CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.2 | $0-$5k | 0.00 |
Overview
A vulnerability classified as problematic has been found in cronvel tree-kit up to 0.6.x. This affects an unknown part. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The CWE definition for the vulnerability is CWE-1321. The weakness was published 12/25/2022 as a63f559c50d70e8cb2eaae670dec25d1dbc4afcd. The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2021-4278. The attack needs to be done within the local network. There are no technical details available. There is no exploit available. The price for an exploit might be around USD $0-$5k at the moment. MITRE ATT&CK project uses the attack technique T1059 for this issue. It is declared as not defined. We expect the 0-day to have been worth approximately $0-$5k. Upgrading to version 0.7.0 is able to address this issue. The updated version is ready for download at github.com. The identifier of the patch is a63f559c50d70e8cb2eaae670dec25d1dbc4afcd. The bugfix is ready for download at github.com. It is recommended to upgrade the affected component. [Details]
IOB - Indicator of Behavior (211)
Timeline
The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.
Activities
IOC - Indicator of Compromise (3)
These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.
ID | IP range | Actor | Type | Confidence |
---|---|---|---|---|
1 | 3.71.81.0/24 | Sliver | predictive | High |
2 | XX.XXX.XX.X/XX | Xxxxxxx | predictive | High |
3 | XXX.XXX.XXX.X/XX | Xxxx | predictive | High |
TTP - Tactics, Techniques, Procedures (1)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.