{"metadata": {"vulnerability": "CVE-2020-3153", "count": 75, "kinds": {"milestone": 5, "sighting": 27, "kev": 11, "other": 32}}, "data": [{"timestamp": "2019-12-12T00:00:00Z", "date_only": false, "value": "2019-12-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-3153", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-02-19T00:00:00Z", "date_only": false, "value": "2020-02-19T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-02-19T00:00:00Z", "date_only": false, "value": "2020-02-19T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3153", "field": "containers.cna.datePublic"}, {"timestamp": "2020-02-19T15:19:30Z", "date_only": false, "value": "2020-02-19T15:19:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-02-19T16:00:00Z", "date_only": false, "value": "2020-02-19T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-02-19T16:00:00Z", "date_only": false, "value": "2020-02-19T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2020-02-19T19:15:53.412Z", "date_only": false, "value": "2020-02-19T19:15:53.412Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-3153", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-02-19T20:15:00Z", "date_only": false, "value": "2020-02-19T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XPXV-RFWH-RCFC", "record": "GHSA-XPXV-RFWH-RCFC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-02-19T20:15:00Z", "date_only": false, "value": "2020-02-19T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-3153", "record": "GSD-2020-3153", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-02-19T20:15:15.113Z", "date_only": false, "value": "2020-02-19T20:15:15.113000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-02-19T20:15:15.113Z", "date_only": false, "value": "2020-02-19T20:15:15.113", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3153", "record": "FKIE_CVE-2020-3153", "field": "published"}, {"timestamp": "2020-02-20T00:00:00Z", "date_only": false, "value": "2020-02-19T16:00:00-0800", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / cisco", "record": "CVE-2020-3153", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-02-20T00:00:00Z", "date_only": false, "value": "2020-02-19T16:00:00-0800", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-3153", "record": "GSD-2020-3153", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-02-20T00:00:00Z", "date_only": true, "value": "2020-02-20", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-12678", "record": "CNVD-2020-12678", "field": "submitTime"}, {"timestamp": "2020-02-21T00:00:00Z", "date_only": true, "value": "2020-02-21", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-12678", "record": "CNVD-2020-12678", "field": "openTime"}, {"timestamp": "2020-02-24T15:38:38Z", "date_only": false, "value": "2020-02-24T15:38:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2020-03-04T00:00:00Z", "date_only": false, "value": "2020-03-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "sources_update_date.data.3.date"}, {"timestamp": "2020-05-19T12:48:50Z", "date_only": false, "value": "2020-05-19T12:48:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/365", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "42252414-fc47-46fe-bb17-bde4edb4d442", "content": "Proof of concept for CVE-2020-3153 - Cisco AnyConnect elevation of privileges due to insecure handling of path names\n\nhttps://gist.github.com/ykoster/aeaa893d68adbc5004aa873b3290acd1\n\nhttps://www.securify.nl/advisory/SFY20200419/cisco-anyconnect-elevation-of-privileges-due-to-insecure-handling-of-path-names.html\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3153", "url": "https://t.me/orderofsixangles/365"}, {"timestamp": "2020-07-27T00:00:00Z", "date_only": false, "value": "2020-07-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3153", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2020-07-27T00:00:00Z", "date_only": false, "value": "2020-07-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3153", "record": "FKIE_CVE-2020-3153", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2020-09-29T18:51:17Z", "date_only": false, "value": "2020-09-29T18:51:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/anyconnect_lpe.rb", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "e312ccd9-3bdd-4911-b83b-c64d3fa04f8d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/anyconnect_lpe.rb"}, {"timestamp": "2020-09-30T18:06:16Z", "date_only": false, "value": "2020-09-30T18:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2020-3153", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-09T00:00:00Z", "date_only": false, "value": "2020-10-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-01-01T00:00:00Z", "date_only": false, "value": "2022-01-01T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-01-01T19:39:00Z", "date_only": false, "value": "2022-01-01T19:39Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-3153", "record": "GSD-2020-3153", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:09:20Z", "date_only": false, "value": "2022-05-24T17:09:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XPXV-RFWH-RCFC", "record": "GHSA-XPXV-RFWH-RCFC", "field": "published"}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-3153", "field": "timestamps.asserted_at", "uuid": "bc2bdfa0-ac56-4b2b-87f0-6b2346f577b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-3153", "field": "timestamps.asserted_at", "uuid": "7a546435-66e4-4e3d-a26b-a735d76f3917", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": true, "value": "2022-10-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3153", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-3153", "field": "evidence.0.details.added_date", "uuid": "7a546435-66e4-4e3d-a26b-a735d76f3917", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": true, "value": "2022-10-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-3153", "field": "evidence.0.details.date_added", "uuid": "bc2bdfa0-ac56-4b2b-87f0-6b2346f577b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-3153", "field": "timestamps.first_seen_at", "uuid": "bc2bdfa0-ac56-4b2b-87f0-6b2346f577b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-3153", "field": "timestamps.first_seen_at", "uuid": "7a546435-66e4-4e3d-a26b-a735d76f3917", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-3153", "field": "status.status_updated_at", "uuid": "bc2bdfa0-ac56-4b2b-87f0-6b2346f577b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-3153", "field": "status.status_updated_at", "uuid": "7a546435-66e4-4e3d-a26b-a735d76f3917", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-24T00:00:00Z", "date_only": false, "value": "2022-10-24T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3153", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-10-25T13:31:56Z", "date_only": false, "value": "2022-10-25T13:31:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-10-25T13:31:56Z", "date_only": false, "value": "2022-10-25T13:31:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-10-25T13:31:58Z", "date_only": false, "value": "2022-10-25T13:31:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "record": "CISCO-SA-AC-WIN-PATH-TRAVERSE-QO4HWBSJ", "field": "document.tracking.generator.date"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": true, "value": "2022-11-14", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-3153", "field": "evidence.0.details.due_date", "uuid": "bc2bdfa0-ac56-4b2b-87f0-6b2346f577b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-09T07:00:04Z", "date_only": false, "value": "2022-12-09T07:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2610", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "67cbe35d-e8dc-4448-a197-ed6e835fcb86", "content": "CVE-2020-3153\n\nCisco AnyConnect < 4.8.02042 privilege escalation through path traversal\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Cisco AnyConnect Secure Mobility Client \u0434\u043b\u044f Windows \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0444\u0430\u0439\u043b\u044b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0432 \u0435\u0433\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 DLL, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 DLL \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438. \u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows.\n\n#CVE #POC", "url": "https://t.me/poxek/2610"}, {"timestamp": "2022-12-09T11:32:18Z", "date_only": false, "value": "2022-12-09T11:32:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/netrunnerz/361", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "c691f887-244a-422a-8253-d117eba99557", "content": "CVE-2020-3153\n\nCisco AnyConnect < 4.8.02042 privilege escalation through path traversal\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Cisco AnyConnect Secure Mobility Client \u0434\u043b\u044f Windows \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0444\u0430\u0439\u043b\u044b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0432 \u0435\u0433\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 DLL, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 DLL \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438. \u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows.\n\n#CVE #POC", "url": "https://t.me/netrunnerz/361"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "6212e606-d620-40c4-8ffe-933d26643f22"}, {"timestamp": "2023-11-17T08:58:02Z", "date_only": false, "value": "2023-11-17T08:58:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/244", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "26f10523-1b8b-4188-ae19-9b26a76e27ee", "content": "#ExploitObserverAlert\n\nCVE-2020-3153\n\nDESCRIPTION: Exploit Observer has 25 entries related to CVE-2020-3153. A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.\n\nFIRST-EPSS: 0.000830000\nNVD-IS: 4.0\nNVD-ES: 2.0", "url": "https://t.me/arpsyndicate/244"}, {"timestamp": "2023-12-03T19:37:33Z", "date_only": false, "value": "2023-12-03T19:37:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1012", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "5d6ed019-7219-44f2-bea3-d62b7cbbb739", "content": "#ExploitObserverAlert\n\nCVE-2020-3153\n\nDESCRIPTION: Exploit Observer has 25 entries related to CVE-2020-3153. A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.\n\nFIRST-EPSS: 0.000830000\nNVD-IS: 4.0\nNVD-ES: 2.0", "url": "https://t.me/arpsyndicate/1012"}, {"timestamp": "2023-12-13T01:22:10.628Z", "date_only": false, "value": "2023-12-13T01:22:10.628867Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-3153", "record": "GSD-2020-3153", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T07:24:00.700Z", "date_only": false, "value": "2024-08-04T07:24:00.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-3153", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-14T21:34:06Z", "date_only": false, "value": "2024-10-14T21:34:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/991", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "837fc2d0-e799-4630-a1f0-ae358b92935d", "content": "#exploit\nCVE-2020-3153/3433:\nCisco AnyConnect Secure Client for Windows (ver. 4.8.01090) - Privilege Elevation through Path Traversal\nhttps://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal\n]-> Writing an exploit for CVE-2020-3153:\nhttps://github.com/goichot/CVE-2020-3153/blob/master/details.md", "url": "https://t.me/CyberSecurityTechnologies/991"}, {"timestamp": "2024-12-24T20:33:21.594Z", "date_only": false, "value": "2024-12-24T20:33:21.594777Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971730", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "35f061f1-aae3-435c-a2f0-71780fa04a84", "url": "https://feedsin.space/feed/CISAKevBot/items/2971730"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "fdd8cb06-c178-4581-958c-8742d85c9dd8"}, {"timestamp": "2025-02-23T02:10:27Z", "date_only": false, "value": "2025-02-23T02:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "14e328d5-be07-48ff-8c9f-c096a5a288e1"}, {"timestamp": "2025-02-23T04:10:28Z", "date_only": false, "value": "2025-02-23T04:10:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "35180d8f-4223-4b8b-b18a-e4ad2517a41b"}, {"timestamp": "2025-08-31T03:01:26Z", "date_only": false, "value": "2025-08-31T03:01:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "bd0ad886-8f75-421c-9259-9a795a4c0008"}, {"timestamp": "2025-10-22T00:31:50Z", "date_only": false, "value": "2025-10-22T00:31:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XPXV-RFWH-RCFC", "record": "GHSA-XPXV-RFWH-RCFC", "field": "modified"}, {"timestamp": "2025-10-28T13:57:51.823Z", "date_only": false, "value": "2025-10-28T13:57:51.823000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T15:24:06.762Z", "date_only": false, "value": "2025-11-18T15:24:06.762000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202002-0716", "record": "VAR-202002-0716", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:27:10.776Z", "date_only": false, "value": "2026-02-02T12:27:10.776916Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a64d3a74-8cdb-40e7-84c6-71fde06420fb", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "ac2990c8-0e39-4af1-b5db-e639a8c9419d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a64d3a74-8cdb-40e7-84c6-71fde06420fb"}, {"timestamp": "2026-02-02T12:27:10.776Z", "date_only": false, "value": "2026-02-02T12:27:10.776916Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a64d3a74-8cdb-40e7-84c6-71fde06420fb", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "998b6dd1-8f41-40af-97d8-789fed8dc245", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a64d3a74-8cdb-40e7-84c6-71fde06420fb"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-3153", "field": "timestamps.recorded_at", "uuid": "bc2bdfa0-ac56-4b2b-87f0-6b2346f577b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:47:02.246Z", "date_only": false, "value": "2026-06-19T12:47:02.246587Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66c33d4f-3db4-4f74-b80f-f4baa990ea70", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "7213b7b2-66c4-44ac-86e9-0cf499702f7a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66c33d4f-3db4-4f74-b80f-f4baa990ea70"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-3153", "field": "timestamps.recorded_at", "uuid": "7a546435-66e4-4e3d-a26b-a735d76f3917", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:01.780Z", "date_only": false, "value": "2026-06-23T11:14:01.780690Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7a546435-66e4-4e3d-a26b-a735d76f3917", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "74e5199b-4db6-470a-91b8-a9ba78cb6e62", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7a546435-66e4-4e3d-a26b-a735d76f3917"}, {"timestamp": "2026-06-23T14:05:34.435Z", "date_only": false, "value": "2026-06-23T14:05:34.435095Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53bee053-3f79-4d97-bde1-61177e31fe64", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "4f74ed67-02a0-46e6-8990-e1da891a8ae8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53bee053-3f79-4d97-bde1-61177e31fe64"}, {"timestamp": "2026-07-26T02:02:37.019Z", "date_only": false, "value": "2026-07-26T02:02:37.019292Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/817", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "389d0629-d363-4a7f-b82a-f290bcb86a96", "url": "https://t.me/EchelonEyes/817"}, {"timestamp": "2026-07-27T00:01:13.900Z", "date_only": false, "value": "2026-07-27T00:01:13.900927Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/817", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "5abf794a-f10d-409b-b50e-cb18770f990c", "url": "https://t.me/EchelonEyes/817"}, {"timestamp": "2026-07-28T06:00:04.182Z", "date_only": false, "value": "2026-07-28T06:00:04.182895Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/817", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "1090a9e8-5947-4853-8193-61a880829a49", "url": "https://t.me/EchelonEyes/817"}, {"timestamp": "2026-07-29T00:00:45.394Z", "date_only": false, "value": "2026-07-29T00:00:45.394324Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/817", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "fea0e11a-7611-48d1-8796-9e93a7c2a71e", "url": "https://t.me/EchelonEyes/817"}, {"timestamp": "2026-08-12T03:55:40.632Z", "date_only": false, "value": "2026-08-12T03:55:40.632Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-3153", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T03:55:40.632Z", "date_only": false, "value": "2026-08-12T03:55:40.632Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3153", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T05:17:29.713Z", "date_only": false, "value": "2026-08-12T05:17:29.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3153", "record": "FKIE_CVE-2020-3153", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:16.639Z", "date_only": false, "value": "2026-09-01T17:01:16.639686Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/729", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "07536f3e-af4c-42f1-8766-7887fb7f6364", "url": "https://t.me/cissp/729"}, {"timestamp": "2026-09-01T20:01:19.763Z", "date_only": false, "value": "2026-09-01T20:01:19.763336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/74296", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "79b7086b-948c-4788-a55d-35cbd66d8101", "url": "https://t.me/hacking_Attack/74296"}, {"timestamp": "2026-09-04T05:00:03.926Z", "date_only": false, "value": "2026-09-04T05:00:03.926461Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "4394dc8f-fffe-48dd-87e3-9a0589f7b43b"}, {"timestamp": "2026-09-05T01:00:39.156Z", "date_only": false, "value": "2026-09-05T01:00:39.156440Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "0653700c-476e-4fda-bca0-054862d29e5a"}, {"timestamp": "2026-09-05T05:00:04.199Z", "date_only": false, "value": "2026-09-05T05:00:04.199263Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/74296", "record": "CVE-2020-3153", "field": "creation_timestamp", "uuid": "cfd74cac-b703-412e-8a42-28cf14916f22", "url": "https://t.me/hacking_Attack/74296"}]}