{"metadata": {"vulnerability": "CVE-2020-3556", "count": 46, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 37}}, "data": [{"timestamp": "2019-12-12T00:00:00Z", "date_only": false, "value": "2019-12-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-3556", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-11-04T00:00:00Z", "date_only": false, "value": "2020-11-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-11-04T00:00:00Z", "date_only": false, "value": "2020-11-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3556", "field": "containers.cna.datePublic"}, {"timestamp": "2020-11-04T15:21:41Z", "date_only": false, "value": "2020-11-04T15:21:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-11-04T16:00:00Z", "date_only": false, "value": "2020-11-04T16:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / cisco", "record": "CVE-2020-3556", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-11-04T16:00:00Z", "date_only": false, "value": "2020-11-04T16:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-3556", "record": "GSD-2020-3556", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-11-04T16:00:00Z", "date_only": false, "value": "2020-11-04T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-11-04T16:00:00Z", "date_only": false, "value": "2020-11-04T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2020-11-05T00:00:00Z", "date_only": false, "value": "2020-11-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-713", "record": "CERTFR-2020-AVI-713", "field": "initial_release_date"}, {"timestamp": "2020-11-05T00:00:00Z", "date_only": false, "value": "2020-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-713", "record": "CERTFR-2020-AVI-713", "field": "revisions.0.revision_date"}, {"timestamp": "2020-11-05T12:29:22Z", "date_only": false, "value": "2020-11-05T12:29:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/41467", "record": "CVE-2020-3556", "field": "creation_timestamp", "uuid": "c315b421-6079-4b53-821d-b8871f7d5dc9", "content": "Cisco, the California based tech giant, has identified and disclosed a vulnerability via advisory CVE-2020-3556, regarding the InterProcess Communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software that would allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious script. Vulnerability The IPC channel of Cisco AnyConnect Secure Mobility [\u2026]\nThe post Cisco AnyConnect VPN zero-day Vulnerability, Exploit Code Available (https://gbhackers.com/cisco-anyconnect/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/41467"}, {"timestamp": "2020-11-05T22:27:26Z", "date_only": false, "value": "2020-11-05T22:27:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-713", "record": "CERTFR-2020-AVI-713", "field": "last_revision_date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-713", "record": "CERTFR-2020-AVI-713", "field": "revisions.1.revision_date"}, {"timestamp": "2020-11-06T18:16:22Z", "date_only": false, "value": "2020-11-06T18:16:22.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2020-3556", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-11-06T18:16:22.303Z", "date_only": false, "value": "2020-11-06T18:16:22.303Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-3556", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-11-06T19:15:00Z", "date_only": false, "value": "2020-11-06T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V6P8-GW74-VFG4", "record": "GHSA-V6P8-GW74-VFG4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-11-06T19:15:00Z", "date_only": false, "value": "2020-11-06T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-3556", "record": "GSD-2020-3556", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-11-06T19:15:14.657Z", "date_only": false, "value": "2020-11-06T19:15:14.657000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-11-06T19:15:14.657Z", "date_only": false, "value": "2020-11-06T19:15:14.657", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3556", "record": "FKIE_CVE-2020-3556", "field": "published"}, {"timestamp": "2020-11-06T22:51:34Z", "date_only": false, "value": "2020-11-06T22:51:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/16014", "record": "CVE-2020-3556", "field": "creation_timestamp", "uuid": "8f8620b0-be17-4100-8ae2-6189d79c288e", "content": "\u203c CVE-2020-3556 \u203c\n\nA vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious script. The vulnerability is due to a lack of authentication to the IPC listener. An attacker could exploit this vulnerability by sending crafted IPC messages to the AnyConnect client IPC listener. A successful exploit could allow an attacker to cause the targeted AnyConnect user to execute a script. This script would execute with the privileges of the targeted AnyConnect user. In order to successfully exploit this vulnerability, there must be an ongoing AnyConnect session by the targeted user at the time of the attack. To exploit this vulnerability, the attacker would also need valid user credentials on the system upon which the AnyConnect client is being run. Cisco has not released software updates that address this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/16014"}, {"timestamp": "2020-11-09T21:50:11Z", "date_only": false, "value": "2020-11-09T21:50:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2020-11-10T17:15:11Z", "date_only": false, "value": "2020-11-10T17:15:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2020-11-20T00:00:00Z", "date_only": false, "value": "2020-11-20T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_update_date.data.0.date"}, {"timestamp": "2020-11-20T16:54:00Z", "date_only": false, "value": "2020-11-20T16:54Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-3556", "record": "GSD-2020-3556", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-12-04T15:21:28Z", "date_only": false, "value": "2020-12-04T15:21:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2021-05-12T14:16:53Z", "date_only": false, "value": "2021-05-12T14:16:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2021-05-13T00:00:00Z", "date_only": false, "value": "2021-05-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-05-21T18:06:37Z", "date_only": false, "value": "2021-05-21T18:06:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2021-05-21T18:06:37Z", "date_only": false, "value": "2021-05-21T18:06:37+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-06-28T00:00:00Z", "date_only": false, "value": "2021-06-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-06-28T08:08:00Z", "date_only": false, "value": "2021-06-28T08:08:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-05-24T17:33:21Z", "date_only": false, "value": "2022-05-24T17:33:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V6P8-GW74-VFG4", "record": "GHSA-V6P8-GW74-VFG4", "field": "published"}, {"timestamp": "2022-05-24T17:33:21Z", "date_only": false, "value": "2022-05-24T17:33:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V6P8-GW74-VFG4", "record": "GHSA-V6P8-GW74-VFG4", "field": "modified"}, {"timestamp": "2023-12-13T01:22:10.577Z", "date_only": false, "value": "2023-12-13T01:22:10.577925Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-3556", "record": "GSD-2020-3556", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-10T22:56:13Z", "date_only": false, "value": "2024-05-10T22:56:13+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "record": "CISCO-SA-ANYCONNECT-IPC-KFQO9QHK", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-04T07:37:54.975Z", "date_only": false, "value": "2024-08-04T07:37:54.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-3556", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-13T17:17:14.365Z", "date_only": false, "value": "2024-11-13T17:17:14.365518Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3556", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-13T17:17:14.365Z", "date_only": false, "value": "2024-11-13T17:17:14.365518Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3556", "record": "FKIE_CVE-2020-3556", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-13T17:43:22.675Z", "date_only": false, "value": "2024-11-13T17:43:22.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-3556", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-13T17:43:22.675Z", "date_only": false, "value": "2024-11-13T17:43:22.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3556", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:07:10Z", "date_only": false, "value": "2024-11-14T06:07:10.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dd7cd495-cd76-48fb-9aee-acfbf13a78cb", "record": "CVE-2020-3556", "field": "creation_timestamp", "uuid": "47d7ca00-2cfc-49b1-a85f-0e287d317ae0"}, {"timestamp": "2024-11-21T05:31:18.510Z", "date_only": false, "value": "2024-11-21T05:31:18.510000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "sources_update_date.data.4.date"}, {"timestamp": "2024-11-23T22:37:12.633Z", "date_only": false, "value": "2024-11-23T22:37:12.633000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202011-1023", "record": "VAR-202011-1023", "field": "last_update_date"}, {"timestamp": "2026-06-17T03:18:35.357Z", "date_only": false, "value": "2026-06-17T03:18:35.357", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3556", "record": "FKIE_CVE-2020-3556", "field": "lastModified"}]}