Settore Homeofficeinfo

Timeframe: -14 days

Default Categories (32): Android App Software, Anti-Malware Software, Calendar Software, Digital Media Player, Document Processing Software, Document Reader Software, File Compression Software, File Transfer Software, Firewall Software, Game Console, Groupware Software, Hardware Driver Software, Image Processing Software, iOS App Software, Mail Client Software, Messaging Software, Multimedia Player Software, Network Attached Storage Software, Network Encryption Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Remote Access Software, Router Operating System, Smartphone Operating System, Smartwatch Operating System, Spreadsheet Software, Tablet Operating System, Web Browser, Wireless LAN Software, Word Processing Software

Sequenza temporale

Fornitore

Linux54
Google36
Mozilla32
QNAP14
Not Defined12

Prodotto

Linux Kernel54
Google Android34
Mozilla Thunderbird20
QNAP QTS12
QNAP QuTS hero12

Contromisure

Official Fix160
Temporary Fix0
Workaround2
Unavailable0
Not Defined30

Sfruttabilità

High0
Functional0
Proof-of-Concept8
Unproven0
Not Defined184

Accesso al vettore

Not Defined0
Physical4
Local30
Adjacent66
Network92

Autenticazione

Not Defined0
High16
Low102
None74

Interazione dell'utente

Not Defined0
Required42
None150

C3BM Index

CVSSv3 Base

≤10
≤20
≤36
≤412
≤558
≤654
≤720
≤820
≤918
≤104

CVSSv3 Temp

≤10
≤20
≤36
≤420
≤550
≤658
≤724
≤816
≤916
≤102

VulDB

≤10
≤20
≤38
≤420
≤558
≤650
≤720
≤820
≤914
≤102

NVD

≤1186
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤94
≤102

CNA

≤1132
≤20
≤30
≤42
≤54
≤68
≤710
≤86
≤928
≤102

Fornitore

≤1192
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k10
<2k16
<5k72
<10k6
<25k50
<50k26
<100k12
≥100k0

Exploiter aujourd'hui

<1k82
<2k16
<5k46
<10k34
<25k14
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

IOB - Indicator of Behavior (1000)

Sequenza temporale

Linguaggio

en890
fr50
de32
ja10
zh10

Nazione

CN: China318
US: USA238
DE: Germany60
HU: Hungary36
JP: Japan28

Attori

Cobalt Strike3
Carbanak1
Naikon1
Dragonfly1
Grizzly Steppe1

Attività

Interesse

Sequenza temporale

Genere

Smartphone Operating System32
Operating System30
Network Attached Storage Software14
Router Operating System12
Firewall Software8

Fornitore

Google32
Linux26
QNAP14
Not Defined8
Tenda6

Prodotto

Google Android32
Linux Kernel26
QNAP QTS14
QNAP QuTS hero14
Tenda AC6V26

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConEPSSCTICVE
1Netgear R6900 HTTP Header upgrade_check.cgi buffer overflow6.56.2$5k-$25k$0-$5kProof-of-ConceptNot Defined0.000450.13CVE-2024-12147
2Linux Kernel solidrun psnet_open_pf_bar buffer overflow8.07.6$5k-$25k$5k-$25kNot DefinedOfficial Fix0.000450.09CVE-2024-53126
3Google Android gl_proc.c buffer overflow8.07.6$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000430.60CVE-2018-9402
4Microsoft Edge4.34.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000001.20-CVE-2024-49041
5SonicWall SMA100 SSLVPN mod_httprp buffer overflow8.18.1$0-$5k$0-$5kNot DefinedNot Defined0.000000.73CVE-2024-53703
6Linux Kernel dev.c sctp_v6_available buffer overflow8.07.6$5k-$25k$5k-$25kNot DefinedOfficial Fix0.000450.08CVE-2024-53139
7D-Link DIR-605L formSetPortTr buffer overflow8.88.5$25k-$100k$0-$5kProof-of-ConceptNot Defined0.000440.21CVE-2024-11960
8D-Link DIR-605L formResetStatistic buffer overflow8.88.5$25k-$100k$0-$5kProof-of-ConceptNot Defined0.000440.08CVE-2024-11959
9Synology Router Manager OTP directory traversal6.76.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000430.09CVE-2024-11398
10OpenBSD fastcgi Request denial of service7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.000000.90-CVE-2024-11148
11Google Android Mediatek FM Radio Driver fm_set_stat buffer overflow4.24.0$5k-$25k$5k-$25kNot DefinedOfficial Fix0.000430.33CVE-2018-9398
12Google Android LP_MSG_HAL_DIAG_REPORT_DATA_NTF buffer overflow4.24.0$5k-$25k$5k-$25kNot DefinedOfficial Fix0.000430.62CVE-2018-9403
13OpenBSD readdir directory traversal4.64.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.000000.77-CVE-2024-10933
14SonicWall SMA100 Web Management Interface buffer overflow8.17.7$0-$5k$0-$5kNot DefinedOfficial Fix0.000000.34CVE-2024-45318
15Linux Kernel initramfs buffer-format.rst do_name Privilege Escalation8.07.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.000000.73CVE-2024-53142
16Google Android af_packet.c __unregister_prot_hook buffer overflow5.35.1$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000430.21CVE-2018-9439
17Linux Kernel dw_mmc buffer overflow7.16.8$5k-$25k$5k-$25kNot DefinedOfficial Fix0.000450.36CVE-2024-53127
18Google Android ftm4_pdc.c store_cmd buffer overflow4.24.0$5k-$25k$5k-$25kNot DefinedOfficial Fix0.000430.13CVE-2018-9462
19SonicWall SMA100 crittografia debole5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000000.51CVE-2024-53702
20Google Chrome V8 escalazione di privilegi7.57.4$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000430.21CVE-2024-12053

IOC - Indicator of Compromise (15)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

IDIP rangeAttoreGenereFiducia
15.79.66.0/24APT33predictiveAlto
25.255.123.0/24BianLianpredictiveAlto
3XX.XXX.XX.X/XXXxxxxxx XxxxxxpredictiveAlto
4XX.XXX.XXX.X/XXXxxxxxxpredictiveAlto
5XX.XXX.XXX.X/XXXxxxxxxpredictiveAlto
6XX.XXX.XX.X/XXXxxxxxxxxxxxxpredictiveAlto
7XX.XX.XXX.X/XXXxxxxxxxpredictiveAlto
8XXX.XXX.XXX.X/XXXxxxxx XxxxxxpredictiveAlto
9XXX.XX.XXX.X/XXXxxxxx XxxxxxpredictiveAlto
10XXX.XX.XXX.X/XXXxxxxxxxxxxxpredictiveAlto
11XXX.XX.X.X/XXXxxxxpredictiveAlto
12XXX.XXX.XXX.X/XXXxxxxxx XxxxxpredictiveAlto
13XXX.XX.XX.X/XXXxxxxxx XxxxxxpredictiveAlto
14XXX.XX.XXX.X/XXXxxxxx XxxxxxpredictiveAlto
15XXX.XX.XXX.X/XXXxxxxxxxxpredictiveAlto

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClasseVulnerabilitàAccesso al vettoreGenereFiducia
1T1006CAPEC-126CWE-22Path TraversalpredictiveAlto
2T1059CAPEC-242CWE-94, CWE-1321Argument InjectionpredictiveAlto
3T1059.007CAPEC-209CWE-79Basic Cross Site ScriptingpredictiveAlto
4TXXXX.XXXCAPEC-XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveAlto
5TXXXXCAPEC-XXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveAlto
6TXXXXCAPEC-XCWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveAlto
7TXXXXCAPEC-XXXCWE-XXXxx XxxxxxxxxpredictiveAlto
8TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveAlto
9TXXXX.XXXCWE-XXXXxxxxxxx Xx Xxxxxxxxxxxxx XxxxpredictiveAlto
10TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxxxxxxpredictiveAlto
11TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveAlto
12TXXXXCAPEC-XXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto
13TXXXX.XXXCAPEC-XXXCWE-XXX, CWE-XXX, CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveAlto

IOA - Indicator of Attack (62)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/cgi-bin/luci/adminpredictiveAlto
2File/cgi-bin/luci/admin/opsw/Dual_freq_un_applepredictiveAlto
3File/goform/formResetStatisticpredictiveAlto
4File/goform/formSetPortTrpredictiveAlto
5File/goform/SetStaticRouteCfgpredictiveAlto
6File/proc/driver/wmt_dbgpredictiveAlto
7Fileaf_packet.cpredictiveMedia
8Filebtif_rc.ccpredictiveMedia
9Filexxxx_xxxxxxx.xxpredictiveAlto
10Filexxx_xxxxxxx_xxxxxxxxx_xxxx.xxxpredictiveAlto
11Filexxxxxxxxxxxxx/xxxxxx-xxx/xxxxx-xxxxxxxxx/xxxxxx-xxxxxx.xxxpredictiveAlto
12Filexxxxxxx/xxxxx/xxxxxxxxxxx/xxxxxxxx/xxxxxx/xxxx_xxxxxxx.xpredictiveAlto
13Filexxxxxxx/xxxxx/xxxxxxxxxxx/xxx/xxxx_xxx.xpredictiveAlto
14Filexxxxxxx/xxxx/xxxxxxxx/xxxxxxxxxxxx/xxxx/xxxx/xx/xxxxx/xx_xxx.xpredictiveAlto
15Filexxxxxxx/xxxx/xxxxxxxx/xxxxxxxxxxxx/xxxx/xxxx/xx/xxxxx/xx_xxxx.xpredictiveAlto
16Filexxxxxxx/xxxx/xxxxxxxx/xxxxxxxxxxxx/xxxx/xxxx/xx/xxxxx/xx_xxxxxx.xpredictiveAlto
17Filexxxxxxx/xxxx/xxxxxxxx/xxxxx/xxxx_xxx.xpredictiveAlto
18Filexxxx_xx.xxpredictiveMedia
19Filexxxxx-xxxx.xxpredictiveAlto
20Filexxxx_xxxx.xpredictiveMedia
21Filexx/xxxxx/xxxxxxxx.xpredictiveAlto
22Filexxxx_xxx.xpredictiveMedia
23Filexxxx_xx.xxpredictiveMedia
24Filexxxx_xx.xpredictiveMedia
25Filexx_xxxx.xpredictiveMedia
26Filexxx.xpredictiveBasso
27Filexxxxxxxxxxxxxxxxxxx.xxxpredictiveAlto
28Filexxxxxx_xxxxx.xpredictiveAlto
29Filexxxxxx_xxx_xxxx.xpredictiveAlto
30Filexxxxxx_xxx.xpredictiveMedia
31Filexxxxxx_xxxxx_xxxxx.xpredictiveAlto
32Filexxxxxx_xxxxx_xxxxx_xxxxxx.xpredictiveAlto
33Filexxxxxxx/xxxxx/xxxx_xxxxx.xpredictiveAlto
34Filexxxxxxxxx.xxxpredictiveAlto
35Filexxxxxx/xxxxxxx/xxxxx.xpredictiveAlto
36Filexxx_xxx.xxpredictiveMedia
37Filexxxxx.xpredictiveBasso
38Filexxx_xx_xxxx.xpredictiveAlto
39Filexxx/xxxx/xxx.xpredictiveAlto
40Filexxx/xxxx/xx_xxxx.xpredictiveAlto
41Filexx xxxxxxxxxx/xxxxxx/xxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxx.xxxpredictiveAlto
42Filexxxxxxx.xxxxpredictiveMedia
43Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
44Filexxxxx_xxx_xxxx_xxxx_xxxx.xxxpredictiveAlto
45Filexxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
46Filexxx.xxxpredictiveBasso
47Filexxxx/xx.xpredictiveMedia
48Filexxx_xxxxxxxxx.xxpredictiveAlto
49Filexxxxxxxx.xxxpredictiveMedia
50Filexxxxx_xxxxxxx.xpredictiveAlto
51Filexxxxxxx_xxxxx.xxxpredictiveAlto
52Filexxxxxx/xxxxxxxx/xxxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxx/xxx/xxx_xxx/xxx/xxxx_xxxxx.xpredictiveAlto
53Filexxxxxx/xxxxxxxx/xxxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxx/xxx/xxx_xxx/xxx/xxxxxx_xxxpredictiveAlto
54Filexxxxxxxxxxxxxxxxxxx.xxxpredictiveAlto
55Libraryxxx/xxxxxxxx.xpredictiveAlto
56Argumentxxxxxxx-xxxxxxpredictiveAlto
57ArgumentxxxxxxxpredictiveBasso
58ArgumentxxxxpredictiveBasso
59ArgumentxxxxpredictiveBasso
60Argumentxxxx_xxx_xxxxxpredictiveAlto
61ArgumentxxxxxpredictiveBasso
62Argumentxxx_xxxpredictiveBasso
◂ PrecedenteVisione D'insiemeIl prossimo ▸

This view requires CTI permissions

Just purchase a CTI license today!