display ips-signature cve-id

Function

The display ips-signature cve-id command displays IPS signatures of a specified CVE ID.

Format

display ips-signature cve-id { cve-id | year year }

Parameters

Parameter	Description	Value
cve-id	Specifies a CVE ID.	The value is a string of 13 to 16 characters.
year year	Specifies the release year of the CVE.	The value is an integer ranging from 1999 to 2099.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After cve-id is specified, this command displays predefined IPS signatures of the specified CVE ID. After year is specified, this command displays predefined IPS signatures of the specified release year of CVEs.

Example

# Display IPS predefined signatures of the CVE with the ID being CVE-2014-0498.

<sysname> display ips-signature cve-id CVE-2014-0498
 ----------------------------------------------------------------------------                                                       
 *                          Pre-defined Signature                           *                                                       
 *                             (Counts:    1)                               *                                                       
 ----------------------------------------------------------------------------                                                       
 Sig-ID   Protocol     Severity    OS           CVE-ID              VENDOR-ID                                                       
 ----------------------------------------------------------------------------                                                       
 281920   FILE          high       all          CVE-2014-0498       N/A

# Display IPS predefined signatures of the CVEs released in 2014.

<sysname> display ips-signature cve-id year 2014
 ----------------------------------------------------------------------------                                                       
 *                          Pre-defined Signature                           *                                                       
 *                             (Counts:   11)                               *                                                       
 ----------------------------------------------------------------------------                                                       
 Sig-ID   Protocol     Severity    OS           CVE-ID              VENDOR-ID                                                       
 ----------------------------------------------------------------------------                                                       
 173880   SSL           high       all          CVE-2014-0160       N/A                                                             
 269361   SSL           medium     all          CVE-2014-3566       N/A                                                             
 167250   FILE          high       windows      CVE-2014-0301       MS14-013                                                        
 174331   HTTP          high       windows      CVE-2014-0315       MS14-019                                                        
 257330   HTTP          medium     windows      CVE-2014-2880       N/A                                                             
 281920   FILE          high       all          CVE-2014-0498       N/A                                                             
 284550   HTTP          medium     all          CVE-2014-6039       N/A                                                             
 287990   TCP           high       unix-like    CVE-2014-0659       N/A                                                             
 291190   FILE          high       all          CVE-2014-0518       N/A                                                             
 291910   HTTP          high       windows      CVE-2014-6344       N/A                                                             
 269360   SSL           medium     all          CVE-2014-3566       N/A

**Table 1** Description of the **display ips-signature cve-id** command output
Item	Description
Counts	Number of predefined signatures
Sig-ID	ID of a predefined signature
Protocol	Protocol of a predefined signature
Severity	Severity of a predefined signature, which can be: high medium low info
OS	Applicable OS of a predefined signature
CVE-ID	CVE ID
VENDOR-ID	Vendor ID