3AM Analiza

IOB - Indicator of Behavior (34)

Oś czasu

Język

en26
zh4
ru4

Kraj

us30
cn4

Aktorzy

Zajęcia

Wysiłek

Oś czasu

Rodzaj

Sprzedawca

Produkt

AVTECH IP Camera2
AVTECH NVR2
AVTECH DVR2
Bitrix Site Manager2
FLDS2

Luki w zabezpieczeniach

#Słaby punktBaseTemp0dayDzisiajWykPrzEPSSCTICVE
1LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000001.92
2Bitrix Site Manager redirect.php privilege escalation5.34.7$0-$5k$0-$5kUnprovenUnavailable0.001130.03CVE-2008-2052
3Serendipity exit.php privilege escalation6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.57
4GetSimpleCMS index.php Redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001230.00CVE-2019-9915
5FLDS redir.php sql injection7.37.3$0-$5k$0-$5kHighUnavailable0.002030.07CVE-2008-5928
6Login and Logout Redirect Plugin3.53.4$0-$5k$0-$5kNot DefinedNot Defined0.000460.03CVE-2023-41648
7Honeywell ProWatch privilege escalation7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.03CVE-2023-6179
8SolusVM WHMCS privilege escalation6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.000640.05CVE-2022-42175
9Openads adclick.php Remote Code Execution7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.018710.36CVE-2007-2046
10MB connect line mymbCONNECT24/mbCONNECT24 redirect.php Redirect6.26.2$0-$5k$0-$5kNot DefinedOfficial Fix0.000840.04CVE-2020-35560
11WordPress AdServe adclick.php sql injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000730.08CVE-2008-0507
12Xitex Xitex WebContent M1 redirect.do cross site scripting4.34.2$0-$5k$0-$5kHighUnavailable0.001920.03CVE-2008-1209
13OpenX adclick.php Redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable0.004400.60CVE-2014-2230
14Samsung Memory Card & UFD Authentication Utility PC Software weak authentication7.67.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.00CVE-2023-41929
15Crypto++ ECDSA Signature Generation FixedSizeAllocatorWithCleanup information disclosure5.05.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000460.00CVE-2022-48570
16AVM FRITZ!Box webcm privilege escalation7.37.1$0-$5k$0-$5kHighWorkaround0.957020.03CVE-2014-9727
17grunt Package load privilege escalation5.85.2$0-$5k$0-$5kNot DefinedOfficial Fix0.008510.07CVE-2020-7729
18Memcached process_bin_update memory corruption9.08.9$0-$5k$0-$5kNot DefinedOfficial Fix0.867320.03CVE-2016-8705
19AVTECH IP Camera/NVR/DVR PwdGrp.cgi privilege escalation9.89.2$5k-$25k$0-$5kHighUnavailable0.000000.05

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDadres IPHostnameAktorKampanieIdentifiedRodzajPewność siebie
185.159.229.623AM2023-10-11verifiedWysoki
2XXX.XXX.X.XXXXxx2023-10-11verifiedWysoki
3XXX.XX.XXX.XXxx2023-10-11verifiedWysoki

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlasaLuki w zabezpieczeniachWektor dostępuRodzajPewność siebie
1T1059CAPEC-242CWE-94Argument InjectionpredictiveWysoki
2T1059.007CAPEC-209CWE-79Cross Site ScriptingpredictiveWysoki
3TXXXXCAPEC-122CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
4TXXXXCAPEC-136CWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveWysoki
5TXXXX.XXXCAPEC-178CWE-XXXXxxx XxxxxxxxpredictiveWysoki
6TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveWysoki
7TXXXXCAPEC-462CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveWysoki

IOA - Indicator of Attack (16)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasaIndicatorRodzajPewność siebie
1File/cgi-bin/supervisor/PwdGrp.cgipredictiveWysoki
2File/forum/away.phppredictiveWysoki
3Fileadclick.phppredictiveMedium
4Filexxxxx/xxxxx.xxxpredictiveWysoki
5Filexxx-xxx/xxxxxpredictiveWysoki
6Filexxxx.xxxpredictiveMedium
7Filexxxxx.xxxpredictiveMedium
8Filexxxxxxxx.xxpredictiveMedium
9Filexxxxxxxx.xxxpredictiveMedium
10ArgumentxxxxpredictiveNiski
11ArgumentxxxxpredictiveNiski
12ArgumentxxpredictiveNiski
13ArgumentxxxxxxxxpredictiveMedium
14ArgumentxxxpredictiveNiski
15ArgumentxxxpredictiveNiski
16Argumentxxx:xxxxpredictiveMedium

Referencje (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!