Mispadu Analysis

IOB - Indicator of Behavior (20)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en8
de8
ar4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us14
ir4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Tribe29 Checkmk4
SilverStripe2
netcf2
WordPress2
ubuntu Linux2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Huawei ACXXXX/SXXXX SSH Packet input validation7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00246CVE-2014-8572
2Huawei SXXX VRP MPLS LSP Ping information disclosure5.35.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00096CVE-2014-8570
3Tribe29 Checkmk Livestatus Query Language injection7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00043CVE-2022-47909
4Tribe29 Checkmk Agent Updater Log File information disclosure5.15.1$0-$5k$0-$5kNot DefinedNot Defined0.040.00043CVE-2022-48319
5Microsoft Windows ISATAP access control6.56.2$25k-$100k$0-$5kNot DefinedOfficial Fix0.020.06396CVE-2010-0812
6IBM DB2 access control6.36.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00343CVE-2011-1846
7Nicholas Marriott tmux access control5.95.6$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00051CVE-2011-1496
8WordPress path traversal5.75.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.00326CVE-2023-2745
9netcf Path Expression find_ifcfg_path input validation5.95.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00662CVE-2014-8119
10Xerox Workcentre 5655 Authorization information disclosure5.35.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00251CVE-2010-0548
11Xerox Workcentre 6400 Net Controller information disclosure5.35.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.020.00204CVE-2010-0549
12SilverStripe information disclosure5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.020.01045CVE-2010-5188
13ubuntu Linux improper authentication10.09.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.00272CVE-2010-0834
14Red Hat Enterprise Linux input validation5.35.3$5k-$25k$5k-$25kNot DefinedNot Defined0.000.00342CVE-2010-2598
15Drupal Form API injection5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.060.00093CVE-2022-25271
16Mahara Single Sign-On improper authentication6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00450CVE-2010-1670
17Green Hills INTEGRITY RTOS Interpeak IPCOMShell TELNET Server memory corruption8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00308CVE-2019-7713
18Samba receive_smb_raw memory corruption7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.030.97018CVE-2008-1105

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (1)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1Argumentdebug_profilepredictiveHigh

References (4)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!