Cryptbot Analyse

IOB - Indicator of Behavior (15)

Zeitverlauf

Sprache

en16

Land

de12
jp2
us2

Akteure

Aktivitäten

Interesse

Zeitverlauf

Typ

Hersteller

Produkt

Huawei ACXXXX2
Huawei SXXXX2
Snipe-IT2
SourceCodester Simple Parking Management System2
OpenX2

Schwachstellen

#SchwachstelleBaseTemp0dayHeuteAusMasCTIEPSSCVE
1perfSONAR file URL Privilege Escalation7.67.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00075CVE-2022-45213
2La-souris-verte Com Svmap index.php Directory Traversal5.35.0$0-$5kWird berechnetProof-of-ConceptNot Defined0.000.01334CVE-2010-1308
3OpenX adclick.php Redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable0.340.00440CVE-2014-2230
4Goahead Software Webserver HTTP Request aux Denial of Service5.34.9$0-$5k$0-$5kProof-of-ConceptWorkaround0.000.06949CVE-2001-0385
5Facebook WhatsApp Video Call Pufferüberlauf8.07.9$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00393CVE-2022-36934
6SourceCodester Simple Parking Management System Cross Site Scripting3.93.8$0-$5k$0-$5kProof-of-ConceptNot Defined0.090.00054CVE-2022-2363
7Snipe-IT Update Branding Settings erweiterte Rechte5.25.2$0-$5k$0-$5kNot DefinedNot Defined0.000.00054CVE-2022-32060
8TOTOLINK EX300 MQTT Data Packet setLanguageCfg erweiterte Rechte7.67.5$0-$5k$0-$5kNot DefinedNot Defined0.000.17797CVE-2022-32449
9IBM Security Access Manager Appliance schwache Verschlüsselung5.75.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00106CVE-2022-22464
10Apache Commons Configuration Variable Interpolation Privilege Escalation8.07.9$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.34543CVE-2022-33980
11TOTOLINK A800R/A810R/A830R/A950RG/A3000RU/A3100R erweiterte Rechte6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.000.00706CVE-2022-28935
12Huawei ACXXXX/SXXXX SSH Packet erweiterte Rechte7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00246CVE-2014-8572
13libvirt libxl Driver Denial of Service3.53.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00044CVE-2021-4147
14Zabbix SAML schwache Authentisierung8.28.2$0-$5k$0-$5kNot DefinedNot Defined0.020.97186CVE-2022-23131
15VMware Spring Framework erweiterte Rechte4.54.5$5k-$25k$5k-$25kNot DefinedNot Defined0.000.00079CVE-2021-22096

IOC - Indicator of Compromise (17)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSchwachstellenZugriffsartTypAkzeptanz
1T1006CWE-22Path TraversalprädiktivHigh
2T1059.007CWE-79Cross Site ScriptingprädiktivHigh
3TXXXXCWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxprädiktivHigh
4TXXXX.XXXCWE-XXXXxxx XxxxxxxxprädiktivHigh
5TXXXXCWE-XXXXxxxxxxxxxxxx XxxxxxprädiktivHigh
6TXXXX.XXXCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxprädiktivHigh

IOA - Indicator of Attack (9)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasseIndicatorTypAkzeptanz
1File/auxprädiktivLow
2File/ci_spms/admin/search/searching/prädiktivHigh
3Filexxxxxxx.xxxprädiktivMedium
4Filexxxxx.xxxprädiktivMedium
5ArgumentxxxxxxxxxxprädiktivMedium
6ArgumentxxxxprädiktivLow
7ArgumentxxxxxxxxprädiktivMedium
8ArgumentxxxxxxprädiktivLow
9Input Value"><xxxxxx>xxxxx("xxx")</xxxxxx>prädiktivHigh

Referenzen (3)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!