alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (
msg:"ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Auto-enable the Microhard Sh (msshc) service";
flow:established,to_server;
http.uri;
content:"/system-services.sh?service=msshc&action=enable"; fast_pattern;
reference:url,exploit-db.com/exploits/45036/;
classtype:attempted-user;
sid:2025860; rev:2;
metadata:attack_target Server, created_at 2018_07_17, deployment Datacenter, performance_impact Low, signature_severity Major, updated_at 2020_08_25;
)