Potential Vulnerable Java version 11.0.x Detected on Hubitat C-5

📢 Feedback
1

Hi,

Not sure whether this is going to be a good group to post or not...

I just installed Synology Router (I used Asus router in the past), and Synology router has Threat Prevention app that alerts me for any potential vulnerable connections/clients installed inside my LAN network.

I received the following alert from Hubitat; and I'm not sure whether this warning is a valid thing or not, thought of reaching out to the lovely Hubitat developer to let you know about this.

Hardware Version: C-5
Platform Version: 2.4.3.158

Warning from Synology:

  • Classification: Potentially Bad Traffic
  • Severity: Medium
  • Destination IP: 23.214.110.226
  • Signature Name: ET POLICY Vulnerable Java Version 11.0.x Detected

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY Vulnerable Java Version 11.0.x Detected"; flow:established,to_server; flowbits:set,ET.http.javaclient.vulnerable; http.user_agent; content:"Java/11.0."; content:!"25"; within:2; threshold: type limit, count 2, seconds 300, track by_src; reference:url,Java Development Kit 11 Release Notes; classtype:bad-unknown; sid:2028867; rev:13; metadata:affected_product Java, attack_target Client_Endpoint, created_at 2019_10_18, deployment Perimeter, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_10_29;)

If there is anything that I could assist, please let me know

Thank you!

2

"According to a Forbes article from July 2024, more than 32% of applications were using Java 11 in production. "

Java 11 is still in widespread use. The vulnerability warning is only that it is now out of support for future security patches.

4 Likes
3

cool, good to know that's it's a warning only....

4

Always good to know when you are running unsupported software, but it really comes down to how long it has been out of support to actually become a security issue.

It is like using Windows 10 and getting the warning that it is out of support if you continue using it. Right now, not too many people are too concerned about it.