CryptoWire 解析

IOB - Indicator of Behavior (19)

タイムライン

言語

zh10
en10

国・地域

cn18
us2

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

OPNsense4
Apache HTTP Server2
phpBB2
Open Whisper Signal2
EmpireCMS2

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1OPNsense Access Control 特権昇格6.46.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000510.00CVE-2018-18958
2Apple macOS Kernel 特権昇格5.45.3$0-$5k$0-$5kHighOfficial Fix0.003400.00CVE-2023-38606
3Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx 特権昇格8.17.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.000630.00CVE-2023-6099
4EmpireCMS AdClass.php SQLインジェクション6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.001720.04CVE-2022-28585
5Apache HTTP Server HTTP/2 Request 特権昇格6.46.4$5k-$25k$5k-$25kNot DefinedNot Defined0.006060.04CVE-2020-9490
6Qualcomm Snapdragon Auto SIP sigcomp Message メモリ破損7.67.6$5k-$25k$5k-$25kNot DefinedOfficial Fix0.001880.00CVE-2020-3639
7OPNsense Login Page Redirect5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.001790.01CVE-2020-23015
8TOTOLINK A800R/A810R/A830R/A950RG/A3000RU/A3100R setWebWlanIdx 特権昇格5.55.3$0-$5k$0-$5kNot DefinedNot Defined0.017020.00CVE-2022-26208
9Cisco RV340/RV345 Web-based Management Interface メモリ破損4.74.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.002110.00CVE-2022-20753
10Wowza Streaming Engine Password File admin.password 弱い暗号化3.33.3$0-$5k$0-$5kNot DefinedNot Defined0.000420.00CVE-2021-31539
11Cisco IOS/IOS XE DHCP Relay 特権昇格9.89.7$25k-$100k$5k-$25kHighOfficial Fix0.051780.00CVE-2017-12240
12Freeware Advanced Audio Coder huff2.c huffcode メモリ破損4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000510.00CVE-2018-19890
13Open Whisper Signal クロスサイトスクリプティング5.25.2$5k-$25k$0-$5kNot DefinedNot Defined0.001860.00CVE-2018-11101
14phpBB Admin Control Panel file_exists 特権昇格5.95.8$0-$5k$0-$5kNot DefinedOfficial Fix0.771890.06CVE-2018-19274
15phpBB 情報の漏洩9.88.5$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.002690.00CVE-2008-1766
16Microsoft Exchange Server Privilege Escalation8.87.7$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.012580.00CVE-2021-28482
17Discuz! admin.php クロスサイトスクリプティング3.63.6$0-$5k$0-$5kNot DefinedNot Defined0.000540.04CVE-2018-19464
18Pulse Secure Pulse Connect Secure End User Portal custompage.cgi クロスサイトスクリプティング3.63.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2017-17947

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIPアドレスHostnameアクターキャンペーンIdentifiedタイプ信頼度
1194.156.98.51vm1867589.stark-industries.solutionsCryptoWire2024年03月19日verified

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueクラス脆弱性アクセスベクタータイプ信頼度
1T1059.007CAPEC-209CWE-79Cross Site Scriptingpredictive
2T1068CAPEC-122CWE-269, CWE-284Execution with Unnecessary Privilegespredictive
3TXXXXCAPEC-136CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxpredictive
4TXXXX.XXXCAPEC-178CWE-XXXXxxx Xxxxxxxxpredictive
5TXXXXCAPEC-108CWE-XXXxx Xxxxxxxxxpredictive
6TXXXXCAPEC-37CWE-XXXXxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxpredictive
7TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxpredictive

IOA - Indicator of Attack (12)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/SystemMng.ashxpredictive
2FileAdClass.phppredictive
3Filexxxxx.xxxpredictive
4Filexxxx/xxxxx.xxxxxxxxpredictive
5Filexxxxxxxxxx.xxxpredictive
6Filexxxxxxx/xxxxx.xpredictive
7Argumentxxxxxxxxxxxxpredictive
8Argumentxxxxxx/xxxxxx/xxxpredictive
9Argumentxxxxxxxxpredictive
10Argumentxxxpredictive
11Argumentxxxxxxxxxxpredictive
12Input Valuexxpredictive

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!