Protection against critical Windows vulnerability (CVE-2015-1635)
Apr 15, 2015Ben Cartwright-Cox
Summary
Introduced a new WAF rule to automatically block requests exploiting MS15-034 (CVE-2015-1635) by inspecting HTTP Range headers. This provides immediate protection for paid plan customers with WAF enabled against this specific DoS/RCE vulnerability.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack