Bondnet Analysis

IOB - Indicator of Behavior (35)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en22
zh14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

cn28
us8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Schneider Electric EcoStruxure Control Expert2
Schneider Electric Unity Pro2
CMS Made Simple2
Weaver E-Office2
Veritas NetBackup2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Kubernetes kubelet pprof information disclosure7.37.2$0-$5k$0-$5kNot DefinedOfficial Fix0.080.55583CVE-2019-11248
2AWStats Config awstats.pl cross site scripting4.34.1$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.190.00587CVE-2006-3681
3Microsoft Windows User Access Policy improper authentication7.87.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00043CVE-1999-0505
4Hikvision Intercom Broadcasting System ping.php os command injection7.57.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.140.90160CVE-2023-6895
5Weaver E-Office File Upload utility_all.php command injection7.16.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.070.00064CVE-2023-2647
6Weaver OA downfile.php absolute path traversal4.33.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.050.00121CVE-2023-2765
7Hikvision LocalServiceComponents Messages Remote Code Execution7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.040.00048CVE-2023-28813
8Hikvision Intercom Broadcasting System exportrecord.php path traversal5.45.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.050.00064CVE-2023-6893
9DataGear pagingQueryData sql injection7.57.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.140.00119CVE-2023-1571
10kalcaddle KodExplorer cross-site request forgery5.85.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.030.00125CVE-2022-4944
11node-sqlite3 dynamically-managed code resources7.87.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00257CVE-2022-43441
12Web2py Sample Web Application session.connect hard-coded credentials8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.020.02059CVE-2016-3953
13Gxlcms TplAction.class.php add information disclosure7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.020.01201CVE-2018-14685
14O2OA invoke Privilege Escalation6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00497CVE-2022-22916
15Cognos Powerplay Web Edition ppdscgi.exe information disclosure5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.040.00000
16Strapi Admin Panel authorization5.65.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00109CVE-2021-28128
17DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.610.00943CVE-2010-0966
18Schneider Electric EcoStruxure Control Expert/Unity Pro write-what-where condition7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00072CVE-2020-7560
19Portainer access control8.08.0$0-$5k$0-$5kNot DefinedNot Defined0.020.01314CVE-2020-24264
20CMS Made Simple Watermark class.showtime2_image.php unrestricted upload6.56.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.020.43026CVE-2019-9692

IOC - Indicator of Compromise (27)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (25)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/analysisProject/pagingQueryDatapredictiveHigh
2File/debug/pprofpredictiveMedium
3File/E-mobile/App/System/File/downfile.phppredictiveHigh
4File/php/exportrecord.phppredictiveHigh
5File/xxx/xxxx.xxxpredictiveHigh
6File/xxxxxxx/xxx/xxxxxxx_xxx.xxxpredictiveHigh
7File/x_xxxxxxx_xxxxxx/xxxxx/xxxxxxpredictiveHigh
8Filexxxxxxx.xxpredictiveMedium
9Filexxxxx.xxxxxxxxx_xxxxx.xxxpredictiveHigh
10Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
11Filexxx/xxxxxx.xxxpredictiveHigh
12Filexxxxxxxx.xxxpredictiveMedium
13Filexxxxxxx.xxxpredictiveMedium
14Filexxx_xxxxxx.xpredictiveMedium
15Filexxx_xxxxxx.xxpredictiveHigh
16Libraryxxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxxpredictiveHigh
17ArgumentxxxxxxxxpredictiveMedium
18ArgumentxxxxxxpredictiveLow
19ArgumentxxxxxxxxpredictiveMedium
20ArgumentxxpredictiveLow
21Argumentxxxxxxxx[xx]predictiveMedium
22ArgumentxxxxxxxxxxpredictiveMedium
23ArgumentxxxpredictiveLow
24Input Valuex:\xxxxx\xxxx\xxx\xxx\xxxxxxxxxx.xxxpredictiveHigh
25Input Valuexxxxxxx -xxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!