RedDelta Analys

IOB - Indicator of Behavior (18)

Tidslinje

Lang

en18

Land

us10
ru4
it4

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

ZyXEL ZyNOS4
WAGO Compact Controller CC1002
WAGO Edge Controller2
WAGO Series PFC1002
WAGO Series PFC2002

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemEPSSCTICVE
1Synology DiskStation Manager Change Password privilegier eskalering7.17.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000680.03CVE-2018-8916
2MinIO kataloggenomgång6.86.7$0-$5k$0-$5kNot DefinedOfficial Fix0.002460.04CVE-2022-35919
3Magento sql injektion8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.005820.03CVE-2019-7139
4Ruijie RG-EW/RG-NBS/RG-EG/EAP/RAP/NBC POST Request auth privilegier eskalering8.08.0$0-$5k$0-$5kNot DefinedNot Defined0.002860.04CVE-2023-34644
5Fortinet FortiOS/FortiProxy FortiGate SSL-VPN minneskorruption9.89.6$25k-$100k$25k-$100kNot DefinedOfficial Fix0.154070.04CVE-2023-27997
6WAGO Compact Controller CC100 Web-based Management privilegier eskalering5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.000630.03CVE-2022-45139
7ZyXEL ZyNOS Default Password Remote Code Execution7.37.1$5k-$25k$0-$5kHighUnavailable0.007880.00CVE-2008-1522
8ZyXEL ZyNOS Admin Account privilegier eskalering5.34.7$5k-$25k$0-$5kUnprovenUnavailable0.003770.00CVE-2008-1529
9TablePress XML External Entity5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000490.00CVE-2017-10889
10Fortinet FortiOS sslvpnd minneskorruption9.89.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.418830.00CVE-2022-42475
11OKLOK Mobile Companion App Password Requirements svag autentisering6.76.7$0-$5k$0-$5kNot DefinedNot Defined0.024400.00CVE-2020-8790
12Moodle Database Module Web Service sql injektion6.05.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.001270.00CVE-2020-25700
13Moodle MNet sql injektion6.36.3$5k-$25k$5k-$25kNot DefinedNot Defined0.000870.00CVE-2021-32474
14Kaseya Virtual System Administrator informationsgivning3.53.4$0-$5k$0-$5kHighOfficial Fix0.885370.04CVE-2021-30116
15Samsung Galaxy Bitmap privilegier eskalering5.45.1$5k-$25k$0-$5kProof-of-ConceptUnavailable0.000530.03CVE-2015-7895
16Western Digital WD My Book Live/WD My Book Live Duo Administrator API förnekande av tjänsten8.28.0$0-$5k$0-$5kHighWorkaround0.001340.00CVE-2021-35941
17CFBB index.cfm cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.003130.00CVE-2005-2560

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (9)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (4)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/cgi-bin/luci/api/authpredictiveHög
2Filexxxxx.xxxpredictiveMedium
3Argumentxxx_xxxxxx.xxxpredictiveHög
4ArgumentxxxxpredictiveLåg

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!