{"metadata": {"vulnerability": "CVE-2020-5722", "count": 72, "kinds": {"milestone": 4, "sighting": 24, "kev": 17, "other": 27}}, "data": [{"timestamp": "2020-01-06T00:00:00Z", "date_only": false, "value": "2020-01-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-5722", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-03-23T00:00:00Z", "date_only": false, "value": "2020-03-23T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_release_date.data.1.date"}, {"timestamp": "2020-03-23T19:31:40Z", "date_only": false, "value": "2020-03-23T19:31:40.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5722", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-03-23T20:15:00Z", "date_only": false, "value": "2020-03-23T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CGGP-723H-VG48", "record": "GHSA-CGGP-723H-VG48", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-03-23T20:15:00Z", "date_only": false, "value": "2020-03-23T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-5722", "record": "GSD-2020-5722", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-03-23T20:15:12.043Z", "date_only": false, "value": "2020-03-23T20:15:12.043000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_release_date.data.5.date"}, {"timestamp": "2020-03-23T20:15:12.043Z", "date_only": false, "value": "2020-03-23T20:15:12.043", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5722", "record": "FKIE_CVE-2020-5722", "field": "published"}, {"timestamp": "2020-03-24T00:00:00Z", "date_only": true, "value": "2020-03-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-23201", "record": "CNVD-2020-23201", "field": "submitTime"}, {"timestamp": "2020-04-07T00:00:00Z", "date_only": false, "value": "2020-04-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_update_date.data.3.date"}, {"timestamp": "2020-04-10T16:33:40Z", "date_only": false, "value": "2020-04-10T16:33:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/456", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "66bc712d-387d-4ed7-858e-adf46231206a", "content": "Security Week \u043f\u0438\u0448\u0435\u0442, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Tenable \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043f\u043e\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0441\u044f \u043e\u043a\u043e\u043b\u043e \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 \u043d\u043e\u0432\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Hoaxcalls.\n\n\u0411\u043e\u0442\u043d\u0435\u0442 \u0441\u0442\u0430\u043b \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-5722 \u0432 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043c\u0438\u043d\u0438-\u0410\u0422\u0421 Grandstream UCM6200. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043b\u0438\u0431\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043a\u043e\u0434\u0430 \u0441 \u0440\u0443\u0442\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u043b\u0438\u0431\u043e \u043a \u0432\u0441\u0442\u0430\u0432\u043a\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e HTML-\u043a\u043e\u0434\u0430 \u0432 \u043f\u0438\u0441\u044c\u043c\u043e \u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n \u0412 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Palo Alto Networks, \u044d\u0442\u043e\u0442 \u0431\u043e\u0442\u043d\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-8515 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438 Draytek Vigor.\n\n\u041e\u0431\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0431\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u044d\u0442\u043e\u043c\u0443, \u0435\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0434\u0435\u0439\u0442.", "url": "https://t.me/true_secator/456"}, {"timestamp": "2020-04-13T09:10:02Z", "date_only": false, "value": "2020-04-13T09:10:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/7334", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "b6e38c87-0244-4826-b379-38e89d80a967", "content": "\u0411\u043e\u0442\u043d\u0435\u0442 Hoaxcalls \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Grandstream UCM6200 \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5722. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 HTTP-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0441\u0438\u0441\u0442\u0435\u043c IP PBX \u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 (9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS3.1). \u0421 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.0.19.20) \u0438\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c HTML-\u043a\u043e\u0434 \u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f (\u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.0.20.17).    \nHoaxcalls \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Grandstream UCM6200 \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "url": "https://t.me/SecLabNews/7334"}, {"timestamp": "2020-04-17T00:00:00Z", "date_only": false, "value": "2020-04-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_update_date.data.0.date"}, {"timestamp": "2020-04-17T00:00:00Z", "date_only": true, "value": "2020-04-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-23201", "record": "CNVD-2020-23201", "field": "openTime"}, {"timestamp": "2020-10-09T14:02:50Z", "date_only": false, "value": "2020-10-09T14:02:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3e3792b8-d224-49c1-adcb-cf1dafc6174d", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "ce0546f8-3b07-4d30-8b66-1244589cb1ab"}, {"timestamp": "2020-10-15T15:07:04Z", "date_only": false, "value": "2020-10-15T15:07:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cbd9bbb3-3f53-4610-9d91-9191ff0a9ca8", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "a61e6e54-3407-4d80-b2ab-66ec7e91a24e"}, {"timestamp": "2020-10-16T06:55:52Z", "date_only": false, "value": "2020-10-16T06:55:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/25aef508-b116-4d75-84b2-b6ceff906e44", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "3216a1a6-3639-405c-bde8-c3ba3e3bc752"}, {"timestamp": "2022-01-24T23:55:08Z", "date_only": false, "value": "2022-01-24T23:55:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/843", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "accab37f-f7a9-4927-a0fc-0ed3a2cad51d", "content": "#exploit\nCVE-2020-5722:\nGrandstream UCM6202 IP PBX 1.0.18.x - Remote Command Injection\nhttps://www.tenable.com/security/research/tra-2020-15\n]-> PoC: https://www.exploit-db.com/exploits/48247", "url": "https://t.me/CyberSecurityTechnologies/843"}, {"timestamp": "2022-01-25T03:22:53Z", "date_only": false, "value": "2022-01-25T03:22:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/grandstream_ucm62xx_sendemail_rce.rb", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "2a42559e-612d-470f-ba25-1dff7c743e2e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/grandstream_ucm62xx_sendemail_rce.rb"}, {"timestamp": "2022-01-25T16:34:16Z", "date_only": false, "value": "2022-01-25T16:34:16", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-01-25T17:06:17Z", "date_only": false, "value": "2022-01-25T17:06:17.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / tenable", "record": "CVE-2020-5722", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-01-26T00:00:00Z", "date_only": false, "value": "2022-01-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5722", "field": "timestamps.asserted_at", "uuid": "e77a9bba-4eff-4610-a974-4fa3a794669a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-5722", "field": "timestamps.asserted_at", "uuid": "73ee2e51-cf13-47bf-b412-9d63703a3d81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": true, "value": "2022-01-28", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5722", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": true, "value": "2022-01-28", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-5722", "record": "GSD-2020-5722", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-5722", "field": "evidence.0.details.added_date", "uuid": "73ee2e51-cf13-47bf-b412-9d63703a3d81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": true, "value": "2022-01-28", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-5722", "field": "evidence.0.details.date_added", "uuid": "e77a9bba-4eff-4610-a974-4fa3a794669a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-5722", "field": "timestamps.first_seen_at", "uuid": "e77a9bba-4eff-4610-a974-4fa3a794669a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-5722", "field": "timestamps.first_seen_at", "uuid": "73ee2e51-cf13-47bf-b412-9d63703a3d81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-5722", "field": "status.status_updated_at", "uuid": "e77a9bba-4eff-4610-a974-4fa3a794669a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-5722", "field": "status.status_updated_at", "uuid": "73ee2e51-cf13-47bf-b412-9d63703a3d81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5722", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-10T00:00:00Z", "date_only": false, "value": "2022-02-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-02-10T07:31:00Z", "date_only": false, "value": "2022-02-10T07:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-5722", "record": "GSD-2020-5722", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:12:13Z", "date_only": false, "value": "2022-05-24T17:12:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CGGP-723H-VG48", "record": "GHSA-CGGP-723H-VG48", "field": "published"}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": true, "value": "2022-07-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-5722", "field": "evidence.0.details.due_date", "uuid": "e77a9bba-4eff-4610-a974-4fa3a794669a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": true, "value": "2022-07-28", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-5722", "record": "GSD-2020-5722", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "fbf0a349-e325-4438-9aef-8ff332ee8b49"}, {"timestamp": "2023-12-05T05:23:02Z", "date_only": false, "value": "2023-12-05T05:23:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1398", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "40fad47d-5ae4-4019-8ce4-d354a0217c04", "content": "#ExploitObserverAlert\n\nCVE-2020-5722\n\nDESCRIPTION: Exploit Observer has 10 entries related to CVE-2020-5722. The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.\n\nFIRST-EPSS: 0.974970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1398"}, {"timestamp": "2023-12-13T01:22:03.655Z", "date_only": false, "value": "2023-12-13T01:22:03.655227Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-5722", "record": "GSD-2020-5722", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-05T20:44:08Z", "date_only": false, "value": "2024-01-05T20:44:08+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2020-5722", "field": "timestamps.asserted_at", "uuid": "fecef13a-3b6d-45c4-85da-ab1d28a002fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-05T20:44:08Z", "date_only": false, "value": "2024-01-05T20:44:08+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2020-5722", "field": "timestamps.first_seen_at", "uuid": "fecef13a-3b6d-45c4-85da-ab1d28a002fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-04T08:39:25.626Z", "date_only": false, "value": "2024-08-04T08:39:25.626Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-5722", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:26:15.982Z", "date_only": false, "value": "2024-12-24T20:26:15.982295Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971233", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "60a7b498-0c46-404d-9b17-7311f77a66a4", "url": "https://feedsin.space/feed/CISAKevBot/items/2971233"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "7471230a-14f8-450e-9230-5d56ecafc0c0"}, {"timestamp": "2025-02-06T20:27:25.790Z", "date_only": false, "value": "2025-02-06T20:27:25.790617Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5722", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-06T20:27:25.790Z", "date_only": false, "value": "2025-02-06T20:27:25.790617Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5722", "record": "FKIE_CVE-2020-5722", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:27Z", "date_only": false, "value": "2025-02-23T02:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "a408e57a-5647-4a03-88e4-ab4e87ea9e1b"}, {"timestamp": "2025-02-23T04:10:29Z", "date_only": false, "value": "2025-02-23T04:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "26003db7-08d5-4ba5-919e-cf31c03a32d8"}, {"timestamp": "2025-08-31T03:01:03Z", "date_only": false, "value": "2025-08-31T03:01:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "20e7343c-3c0a-4d72-bc60-ec9c3703ed80"}, {"timestamp": "2025-08-31T03:12:45Z", "date_only": false, "value": "2025-08-31T03:12:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "5786b932-7afc-4333-83cb-b0d098d34174"}, {"timestamp": "2025-10-21T23:35:47.400Z", "date_only": false, "value": "2025-10-21T23:35:47.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-5722", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:47.400Z", "date_only": false, "value": "2025-10-21T23:35:47.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5722", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:51Z", "date_only": false, "value": "2025-10-22T00:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CGGP-723H-VG48", "record": "GHSA-CGGP-723H-VG48", "field": "modified"}, {"timestamp": "2025-10-31T22:11:59.510Z", "date_only": false, "value": "2025-10-31T22:11:59.510000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T15:19:46.068Z", "date_only": false, "value": "2025-11-18T15:19:46.068000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202003-1435", "record": "VAR-202003-1435", "field": "last_update_date"}, {"timestamp": "2026-01-21T08:12:14Z", "date_only": false, "value": "2026-01-21T08:12:14.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-5722.yaml", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "1e84b99a-ab98-4c87-b049-24535ae73e3a", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-5722.yaml"}, {"timestamp": "2026-01-22T21:03:04.800Z", "date_only": false, "value": "2026-01-22T21:03:04.800649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md23iwjdvv2c", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "68dbb066-3d9f-4182-ac6b-aea0aac4dbfa", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md23iwjdvv2c"}, {"timestamp": "2026-02-02T12:28:25.866Z", "date_only": false, "value": "2026-02-02T12:28:25.866748Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db68b2cb-d879-483f-b6a1-a86f164aa087", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "d6c6cac4-9deb-4963-88ec-e89f33b0f64c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db68b2cb-d879-483f-b6a1-a86f164aa087"}, {"timestamp": "2026-02-02T12:28:25.866Z", "date_only": false, "value": "2026-02-02T12:28:25.866748Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db68b2cb-d879-483f-b6a1-a86f164aa087", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "c2b9ff04-69f7-4c4c-941a-b840c311e881", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db68b2cb-d879-483f-b6a1-a86f164aa087"}, {"timestamp": "2026-06-17T03:22:06.003Z", "date_only": false, "value": "2026-06-17T03:22:06.003", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5722", "record": "FKIE_CVE-2020-5722", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:40.486Z", "date_only": false, "value": "2026-06-19T12:47:40.486547Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/262b8ab1-e6b7-4da2-bb8b-6b3d6dc98d6f", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "6f572575-29c9-49f3-9c46-6c199a69b4f5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/262b8ab1-e6b7-4da2-bb8b-6b3d6dc98d6f"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-5722", "field": "timestamps.recorded_at", "uuid": "73ee2e51-cf13-47bf-b412-9d63703a3d81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:28.763Z", "date_only": false, "value": "2026-06-23T11:13:28.763067Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/73ee2e51-cf13-47bf-b412-9d63703a3d81", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "4702582f-758c-407b-b2a6-4f8c520b92ac", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/73ee2e51-cf13-47bf-b412-9d63703a3d81"}, {"timestamp": "2026-06-23T14:04:55.160Z", "date_only": false, "value": "2026-06-23T14:04:55.160599Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5a2673ce-0de7-439c-a62b-783bbb5ac154", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "57ecacba-e2b0-4a41-b79c-4cd0460e819b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5a2673ce-0de7-439c-a62b-783bbb5ac154"}, {"timestamp": "2026-06-30T09:42:30.399Z", "date_only": false, "value": "2026-06-30T09:42:30.399989Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/427526f5-229a-4f71-b422-9884090a7496", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "8d03a207-f9b8-40c9-bee6-38bb412c1def", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/427526f5-229a-4f71-b422-9884090a7496"}, {"timestamp": "2026-07-01T07:17:55.566Z", "date_only": false, "value": "2026-07-01T07:17:55.566753Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fecef13a-3b6d-45c4-85da-ab1d28a002fb", "record": "CVE-2020-5722", "field": "creation_timestamp", "uuid": "0953f238-f0a6-4bc8-9545-e3effe9c4fc2", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fecef13a-3b6d-45c4-85da-ab1d28a002fb"}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2020-5722", "field": "timestamps.last_seen_at", "uuid": "fecef13a-3b6d-45c4-85da-ab1d28a002fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": true, "value": "2026-10-18", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2020-5722", "field": "evidence.0.details.observation_date", "uuid": "fecef13a-3b6d-45c4-85da-ab1d28a002fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2020-5722", "field": "status.status_updated_at", "uuid": "fecef13a-3b6d-45c4-85da-ab1d28a002fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2020-5722", "field": "timestamps.recorded_at", "uuid": "fecef13a-3b6d-45c4-85da-ab1d28a002fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-5722", "field": "timestamps.recorded_at", "uuid": "e77a9bba-4eff-4610-a974-4fa3a794669a", "status": {"status_reason": "confirmed", "exploited": true}}]}