Unusual Security Alert

Follow

Michael Clark

• February 19, 2020 00:21

Alert says "An SQL injection victim was discovered!" When I look at the details the Device Info is all zeros? The destination domain, site, and address are all related to wikipedia. There was no data transferred. Not sure how to react to this?

0

• 

  Firewalla

  • February 19, 2020 00:28

  I think you may run into a UI bug.  Are you using Android or iOS?

  0

  Comment actions Permalink
• 

  Michael Clark

  • February 19, 2020 00:41

  Android

  0

  Comment actions Permalink
• 

  Ben Naaktgeboren

  • May 22, 2020 09:58

  Same "problem" here. What does it means?

  0

  Comment actions Permalink
• 

  Firewalla

  • May 22, 2020 18:32

  A few months ago, the problem was a bug in app, that doesn't display the details.   That should be fixed.

  This particular alarm is more of Firewalla detects there is a possibility (likely, but not always guaranteed) that one of devices is sending out a query pattern in the URL that match (using regex) a pattern used to do SQL injection. (SQL commands in the URL, and hoping it gets executed).   Since regex is used, false-positive is likely.

  0

  Comment actions Permalink
• 

  Brian

  • January 04, 2021 04:17

  I have received two such Sql injection errors on my gold firewall and the details are still missing on which device on my network are responsible for the notification... I am on the must recent version of Android app. Thanks!

  0

  Comment actions Permalink
• 

  Firewalla

  • January 04, 2021 07:48

  Tap on the alarm and send that information to help@firewalla.com, we can help you take a look. 

  Sql injection are matching special patterns in the URL ... so it is possible at times there are false positives. 

  0

  Comment actions Permalink
• 

  MtClouds

  • March 18, 2021 01:57

  I just experienced the same issue - security alert SQL injection with all 0s and no actionable information. 

  When I choose device details I get a failed to load device error.

  Can you please explain how to send the information to Firewalla.  When I tap on the alarm I have no option to send the details that I can find.

  0

  Comment actions Permalink

Please sign in to leave a comment.