{"metadata": {"vulnerability": "CVE-2021-20016", "count": 83, "kinds": {"milestone": 8, "sighting": 31, "kev": 11, "other": 33}}, "data": [{"timestamp": "2020-12-17T00:00:00Z", "date_only": false, "value": "2020-12-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-20016", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-23T00:00:00Z", "date_only": true, "value": "2021-01-23", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2021-02-01T00:00:00Z", "date_only": true, "value": "2021-02-01", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-02-02T00:00:00Z", "date_only": false, "value": "2021-02-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "initial_release_date"}, {"timestamp": "2021-02-02T00:00:00Z", "date_only": false, "value": "2021-02-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "revisions.0.revision_date"}, {"timestamp": "2021-02-03T20:35:14Z", "date_only": false, "value": "2021-02-03T20:35:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-20016", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-03T20:35:14Z", "date_only": false, "value": "2021-02-03T20:35:14.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sonicwall", "record": "CVE-2021-20016", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-083", "record": "CERTFR-2021-AVI-083", "field": "last_revision_date"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-083", "record": "CERTFR-2021-AVI-083", "field": "initial_release_date"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "revisions.1.revision_date"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-083", "record": "CERTFR-2021-AVI-083", "field": "revisions.0.revision_date"}, {"timestamp": "2021-02-04T06:15:00Z", "date_only": false, "value": "2021-02-04T06:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C283-6775-92M9", "record": "GHSA-C283-6775-92M9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-04T06:15:00Z", "date_only": false, "value": "2021-02-04T06:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-20016", "record": "GSD-2021-20016", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-04T06:15:13.817Z", "date_only": false, "value": "2021-02-04T06:15:13.817000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-02-04T06:15:13.817Z", "date_only": false, "value": "2021-02-04T06:15:13.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20016", "record": "FKIE_CVE-2021-20016", "field": "published"}, {"timestamp": "2021-02-04T12:34:03Z", "date_only": false, "value": "2021-02-04T12:34:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/23046", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "814d72f7-4f76-4a54-b112-b6cba3f3d237", "content": "\u203c CVE-2021-20016 \u203c\n\nA SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/23046"}, {"timestamp": "2021-02-05T00:00:00Z", "date_only": false, "value": "2021-02-05T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20016", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2021-02-05T00:00:00Z", "date_only": false, "value": "2021-02-05T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20016", "record": "FKIE_CVE-2021-20016", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2021-02-08T00:00:00Z", "date_only": false, "value": "2021-02-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-02-08T14:40:00Z", "date_only": false, "value": "2021-02-08T14:40Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-20016", "record": "GSD-2021-20016", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-02-09T00:00:00Z", "date_only": false, "value": "2021-02-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-02-22T00:00:00Z", "date_only": false, "value": "2021-02-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "revisions.2.revision_date"}, {"timestamp": "2021-03-11T00:00:00Z", "date_only": false, "value": "2021-03-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "revisions.3.revision_date"}, {"timestamp": "2021-04-30T00:00:00Z", "date_only": false, "value": "2021-04-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "revisions.4.revision_date"}, {"timestamp": "2021-04-30T12:25:17Z", "date_only": false, "value": "2021-04-30T12:25:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1668", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "1424c675-286e-4112-8f7c-944cd6277f4e", "content": "\u200b\u200b\u0412 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 VPN-\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SonicWall \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445, \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438 \u0441\u0430\u043c\u0443 SonicWall.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 FireEye \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2021-20016, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UNC2447, \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a ransomware.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c FireEye, UNC2447 \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u043e\u043f\u043f\u0435\u0440 WarPrism. \u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 ransomware, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0441 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0448\u0442\u0430\u043c\u043c\u043e\u0432 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2021 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u044f\u0434 \u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0431\u044b\u043b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d \u043d\u043e\u0432\u044b\u043c ransomware FiveHands ( \u043f\u0435\u0440\u0435\u0434\u0435\u043b\u043a\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e DeathRansom), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b\u0441\u044f \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 SombRAT. \u0422\u043e\u0447\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0439 \u0441\u043b\u0443\u0436\u0438\u043b\u043e \u041f\u041e \u043e\u0442 SonicWall. \u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u0446\u044b WarPrism, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 Cobalt Strike, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u043c\u0441\u044f UNC2447. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, FireEye \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u0421\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435, \u0447\u0442\u043e UNC2447 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN \u043e\u0442 SonicWall \u0435\u0449\u0435 \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0435\u0441\u0442\u044c \u043e\u043d\u0438 \u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e CVE-2021-20016 \u043f\u0443\u0442\u0435\u043c \u0440\u0435\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0441 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 BleepingComputer \u0441\u0432\u044f\u0437\u0430\u043b\u0441\u044f \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0431\u0440\u044d\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u043b\u0447\u0438\u0442 \u0438 \u043d\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u0440\u0435\u0447\u044c \u0448\u043b\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e SonicWall.\n\n\u0415\u0441\u043b\u0438 \u0434\u0435\u043b\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u0441\u0442\u043e\u044f\u0442 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0442\u043e \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e  SonicWall \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u043d\u0435\u0441\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u043f\u043e\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0443\u0449\u0435\u0440\u0431 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a ransomware FiveHands. \u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u044b\u0440\u043a\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445.", "url": "https://t.me/true_secator/1668"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "last_revision_date"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-001", "record": "CERTFR-2021-ALE-001", "field": "revisions.5.revision_date"}, {"timestamp": "2021-05-24T09:56:40Z", "date_only": false, "value": "2021-05-24T09:56:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d81c3a80-018d-413d-9f11-59aa0c67e761", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "e14dfab9-ff3b-4eb2-993c-146f470cbab9"}, {"timestamp": "2021-06-07T13:36:14Z", "date_only": false, "value": "2021-06-07T13:36:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/831d2060-6bb9-467c-9f2c-961ae0651829", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "897dd685-cc8d-4387-95cc-019dd916ec67"}, {"timestamp": "2021-09-24T17:46:16Z", "date_only": false, "value": "2021-09-24T17:46:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2144", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "e7ebc9a6-23bf-4716-bd7b-0e6131f8a747", "content": "SonicWall \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0431\u0430\u0433\u0443 CVE-2021-20034 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 100 Secure Mobile Access (SMA), \u0432\u043a\u043b\u044e\u0447\u0430\u044f SMA 200, 210, 400, 410 \u0438 500v.\n \n\u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SonicWall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 500 000 \u0431\u0438\u0437\u043d\u0435\u0441-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0431\u043e\u043b\u0435\u0435, \u0447\u0435\u043c 215 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439.\n \n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0443 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0415\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0448\u043b\u044e\u0437\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SMA 100 \u0434\u043b\u044f \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u0430 \u0432 \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n \n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0440 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0442, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c SonicWall \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0437\u0432\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441 MySonicWall.com \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n \n\u041a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u043d\u0430\u043f\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0435 \u0431\u0435\u0441\u043f\u043e\u0447\u0432\u0435\u043d\u043d\u043e, \u0432\u0435\u0434\u044c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2021 \u0433\u043e\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0438 SonicWall SMA 100 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c ransomware, \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0432 \u0441\u0435\u0442\u044c \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n \n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, UNC2447 (\u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Mandiant) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2021-20016 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall SMA 100 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f FiveHands \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u0432 \u0438\u044e\u043b\u0435 SonicWall \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0441\u0435\u0440\u0438\u0438 SMA 100 \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0441\u043b\u0443\u0436\u0431\u044b (EoL) \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (SRA).\n \n\u041f\u043e \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0430\u043c CISA, CrowdStrike \u0438 Coveware, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u0440\u0435\u0448\u044c\u044e \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 SonicWall \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0435\u0441\u043b\u0438 \u0443\u0436\u0435 \u043d\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c \u0438 \u043d\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432.", "url": "https://t.me/true_secator/2144"}, {"timestamp": "2021-09-25T11:18:48Z", "date_only": false, "value": "2021-09-25T11:18:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7PKT4vSfEXG4PvUtPX6aqX5WnY6lYGawj_ilBlaHPuVdNJs", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "7dba00ac-9a76-481d-9b9b-405a26c4e860"}, {"timestamp": "2021-09-27T02:45:55Z", "date_only": false, "value": "2021-09-27T02:45:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5ubhU27SpJm0inovuggpG8C0qn9UJcc29_eBx9XnhM6h7d4", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "65bce085-11b0-4e2d-addf-5818bbc300d0"}, {"timestamp": "2021-10-19T00:00:00Z", "date_only": false, "value": "2021-10-19T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-10-19T07:03:00Z", "date_only": false, "value": "2021-10-19T07:03:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-10-25T22:32:42Z", "date_only": false, "value": "2021-10-25T22:32:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "b19c3015-a09b-4637-bc63-0848489411a6"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-20016", "field": "timestamps.asserted_at", "uuid": "75ba35a5-1818-48b2-823d-c6f15325ab3c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-20016", "field": "timestamps.asserted_at", "uuid": "414bbc1a-559d-4a94-af2a-0caefa42ce47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20016", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-20016", "record": "GSD-2021-20016", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-20016", "field": "evidence.0.details.added_date", "uuid": "414bbc1a-559d-4a94-af2a-0caefa42ce47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-20016", "field": "evidence.0.details.date_added", "uuid": "75ba35a5-1818-48b2-823d-c6f15325ab3c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-20016", "field": "timestamps.first_seen_at", "uuid": "75ba35a5-1818-48b2-823d-c6f15325ab3c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-20016", "field": "timestamps.first_seen_at", "uuid": "414bbc1a-559d-4a94-af2a-0caefa42ce47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-20016", "field": "status.status_updated_at", "uuid": "75ba35a5-1818-48b2-823d-c6f15325ab3c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-20016", "field": "status.status_updated_at", "uuid": "414bbc1a-559d-4a94-af2a-0caefa42ce47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20016", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "4ac51048-9f89-44b0-be73-2998f7cca759"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-20016", "field": "evidence.0.details.due_date", "uuid": "75ba35a5-1818-48b2-823d-c6f15325ab3c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-20016", "record": "GSD-2021-20016", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "4a056566-a07f-47af-b786-0f8048726ceb"}, {"timestamp": "2022-05-24T17:41:05Z", "date_only": false, "value": "2022-05-24T17:41:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C283-6775-92M9", "record": "GHSA-C283-6775-92M9", "field": "published"}, {"timestamp": "2023-03-10T11:00:07Z", "date_only": false, "value": "2023-03-10T11:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4151", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "e821f79a-c262-4be2-8889-a53367b72725", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u0432\u043c\u0435\u0442\u0441\u043d\u043e \u0441 SonicWall PSIRT \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a UNC4540 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall Secure Mobile Access (SMA).\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0430\u043a\u0442\u043e\u0440 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041c\u0430\u043b\u0432\u0430\u0440\u044c \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ELF, \u0431\u044d\u043a\u0434\u043e\u0440\u0430 TinyShell \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 bash, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u044e \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043c\u043e\u0434\u0443\u043b\u044c firewalld \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 SQL-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043a\u0440\u0430\u0434\u0435\u0442 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u0445 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u043d\u0438 \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0444\u0430\u0439\u043b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432 tmp/syslog.db, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0432 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435.\n\nfirewalld \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b TinyShell, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0430\u0442\u0447 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 SonicWall, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0435\u0433\u043e \u0442\u043e\u0447\u043d\u0443\u044e \u0446\u0435\u043b\u044c.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u0440\u0438 \u0432\u0432\u043e\u0434\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043a\u0430\u043a\u0430\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 (\u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0445, \u043a\u0430\u043a CVE-2021-20038, CVE-2021-20039,\u00a0CVE-2021-20045,    CVE-2021-20016, CVE-2022-22282 \u0438 \u0434\u0440).\n\nMandiant \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u044d\u0442\u043e\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044e iptabled, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0441\u0443\u0442\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c \u0436\u0435 \u043c\u043e\u0434\u0443\u043b\u0435\u043c, \u0447\u0442\u043e \u0438 firewalld, \u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430 (rc.local) \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0445\u043e\u0434\u0430, \u0441\u0431\u043e\u044f \u0438\u043b\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043a\u0440\u0438\u043f\u0442 bash (geoBotnetd) \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0432 \u00ab/cf/FIRMWARE/NEW/INITRD.GZ\u00bb \u043a\u0430\u0436\u0434\u044b\u0435 10 \u0441\u0435\u043a\u0443\u043d\u0434.\u00a0\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u043c\u0435\u043d\u0435\u043c acme \u0432 \u0444\u0430\u0439\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u043c\u043e\u0433 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043e \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 SonicWall \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA100.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u0430\u044f \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014\u00a010.2.1.7\u00a0\u0438 \u0432\u044b\u0448\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 (FIM) \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u0433\u043e \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430\u00a00-day \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet SSL-VPN,\u00a0\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.", "url": "https://t.me/true_secator/4151"}, {"timestamp": "2023-11-14T08:14:32Z", "date_only": false, "value": "2023-11-14T08:14:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hackyourmom/5946", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "3dfbd530-3cda-4c7f-8ceb-b002cd30e8bf", "content": "\u0423 \u0441\u0443\u0447\u0430\u0441\u043d\u043e\u043c\u0443 \u0441\u0432\u0456\u0442\u0456 \u0431\u0435\u0437\u0434\u0456\u044f\u043b\u044c\u043d\u0456\u0441\u0442\u044c \u043a\u043e\u0448\u0442\u0443\u0454 \u0434\u0443\u0436\u0435 \u0434\u043e\u0440\u043e\u0433\u043e.\n\n\u0412\u0435\u043b\u0438\u043a\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u0430 \u0440\u0430\u0434\u0456\u043e\u043b\u043e\u0433\u0456\u0447\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0432 \u0421\u0428\u0410 US Radiology \u043f\u043e\u0433\u043e\u0434\u0438\u043b\u0430\u0441\u044f \u0441\u043f\u043b\u0430\u0442\u0438\u0442\u0438 \u0448\u0442\u0440\u0430\u0444 \u0443 \u0440\u043e\u0437\u043c\u0456\u0440\u0456 450 000 \u0434\u043e\u043b\u0430\u0440\u0456\u0432 \u0437\u0430 \u0432\u0438\u0442\u0456\u043a \u0434\u0430\u043d\u0438\u0445 \u043c\u0430\u0439\u0436\u0435 200 000 \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432 \u043f\u0456\u0441\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0432\u0438\u043c\u0430\u0433\u0430\u044e\u0447\u043e\u0457 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u0432 2021 \u0440\u043e\u0446\u0456. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0432\u0456\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u0457 SonicWall \u0434\u043b\u044f \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u043c\u0435\u0440\u0435\u0436\u0456, \u044f\u043a\u0430 \u0442\u0430\u043a\u043e\u0436 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043b\u0430 \u0457\u0457 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0456\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0447\u0438 Windsong Radiology Group. \u041e\u0434\u043d\u0430\u043a US Radiology \u043d\u0435 \u0443\u0441\u0443\u043d\u0443\u043b\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \"\u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f\" CVE-2021-20016, \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0443 \u0449\u0435 \u0432 \u0441\u0456\u0447\u043d\u0456 2021 \u0440\u043e\u043a\u0443. \u0426\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0441\u0442\u0430\u043b\u0430 \u0442\u043e\u0447\u043a\u043e\u044e \u0432\u0445\u043e\u0434\u0443 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u0456\u0432, \u043e\u0441\u043a\u0456\u043b\u044c\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u043d\u0435 \u0437\u043c\u043e\u0433\u043b\u0430 \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u0456\u0434\u043d\u0435 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0441\u0442\u0430\u0440\u0456\u043b\u0435 \u043e\u0431\u043b\u0430\u0434\u043d\u0430\u043d\u043d\u044f, \u0437\u0430\u043c\u0456\u043d\u0430 \u044f\u043a\u043e\u0433\u043e \u0431\u0443\u043b\u0430 \u0432\u0456\u0434\u043a\u043b\u0430\u0434\u0435\u043d\u0430.\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c SQL-\u0456\u043d'\u0454\u043a\u0446\u0456\u0457 CVE-2021-20016 (CVSS: 9.8) \u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0456 SonicWall SSLVPN SMA100 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u043e\u0432\u0430\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0443 \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 SQL-\u0437\u0430\u043f\u0438\u0442 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0434\u043e \u0456\u043c\u0435\u043d\u0456 \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0430, \u043f\u0430\u0440\u043e\u043b\u044e \u0442\u0430 \u0456\u043d\u0448\u043e\u0457 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0457, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u043e\u0457 \u0437 \u0441\u0435\u0430\u043d\u0441\u043e\u043c. \u0426\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 \u0437\u0431\u0456\u0440\u043a\u0443 SMA100 \u0432\u0435\u0440\u0441\u0456\u0457 10.x.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0456 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u0432\u0434\u0430\u043b\u043e\u0441\u044f \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043c\u0435\u0440\u0435\u0436\u0435\u0432\u0438\u0445 \u043f\u0430\u043f\u043e\u043a, \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0447\u0438 \u0434\u043e\u0434\u0430\u0442\u043a\u043e\u0432\u0456 \u043e\u0431\u043b\u0456\u043a\u043e\u0432\u0456 \u0434\u0430\u043d\u0456. \u0417\u0430 \u0434\u0430\u043d\u0438\u043c\u0438 \u0441\u043b\u0456\u0434\u0441\u0442\u0432\u0430, \u0445\u0430\u043a\u0435\u0440\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0444\u0430\u0439\u043b\u0456\u0432 \u0456\u0437 \u043e\u0441\u043e\u0431\u0438\u0441\u0442\u043e\u044e \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0454\u044e \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0447\u0438 \u0456\u043c\u0435\u043d\u0430, \u0434\u0430\u0442\u0438 \u043d\u0430\u0440\u043e\u0434\u0436\u0435\u043d\u043d\u044f, \u0456\u0434\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0442\u043e\u0440\u0438 \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432, \u0434\u0430\u0442\u0438 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043d\u043d\u044f, \u0456\u043c\u0435\u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0456\u0432, \u0442\u0438\u043f\u0438 \u0440\u0430\u0434\u0456\u043e\u043b\u043e\u0433\u0456\u0447\u043d\u0438\u0445 \u043e\u0431\u0441\u0442\u0435\u0436\u0435\u043d\u044c, \u0434\u0456\u0430\u0433\u043d\u043e\u0437\u0438 \u0442\u0430 \u043d\u043e\u043c\u0435\u0440\u0438 \u043c\u0435\u0434\u0438\u0447\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u0445\u0443\u0432\u0430\u043d\u043d\u044f, \u0430 \u0442\u0430\u043a\u043e\u0436 \u0432\u043e\u0434\u0456\u0439\u0441\u044c\u043a\u0456 \u043f\u043e\u0441\u0432\u0456\u0434\u0447\u0435\u043d\u043d\u044f, \u043d\u043e\u043c\u0435\u0440\u0438 \u043f\u0430\u0441\u043f\u043e\u0440\u0442\u0456\u0432 \u0456 \u043d\u043e\u043c\u0435\u0440\u0438 \u0441\u043e\u0446\u0456\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u0445\u0443\u0432\u0430\u043d\u043d\u044f \u0431\u0430\u0433\u0430\u0442\u044c\u043e\u0445 \u043c\u0435\u0448\u043a\u0430\u043d\u0446\u0456\u0432 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044e US Radiology \u0442\u0430\u043a\u043e\u0436 \u0437\u043e\u0431\u043e\u0432'\u044f\u0437\u0430\u043b\u0438 \u043c\u043e\u0434\u0435\u0440\u043d\u0456\u0437\u0443\u0432\u0430\u0442\u0438 \u0406\u0422-\u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0437\u043e\u043a\u0440\u0435\u043c\u0430 \u0448\u0438\u0444\u0440\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u043d\u0444\u0456\u0434\u0435\u043d\u0446\u0456\u0439\u043d\u0443 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u044e \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432 \u0456 \u0440\u043e\u0437\u0440\u043e\u0431\u0438\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0443 \u0442\u0435\u0441\u0442\u0443\u0432\u0430\u043d\u043d\u044f \u043d\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0435\u043d\u043d\u044f. \u0422\u0430\u043a\u043e\u0436 \u043f\u0435\u0440\u0435\u0434\u0431\u0430\u0447\u0435\u043d\u043e \u0432\u0438\u0434\u0430\u043b\u0435\u043d\u043d\u044f \u0434\u0430\u043d\u0438\u0445 \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432 \u0431\u0435\u0437 \u0440\u043e\u0437\u0443\u043c\u043d\u0438\u0445 \u043f\u0456\u0434\u0441\u0442\u0430\u0432 \u0434\u043b\u044f \u0444\u0443\u043d\u043a\u0446\u0456\u043e\u043d\u0443\u0432\u0430\u043d\u043d\u044f \u0431\u0456\u0437\u043d\u0435\u0441\u0443 \u0442\u0430 \u043d\u0430\u0434\u0430\u043d\u043d\u044f \u0437\u0432\u0456\u0442\u0456\u0432 \u043f\u0440\u043e \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u0456\u0441\u0442\u044c \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0432\u0441\u0442\u0432\u0443 \u043f\u0440\u043e\u0442\u044f\u0433\u043e\u043c \u0434\u0432\u043e\u0445 \u0440\u043e\u043a\u0456\u0432.", "url": "https://t.me/hackyourmom/5946"}, {"timestamp": "2023-12-13T01:23:11.867Z", "date_only": false, "value": "2023-12-13T01:23:11.867613Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-20016", "record": "GSD-2021-20016", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T17:30:07.417Z", "date_only": false, "value": "2024-08-03T17:30:07.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-20016", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:21:48.314Z", "date_only": false, "value": "2024-12-24T20:21:48.314764Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970923", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "e45f1ebf-06e2-4042-bb9a-aa435bc3b8b5", "url": "https://feedsin.space/feed/CISAKevBot/items/2970923"}, {"timestamp": "2025-02-23T02:09:51Z", "date_only": false, "value": "2025-02-23T02:09:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "f9668158-a746-42f6-a60a-53e32172fbe3"}, {"timestamp": "2025-04-30T01:26:08.802Z", "date_only": false, "value": "2025-04-30T01:26:08.802875Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lnynambdqx2k", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "bb153168-9ddd-42f5-89c2-eef4efb4d28f", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3lnynambdqx2k"}, {"timestamp": "2025-04-30T03:12:50.805Z", "date_only": false, "value": "2025-04-30T03:12:50.805072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lnyt7gpu6h2s", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "b1ba96e7-19c4-4ca0-b36b-1a016c83ba0a", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lnyt7gpu6h2s"}, {"timestamp": "2025-04-30T05:19:23Z", "date_only": false, "value": "2025-04-30T05:19:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/234618", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "5d6fd28f-ead2-45e5-b89b-6fadc665e466", "content": "Web Scanning Sonicwall for CVE-2021-20016, (Tue, Apr 29th)\nhttps://ift.tt/Kg3BIQa", "url": "https://t.me/ctinow/234618"}, {"timestamp": "2025-04-30T19:01:36.528Z", "date_only": false, "value": "2025-04-30T19:01:36.528380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lo2i7xbynu2g", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "9a82d02d-0b23-40f1-9d12-f8ead0dec77a", "url": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lo2i7xbynu2g"}, {"timestamp": "2025-04-30T23:21:57.389Z", "date_only": false, "value": "2025-04-30T23:21:57.389164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lo2wrhrp3k2x", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "9fa59514-9796-4fed-a84f-6f854040bb98", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lo2wrhrp3k2x"}, {"timestamp": "2025-05-15T01:26:10.928Z", "date_only": false, "value": "2025-05-15T01:26:10.928471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lp6eaioi2g2c", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "b576eaf0-d981-4a28-939d-6f2c23af4150", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3lp6eaioi2g2c"}, {"timestamp": "2025-05-15T02:44:45Z", "date_only": false, "value": "2025-05-15T02:44:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/235350", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "2f50fa0e-17d7-4150-83e0-308bce51a812", "content": "Web Scanning SonicWall for CVE-2021-20016 - Update, (Wed, May 14th)\nhttps://ift.tt/q8Ta2sv", "url": "https://t.me/ctinow/235350"}, {"timestamp": "2025-05-15T02:53:00.481Z", "date_only": false, "value": "2025-05-15T02:53:00.481918Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lp6j3qxtw32v", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "f9b12061-ea76-4473-b304-9d63e128ffbd", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lp6j3qxtw32v"}, {"timestamp": "2025-05-15T16:02:11.683Z", "date_only": false, "value": "2025-05-15T16:02:11.683944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lp7v6o7eaz2o", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "7e9eac63-6bf5-432a-8065-740582818a6d", "url": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lp7v6o7eaz2o"}, {"timestamp": "2025-05-15T23:18:19.785Z", "date_only": false, "value": "2025-05-15T23:18:19.785150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpanksjua22c", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "9343708f-d7a9-4305-8621-eab248d931e7", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpanksjua22c"}, {"timestamp": "2025-10-22T00:32:02Z", "date_only": false, "value": "2025-10-22T00:32:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C283-6775-92M9", "record": "GHSA-C283-6775-92M9", "field": "modified"}, {"timestamp": "2025-10-31T15:56:14.870Z", "date_only": false, "value": "2025-10-31T15:56:14.870000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T15:33:58.496Z", "date_only": false, "value": "2025-11-18T15:33:58.496000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202102-0898", "record": "VAR-202102-0898", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:29:03.631Z", "date_only": false, "value": "2026-02-02T12:29:03.631368Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3773bc3-7af1-4ceb-a99c-472dd5f7d2d8", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "0fb6d54b-26af-468e-8aed-02c1021dabef", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3773bc3-7af1-4ceb-a99c-472dd5f7d2d8"}, {"timestamp": "2026-02-02T12:29:03.631Z", "date_only": false, "value": "2026-02-02T12:29:03.631368Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3773bc3-7af1-4ceb-a99c-472dd5f7d2d8", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "b044bf74-0e82-4de6-b430-48e39de8f778", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3773bc3-7af1-4ceb-a99c-472dd5f7d2d8"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-20016", "field": "timestamps.recorded_at", "uuid": "75ba35a5-1818-48b2-823d-c6f15325ab3c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:48:04.665Z", "date_only": false, "value": "2026-06-19T12:48:04.665395Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd59b5f1-7465-4d1d-8f18-8fcda4bc6916", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "3554be56-2699-4ccd-8146-4255368e041f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd59b5f1-7465-4d1d-8f18-8fcda4bc6916"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-20016", "field": "timestamps.recorded_at", "uuid": "414bbc1a-559d-4a94-af2a-0caefa42ce47", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:09.109Z", "date_only": false, "value": "2026-06-23T11:13:09.109889Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/414bbc1a-559d-4a94-af2a-0caefa42ce47", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "226b471e-8591-497a-8127-eec6c3103bd5", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/414bbc1a-559d-4a94-af2a-0caefa42ce47"}, {"timestamp": "2026-06-23T14:04:29.202Z", "date_only": false, "value": "2026-06-23T14:04:29.202998Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd189943-0eed-47f0-bc47-8d380d77f6cd", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "e07240d7-e00c-4226-a866-57301968a24b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd189943-0eed-47f0-bc47-8d380d77f6cd"}, {"timestamp": "2026-08-12T03:55:38.334Z", "date_only": false, "value": "2026-08-12T03:55:38.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-20016", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T03:55:38.334Z", "date_only": false, "value": "2026-08-12T03:55:38.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20016", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T05:17:33.173Z", "date_only": false, "value": "2026-08-12T05:17:33.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20016", "record": "FKIE_CVE-2021-20016", "field": "lastModified"}, {"timestamp": "2026-08-12T20:08:46.503Z", "date_only": false, "value": "2026-08-12T20:08:46.503939Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msvwntrhaa24", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "c2fb530a-fd31-497e-906a-7d69a902ccbd", "url": "https://bsky.app/profile/vulnsea.com/post/3msvwntrhaa24"}, {"timestamp": "2026-09-01T20:00:12.396Z", "date_only": false, "value": "2026-09-01T20:00:12.396137Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/181926", "record": "CVE-2021-20016", "field": "creation_timestamp", "uuid": "88e96116-bf0c-481e-a7a0-e2080a16c0c9", "url": "https://t.me/hacking_Attack/181926"}]}