{"metadata": {"vulnerability": "CVE-2020-25223", "count": 66, "kinds": {"milestone": 4, "sighting": 29, "kev": 17, "other": 16}}, "data": [{"timestamp": "2020-09-10T00:00:00Z", "date_only": false, "value": "2020-09-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-25223", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-09-25T00:00:00Z", "date_only": false, "value": "2020-09-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-25223", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-09-25T04:23:00Z", "date_only": false, "value": "2020-09-25T04:23:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PWXX-2HRW-72W5", "record": "GHSA-PWXX-2HRW-72W5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-09-25T04:23:00Z", "date_only": false, "value": "2020-09-25T04:23Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-25223", "record": "GSD-2020-25223", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-09-25T04:23:04.857Z", "date_only": false, "value": "2020-09-25T04:23:04.857", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-25223", "record": "FKIE_CVE-2020-25223", "field": "published"}, {"timestamp": "2021-08-23T16:30:49Z", "date_only": false, "value": "2021-08-23T16:30:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/6727", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "e6e3cf54-b5a0-483a-b260-fd4bfb214c7a", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 A researcher disclosed technical details of a critical remote code execution vulnerability, tracked as CVE-2020-25223, patched last year.\n\nhttps://securityaffairs.co/wordpress/121392/hacking/sophos-utm-appliance-rce.html", "url": "https://t.me/cKure/6727"}, {"timestamp": "2021-10-28T13:17:18Z", "date_only": false, "value": "2021-10-28T13:17:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sophos_utm_webadmin_sid_cmd_injection.rb", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "2f7fae16-63d7-4a28-98b9-d5ece17d8887", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sophos_utm_webadmin_sid_cmd_injection.rb"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-25223", "field": "timestamps.asserted_at", "uuid": "5a2a9544-7ed8-416f-90ca-2aae0703ab32", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-25223", "field": "timestamps.asserted_at", "uuid": "8079feea-3506-4239-858c-3d780d7ab4eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-25223", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-25223", "record": "GSD-2020-25223", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-25223", "field": "evidence.0.details.added_date", "uuid": "8079feea-3506-4239-858c-3d780d7ab4eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-25223", "field": "evidence.0.details.date_added", "uuid": "5a2a9544-7ed8-416f-90ca-2aae0703ab32", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-25223", "field": "timestamps.first_seen_at", "uuid": "5a2a9544-7ed8-416f-90ca-2aae0703ab32", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-25223", "field": "timestamps.first_seen_at", "uuid": "8079feea-3506-4239-858c-3d780d7ab4eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-25223", "field": "status.status_updated_at", "uuid": "5a2a9544-7ed8-416f-90ca-2aae0703ab32", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-25223", "field": "status.status_updated_at", "uuid": "8079feea-3506-4239-858c-3d780d7ab4eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-25223", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-25223", "field": "evidence.0.details.due_date", "uuid": "5a2a9544-7ed8-416f-90ca-2aae0703ab32", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-25223", "record": "GSD-2020-25223", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:29:38Z", "date_only": false, "value": "2022-05-24T17:29:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PWXX-2HRW-72W5", "record": "GHSA-PWXX-2HRW-72W5", "field": "published"}, {"timestamp": "2022-09-26T15:37:03Z", "date_only": false, "value": "2022-09-26T15:37:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3466", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "7f92f8ef-8065-42f5-9562-bf9923e09e3b", "content": "\u0411\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0430\u044f Sophos \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u043e\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e, \u0432\u0435\u0440\u0441\u0438\u044f 19.0 MR1 (19.0.1) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Sophos Firewall \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2022-3236 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8). \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b User Portal \u0438 Webadmin.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Sophos \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e - \u0432 \u042e\u0436\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\u00a0\u041a\u0430\u0436\u0434\u0443\u044e \u0438\u0437 \u044d\u0442\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u0441 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 Sophos Firewall, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f  \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 Sophos \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0431\u0438\u043b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043e\u0442 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u043e\u043d\u0441\u043e\u043b\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u0442\u0447\u0430.\n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430 \u0443\u0433\u0440\u043e\u0437, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u042f\u043f\u043e\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 Shodan, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043e 200 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Sophos \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041d\u0435\u0443\u0442\u0435\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Sophos, \u0432\u0435\u0434\u044c \u0432\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437 \u0437\u0430 \u0433\u043e\u0434, \u043a\u043e\u0433\u0434\u0430 0-day \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0434\u0440\u0443\u0433\u0430\u044f CVE-2022-1040 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u044d\u0442\u043e\u043c \u0436\u0435 \u0440\u0435\u0433\u0438\u043e\u043d\u0435. Volexity \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439\u00a0DriftingCloud.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u044d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 CVE-2020-25223 (Sophos SG UTM), CVE-2020-12271 (XG Firewall) \u0438 CVE-2022-1040 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Sophos, \u043a\u043e\u0442\u043e\u0440\u0443\u044e CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433.\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e Sophos \u043d\u0435 \u043e\u0442\u0441\u0442\u0430\u0435\u0442 \u043e\u0442 \u0441\u0432\u043e\u0438\u0445 \u044f\u043f\u043e\u043d\u0441\u043a\u0438\u0445 \u043a\u043e\u043b\u043b\u0435\u0433 \u0438\u0437 Trend Micro \u0441 \u0438\u0445 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0434\u043d\u0430\u0436\u0434\u044b \u0443\u043a\u0440\u0430\u043b\u0438 \u043b\u0438\u0447\u043d\u0443\u044e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u0438\u043a\u0438 Mitsubishi Electric.", "url": "https://t.me/true_secator/3466"}, {"timestamp": "2022-12-26T15:30:06Z", "date_only": false, "value": "2022-12-26T15:30:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3877", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "bc029e37-7954-48bf-b50f-9cc96c7aae0a", "content": "\u0415\u0449\u0435 \u0440\u0430\u0437 \u0432\u0435\u0440\u043d\u0435\u043c\u0441\u044f \u043a Zerobot, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 Fortinet \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434.\n\n\u0411\u043e\u0442\u043d\u0435\u0442 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439 (IoT) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0430\u043c\u043e\u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0449\u0435\u0435\u0441\u044f \u0438 \u0441\u0430\u043c\u043e\u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Golang (Go) \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 \u0434\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u043e\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 DDoS.\n \nMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439\u00a0\u0430\u043d\u0430\u043b\u0438\u0437 Zerobot, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Apache \u0438 Apache Spark, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2021-42013 \u0438 CVE-2022-33891 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, CVE-2021-42013, \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0Enemybot\u00a0DDoS.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Microsoft \u043e\u0431\u0440\u0430\u0437\u0435\u0446 Zerobot \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f CVE-2017-17105 (Zivif PR115-204-P-RS), CVE-2019-10655 (Grandstream), CVE-2020-25223\u00a0(Sophos SG UTM), CVE-2022-31137 (Roxy-WI) \u0438 ZSL-2022-5717 (MiniDVBLinux).\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Zerobot 1.1 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u043b\u0438 CVE-2018-12613, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c phpMyAdmin, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e Zerobot \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a CVE-2022-30023, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Tenda GPON AC1200.\n\n\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Zerobot \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0431\u043e\u0442\u043d\u0435\u0442\u0430 (\u0438\u043b\u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u0432\u043e\u0438\u0447\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430), \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c.\n\n\u0423\u0433\u0440\u043e\u0437\u0430 \u043d\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0441 Windows, \u043d\u043e Microsoft \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043e\u0431\u0440\u0430\u0437\u0446\u044b Zerobot, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0432 \u0441\u0440\u0435\u0434\u0435 Windows.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 Zerobot \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u043e\u0432\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 DDoS-\u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 UDP, ICMP, TCP, SYN, ACK \u0438 SYN-ACK.\n\nZerobot \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\u00a0\u042d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u043c\u0443 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0431\u043e\u0440\u044b \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0430 \u043e\u0431\u0440\u0430\u0437\u0435\u0446, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0432 Windows \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e (Linux, Windows, macOS) \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c (RAT) \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438, \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043d\u0438\u043c\u043a\u043e\u0432 \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434.", "url": "https://t.me/true_secator/3877"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "2b913ce5-a5e8-4044-88bd-608e5c27fd2a"}, {"timestamp": "2023-10-17T16:44:31.177Z", "date_only": false, "value": "2023-10-17T16:44:31.177Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-25223", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-17T17:15:00Z", "date_only": false, "value": "2023-10-17T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-25223", "record": "GSD-2020-25223", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:21:57.092Z", "date_only": false, "value": "2023-12-13T01:21:57.092630Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-25223", "record": "GSD-2020-25223", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T15:33:05.408Z", "date_only": false, "value": "2024-08-04T15:33:05.408Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-25223", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:29:26.893Z", "date_only": false, "value": "2024-12-24T20:29:26.893720Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971445", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "9ae583a4-9b8c-49aa-9bcf-dac1cc917d49", "url": "https://feedsin.space/feed/CISAKevBot/items/2971445"}, {"timestamp": "2025-01-14T04:16:13Z", "date_only": false, "value": "2025-01-14T04:16:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4280", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "6c59c2c9-a6ef-48a7-992b-433215e7bf4c", "content": "#Threat_Research\nSophos UTM Preauth RCE:\nA Deep Dive into CVE-2020-25223\nhttps://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223\n]-> PoC:\nhttps://github.com/twentybel0w/CVE-2020-25223", "url": "https://t.me/CyberSecurityTechnologies/4280"}, {"timestamp": "2025-02-03T14:57:59.466Z", "date_only": false, "value": "2025-02-03T14:57:59.466654Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-25223", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-03T14:57:59.466Z", "date_only": false, "value": "2025-02-03T14:57:59.466654Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-25223", "record": "FKIE_CVE-2020-25223", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T02:39:17Z", "date_only": false, "value": "2025-02-06T02:39:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/uanOz3mXhq2KBe-bE6_GmsCaNeW3nSkSG8uYLmQW69y_LNsf", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "fd4230b5-8d95-4de6-a48f-b79947d0b59c"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "a022d533-6c36-4738-aea3-fb8497442f56"}, {"timestamp": "2025-02-23T02:10:27Z", "date_only": false, "value": "2025-02-23T02:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "421c5f98-30a5-4f48-9576-57c8e746af17"}, {"timestamp": "2025-02-23T04:10:26Z", "date_only": false, "value": "2025-02-23T04:10:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "bc197144-d487-4679-9130-2d5748c5963b"}, {"timestamp": "2025-10-21T23:35:36.271Z", "date_only": false, "value": "2025-10-21T23:35:36.271Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-25223", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:36.271Z", "date_only": false, "value": "2025-10-21T23:35:36.271Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-25223", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:58Z", "date_only": false, "value": "2025-10-22T00:31:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PWXX-2HRW-72W5", "record": "GHSA-PWXX-2HRW-72W5", "field": "modified"}, {"timestamp": "2026-02-02T12:28:00.383Z", "date_only": false, "value": "2026-02-02T12:28:00.383749Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e8ba21b-0c3e-4a36-a159-52dddf0796b0", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "8e06bd04-35eb-4f25-858d-c8dc9a77b993", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e8ba21b-0c3e-4a36-a159-52dddf0796b0"}, {"timestamp": "2026-02-02T12:28:00.383Z", "date_only": false, "value": "2026-02-02T12:28:00.383749Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e8ba21b-0c3e-4a36-a159-52dddf0796b0", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "e5c98901-9653-4b76-8670-b7034c437766", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e8ba21b-0c3e-4a36-a159-52dddf0796b0"}, {"timestamp": "2026-06-17T03:06:37.003Z", "date_only": false, "value": "2026-06-17T03:06:37.003", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-25223", "record": "FKIE_CVE-2020-25223", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:26.171Z", "date_only": false, "value": "2026-06-19T12:47:26.171449Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cf6301c0-109f-4b53-91df-5228b26f9e81", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "21f10caa-1641-45a4-9bb3-d46577c26a5f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cf6301c0-109f-4b53-91df-5228b26f9e81"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-25223", "field": "timestamps.recorded_at", "uuid": "8079feea-3506-4239-858c-3d780d7ab4eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:43.297Z", "date_only": false, "value": "2026-06-23T11:13:43.297207Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8079feea-3506-4239-858c-3d780d7ab4eb", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "b368a6c8-6c62-45d7-a185-1634a5566f94", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8079feea-3506-4239-858c-3d780d7ab4eb"}, {"timestamp": "2026-06-23T14:05:12.804Z", "date_only": false, "value": "2026-06-23T14:05:12.804249Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f99109b0-1eed-45fd-88e8-9cbee41cfb17", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "1fe85324-5b40-4f74-ac5e-58d305d1431d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f99109b0-1eed-45fd-88e8-9cbee41cfb17"}, {"timestamp": "2026-07-24T12:45:30.830Z", "date_only": false, "value": "2026-07-24T12:45:30.830764Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/multiple-vulnerabilities-in-internet-facing-systems-targeting-hong-kong-s-education-sector_20260724", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "143b3b4a-c6da-4761-b3f5-989e654d8275", "url": "https://www.hkcert.org/security-bulletin/multiple-vulnerabilities-in-internet-facing-systems-targeting-hong-kong-s-education-sector_20260724"}, {"timestamp": "2026-07-26T02:02:34.458Z", "date_only": false, "value": "2026-07-26T02:02:34.458941Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1006", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "c23dcc9f-689f-44d8-8d39-5f9aa5c29808", "url": "https://t.me/EchelonEyes/1006"}, {"timestamp": "2026-07-27T00:01:10.438Z", "date_only": false, "value": "2026-07-27T00:01:10.438818Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1006", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "9b788958-9050-453a-9069-a67440bc0826", "url": "https://t.me/EchelonEyes/1006"}, {"timestamp": "2026-07-28T04:00:06.133Z", "date_only": false, "value": "2026-07-28T04:00:06.133591Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/1006", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "39dcd08b-e6d5-4a86-b8a6-21ce1e254437", "url": "https://t.me/EchelonEyes/1006"}, {"timestamp": "2026-07-29T00:00:49.353Z", "date_only": false, "value": "2026-07-29T00:00:49.353710Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/1006", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "f62cb9de-4d08-446b-80e4-7eb0e2cac5f0", "url": "https://t.me/EchelonEyes/1006"}, {"timestamp": "2026-07-29T12:02:54.436Z", "date_only": false, "value": "2026-07-29T12:02:54.436137Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1499", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "183af735-3e96-4c34-8cfb-f4b709482754", "url": "https://t.me/reverseame/1499"}, {"timestamp": "2026-07-30T00:02:44.750Z", "date_only": false, "value": "2026-07-30T00:02:44.750173Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1499", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "6d72b595-2c5b-4aa8-8e9b-50f259d7a559", "url": "https://t.me/reverseame/1499"}, {"timestamp": "2026-08-03T07:04:24.213Z", "date_only": false, "value": "2026-08-03T07:04:24.213687Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1499", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "63423485-6b59-4f2f-b2bd-f68b57b02056", "url": "https://t.me/reverseame/1499"}, {"timestamp": "2026-08-04T00:00:46.778Z", "date_only": false, "value": "2026-08-04T00:00:46.778123Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1499", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "a0868bde-fb0a-4eaa-a487-14f9106fdd1f", "url": "https://t.me/reverseame/1499"}, {"timestamp": "2026-09-01T17:00:40.812Z", "date_only": false, "value": "2026-09-01T17:00:40.812171Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4342", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "33e925f5-bef0-45e5-a22e-1d5f8f7b8fa3", "url": "https://t.me/cissp/4342"}, {"timestamp": "2026-09-10T20:00:11.042Z", "date_only": false, "value": "2026-09-10T20:00:11.042456Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4342", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "1999a552-0059-4046-beca-9bc1fc1e88e8", "url": "https://t.me/cissp/4342"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-25)", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "e773acf3-993c-425f-93a5-45549983cc1d"}, {"timestamp": "2026-09-25T17:30:56Z", "date_only": false, "value": "2026-09-25T17:30:56+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2020-25223", "field": "timestamps.asserted_at", "uuid": "2ff54642-3715-4943-a2a0-233c1b2da11b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-25T17:30:56Z", "date_only": false, "value": "2026-09-25T17:30:56+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2020-25223", "field": "timestamps.first_seen_at", "uuid": "2ff54642-3715-4943-a2a0-233c1b2da11b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:13:36.366Z", "date_only": false, "value": "2026-10-21T09:13:36.366301Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2ff54642-3715-4943-a2a0-233c1b2da11b", "record": "CVE-2020-25223", "field": "creation_timestamp", "uuid": "0b93d0f3-3952-43e7-b325-35f67ea90568", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2ff54642-3715-4943-a2a0-233c1b2da11b"}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2020-25223", "field": "timestamps.last_seen_at", "uuid": "2ff54642-3715-4943-a2a0-233c1b2da11b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": true, "value": "2026-11-02", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2020-25223", "field": "evidence.0.details.observation_date", "uuid": "2ff54642-3715-4943-a2a0-233c1b2da11b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2020-25223", "field": "status.status_updated_at", "uuid": "2ff54642-3715-4943-a2a0-233c1b2da11b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T01:00:02Z", "date_only": false, "value": "2026-11-04T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2020-25223", "field": "timestamps.recorded_at", "uuid": "2ff54642-3715-4943-a2a0-233c1b2da11b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-25223", "field": "timestamps.recorded_at", "uuid": "5a2a9544-7ed8-416f-90ca-2aae0703ab32", "status": {"status_reason": "confirmed", "exploited": true}}]}