IPS Event 1131523

NE_Rich · May 2023

WatchGuard T40 12.9.3 IPS Signature 18.264

Signature ID: 1131523

https://securityportal.watchguard.com/Threats/Detail?ruleId=1131523

I have the above single IPS event happen every day now either from my colleagues PC or mine. Rather concerning is that when it was my PC, I wasn't actually using it at the time but would have been on. My colleagues PC is fresh out of the box. Both are running Edge on Windows 11 and so it seems to be strange that this vulnerability is related to Internet Explorer. The destination IP seems to be Amazon. Is this a false positive? Is there anything else I can do other than AV scans?

Many Thanks

Bruce_Briggs · May 2023

This is for CVE-2015-2425 - from 2015, for IE 11, which is no longer supported or available - so this must be a false positive.

From the Mitre link in the above link:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2425

NE_Rich · May 2023

Thanks, I may report it as a false positive.

IPS Event 1131523

Comments