新增/改进的规则有：
新增：23537 Netsweeper 4.0.8 - SQL注入绕过认证
新增：41225 Trojan.Agent.BLXP木马通信
新增：23539 Magento eCommerce远程代码执行

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23537 Netsweeper 4.0.8 - SQL Injection Authentication Bypass
Added:41225 Trojan.Agent.BLXP
Added:23539 Magento eCommerce Remote Code Execution

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.520。

该升级包新增/改进的规则有：
新增：23533 TRS WCM任意文件上传漏洞
新增：41219 Trojan.GenericKD.2650305.Agent.BLWH木马通信
新增：23531 Werkzeug Debug Shell 命令执行漏洞
新增：23530 Nuts CMS内容管理系统php命令注入漏洞
新增：23532 vBulletin < 4.2.2 - Memcache远程代码执行漏洞
新增：41218 Upatre木马下载器Trojan.Downloader.Upatre下载行为
新增：23529 Symantec Endpoint Protection身份验证绕过漏洞(CVE-2015-1486)
新增：10406 Ability FTP Server 管理面板AUTHCODE命令远程拒绝服务攻击漏洞
新增：23524 Microsoft Internet Explorer/Edge远程内存破坏漏洞(CVE-2015-2442)(MS15-079)
新增：23523 SysAid Help Desk 'rdslogs' 任意文件上传漏洞
新增：23526 Internet Explorer CTreeNode::GetCascadedLang释放后重利用漏洞(MS15-079)
新增：23525 Microsoft Internet Explorer/Edge远程内存破坏漏洞(CVE-2015-2446)(MS15-079)
新增：23528 WordPress qTranslate插件跨站脚本漏洞
新增：23522 TOTOLINK路由器远程命令执行漏洞

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23533 TRS WCM Arbitrary File Upload Vulnerability
Added:41219 Trojan.GenericKD.2650305.Agent.BLWH
Added:23531 Werkzeug Debug Shell Command Execution
Added:23530 Nuts CMS Remote PHP Code Injection Vulnerability
Added:23532 vBulletin < 4.2.2 - Memcache Remote Code Execution
Added:41218 Trojan.Downloader.Upatre download behavior
Added:23529 Symantec Endpoint Protection Manager Authentication Bypass(CVE-2015-1486)
Added:10406 Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Vulnerability
Added:23524 icrosoft Internet Explorer/Edge Remote Memory Corruption Vulnerability(CVE-2015-2442)(MS15-079)
Added:23523 SysAid Help Desk 'rdslogs' Arbitrary File Upload
Added:23526 Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability(MS15-079)
Added:23525 Microsoft Internet Explorer/Edge Remote Memory Corruption Vulnerability(CVE-2015-2446)(MS15-079)
Added:23528 WordPress qTranslate Plugin Cross Site Scripting Vulnerability
Added:23522 TOTOLINK Routers Remote Command Execution Vulnerability

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.519。

该升级包新增/改进的规则有：
新增：23517 PCMan FTP Server 2.0.7 - PUT Command缓冲区溢出漏洞
新增：23518 Dell Netvault Backup 10.0.1.24 - 拒绝服务攻击
新增：23519 WordPress WPTF Image Gallery 1.03任意文件下载
新增：23520 WordPress Simple Image Manipulator Plugin 1.0任意文件下载
新增：23521 WordPress Recent Backups Plugin 0.7任意文件下载

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；


NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23517 PCMan FTP Server 2.0.7 - PUT Command Buffer Overflow
Added:23518 Dell Netvault Backup 10.0.1.24 - Denial of Service
Added:23519 WordPress WPTF Image Gallery 1.03 - Aribtrary File Download
Added:23520 WordPress Simple Image Manipulator Plugin 1.0 - Arbitrary File Download
Added:23521 WordPress Recent Backups Plugin 0.7 - Arbitrary File Download

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.518。

该升级包新增/改进的规则有：
新增：23500 phpFileManager 0.9.8 - 远程命令执行漏洞
新增：23515 WordPress Customize Youtube Videos 0.2 跨站脚本漏洞
新增：23511 WordPress 1-Click Retweet/Share/Like 5.2 跨站脚本漏洞
新增：23512 WordPress Chief Editor 3.6.1 跨站脚本漏洞
新增：23513 WordPress Advertisement Management 1.0 跨站脚本漏洞
新增：23514 WordPress Copy Or Move Comments 1.0.0 跨站脚本漏洞
新增：23508 WordPress Google Plus One Button By KMS 1.5.0 跨站脚本漏洞
新增：23509 WordPress Ads In Bottom Right 1.0 跨站脚本漏洞
新增：23510 WordPress Author Manager 1.0 跨站脚本漏洞
新增：23507 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2390)
新增：23506 WordPress Flickr Justified Gallery 3.3.6跨站脚本漏洞
新增：23503 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2384)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；



NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23500 phpFileManager 0.9.8 - Remote Command Execution
Added:23515 WordPress Customize Youtube Videos 0.2 Cross Site Scripting
Added:23511 WordPress 1-Click Retweet/Share/Like 5.2 Cross Site Scripting
Added:23512 WordPress Chief Editor 3.6.1 Cross Site Scripting
Added:23513 WordPress Advertisement Management 1.0 Cross Site Scripting
Added:23514 WordPress Copy Or Move Comments 1.0.0 Cross Site Scripting
Added:23508 WordPress Google Plus One Button By KMS 1.5.0 CSRF / XSS
Added:23509 WordPress Ads In Bottom Right 1.0 Cross Site Scripting
Added:23510 WordPress Author Manager 1.0 Cross Site Scripting
Added:23507 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2390)
Added:23506 WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting
Added:23503 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2384)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.517。

该升级包新增/改进的规则有：
新增：10405 ISC BIND named拒绝服务漏洞(CVE-2015-5477)

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:10405 ISC BIND named Denial of Service Vulnerability(CVE-2015-5477)

本升级包为入侵防护特征库升级包，仅支持在固件版本5.6.7.56/67，引擎版本5.6.7.105上升级。升级包为全量升级包。升级后固件版本和引擎版本不变，规则版本变为5.6.7.515。

该升级包新增/改进的规则有：
新增：23492 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-1767)
新增：23493 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2401)
新增：23494 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2406)
新增：23495 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2383)(MS15-065)
新增：23496 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2389)(MS15-065)
新增：23497 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2404)(MS15-065)
新增：23498 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2408)(MS15-065)
新增：23499 Microsoft Internet Explorer远程内存破坏漏洞(CVE-2015-2422)(MS15-065)
新增：41216 P.O.exe账户大盗木马连接服务器

注意事项：
1． 该升级包升级后引擎自动重启生效，不会造成会话中断，但ping包会丢3~5个，请选择合适的时间升级；

NSFOCUS NIDS/NIPS product signature upgrade package, depends on engine v5.6.7.105.This is a total upgrade package. After upgrade package is imported,engine will restart automatically .

List of added or modified signatures:
Added:23492 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-1767)
Added:23493 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2401)
Added:23494 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2406)
Added:23495 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2383)(MS15-065)
Added:23496 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2389)(MS15-065)
Added:23497 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2404)(MS15-065)
Added:23498 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2408)(MS15-065)
Added:23499 Microsoft Internet Explorer Remote Memory Corruption Vulnerability(CVE-2015-2422)(MS15-065)
Added:41216 P.O.exe steal account Trojan server connection