Mispadu تحليل

IOB - Indicator of Behavior (20)

التسلسل الزمني

اللغة

de14
en4
ar2

البلد

us18
ir2

الفاعلين

النشاطات

الاهتمام

التسلسل الزمني

النوع

المجهز

منتج

Huawei SXXX2
Nicholas Marriott tmux2
Mahara2
Tribe29 Checkmk2
Drupal2

الثغرات

#الثغرةBaseTemp0dayاليومق�معالجةCTIEPSSCVE
1Huawei ACXXXX/SXXXX SSH Packet تجاوز الصلاحيات7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00246CVE-2014-8572
2Huawei SXXX VRP MPLS LSP Ping الكشف عن المعلومات5.35.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00096CVE-2014-8570
3Tribe29 Checkmk Livestatus Query Language تجاوز الصلاحيات7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00043CVE-2022-47909
4Tribe29 Checkmk Agent Updater Log File الكشف عن المعلومات5.15.1$0-$5k$0-$5kNot DefinedNot Defined0.040.00043CVE-2022-48319
5Microsoft Windows ISATAP تجاوز الصلاحيات6.56.2$25k-$100k$0-$5kNot DefinedOfficial Fix0.020.06396CVE-2010-0812
6IBM DB2 تجاوز الصلاحيات6.36.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00343CVE-2011-1846
7Nicholas Marriott tmux تجاوز الصلاحيات5.95.6$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00051CVE-2011-1496
8WordPress اجتياز الدليل5.75.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.00326CVE-2023-2745
9netcf Path Expression find_ifcfg_path تجاوز الصلاحيات5.95.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00662CVE-2014-8119
10Xerox Workcentre 5655 Authorization الكشف عن المعلومات5.35.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00251CVE-2010-0548
11Xerox Workcentre 6400 Net Controller الكشف عن المعلومات5.35.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.020.00204CVE-2010-0549
12SilverStripe الكشف عن المعلومات5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.020.01045CVE-2010-5188
13ubuntu Linux توثيق ضعيف10.09.5$5k-$25kجاري الحسابNot DefinedOfficial Fix0.030.00272CVE-2010-0834
14Red Hat Enterprise Linux تجاوز الصلاحيات5.35.3$5k-$25k$5k-$25kNot DefinedNot Defined0.000.00342CVE-2010-2598
15Drupal Form API تجاوز الصلاحيات5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.060.00093CVE-2022-25271
16Mahara Single Sign-On توثيق ضعيف6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00450CVE-2010-1670
17Green Hills INTEGRITY RTOS Interpeak IPCOMShell TELNET Server تلف الذاكرة8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00308CVE-2019-7713
18Samba receive_smb_raw تلف الذاكرة7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.030.97018CVE-2008-1105

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueالثغراتمتجه الوصولالنوعالثقة
1T1006CWE-22Path Traversalpredictiveعالي
2TXXXXCWE-XXXxxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxx Xxxxx Xxxxxxxxxxxpredictiveعالي
3TXXXXCWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxxpredictiveعالي
4TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxpredictiveعالي

IOA - Indicator of Attack (1)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDالفئةIndicatorالنوعالثقة
1Argumentdebug_profilepredictiveعالي

المصادر (4)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!