{"metadata": {"vulnerability": "CVE-2022-20699", "count": 77, "kinds": {"milestone": 6, "sighting": 23, "kev": 11, "other": 37}}, "data": [{"timestamp": "2021-11-02T00:00:00Z", "date_only": false, "value": "2021-11-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-20699", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-02T00:00:00Z", "date_only": false, "value": "2022-02-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-02-02T15:49:09Z", "date_only": false, "value": "2022-02-02T15:49:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-02T16:00:00Z", "date_only": false, "value": "2022-02-02T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-03T00:00:00Z", "date_only": false, "value": "2022-02-03T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / cisco", "record": "CVE-2022-20699", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-02-03T00:00:00Z", "date_only": false, "value": "2022-02-03T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-20699", "record": "GSD-2022-20699", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-02-03T00:00:00Z", "date_only": false, "value": "2022-02-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-107", "record": "CERTFR-2022-AVI-107", "field": "last_revision_date"}, {"timestamp": "2022-02-03T00:00:00Z", "date_only": false, "value": "2022-02-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2022-20699", "field": "containers.cna.datePublic"}, {"timestamp": "2022-02-03T00:00:00Z", "date_only": false, "value": "2022-02-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-107", "record": "CERTFR-2022-AVI-107", "field": "initial_release_date"}, {"timestamp": "2022-02-03T00:00:00Z", "date_only": false, "value": "2022-02-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-107", "record": "CERTFR-2022-AVI-107", "field": "revisions.0.revision_date"}, {"timestamp": "2022-02-04T11:26:32Z", "date_only": false, "value": "2022-02-04T11:26:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/2591", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "a99d7375-c0a5-4868-b273-0de2ee0b4b8c", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 VPN-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Small Business \u0441\u0435\u0440\u0438\u0439 RV160, RV260, RV340 \u0438 RV345. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0434\u044b\u0440\u0430 \u2014 \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 CVE-2022-20699 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 10,0).\u00a0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 SSL VPN \u0433\u0438\u0433\u0430\u0431\u0438\u0442\u043d\u044b\u0445 VPN-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Cisco Small Business RV340, RV340W, RV345 \u0438 RV345P \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0433\u0440\u0430\u043d\u0438\u0446, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0430\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0448\u043b\u044e\u0437\u0430 SSL VPN.\u00a0\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438 Small Business RV: CVE-2022-20700 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 10) \u0438 CVE-2022-20701 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,0).\n\n\u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\u00a0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0431\u0430\u0433\u0430\u043c\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\u00a0\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\u00bb.\u00a0\u0447\u0438\u0442\u0430\u0435\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0442\u0430\u043a\u0436\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-20708 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 10,0) \u0438 CVE-2022-20703 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,3), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u041f\u0440\u043e\u043a\u0430\u0447\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS), \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 Cisco Small Business, \u0432\u0435\u0434\u044c PoC \u043f\u043e\u0434 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442.", "url": "https://t.me/true_secator/2591"}, {"timestamp": "2022-02-04T15:38:15Z", "date_only": false, "value": "2022-02-04T15:38:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-02-05T15:10:07Z", "date_only": false, "value": "2022-02-05T15:10:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NeKaspersky/1769", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "3712f520-2272-46d4-9791-160d9f82e937", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0441\u0435\u0440\u0438\u0438 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 (RV). \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u043f\u0434\u0435\u0439\u0442\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 5 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS).\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f:\n\u2022 CVE-2022-20699: RCE \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 SSL VPN, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. (10,0 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438);\n\u2022 CVE-2022-20700 \u0438 CVE-2022-20701: \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u0438\u0437-\u0437\u0430 \u0431\u0430\u0433\u043e\u0432 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (10,0 \u0438 9,0);\n\u2022 CVE-2022-20703: \u043e\u0431\u0445\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u043e\u0444\u0442\u0430 \u0438\u0437 \u043e\u0431\u0440\u0430\u0437\u0430 (9,3);\n\u2022 CVE-2022-20707, CVE-2022-20708, CVE-2022-20749: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0432, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a RCE, \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 (10,0, 7,3 \u0438 7,3);\n\n\u041f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 PSIRT Cisco \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 PoC \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20699 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Flashback \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0430 Pwn2Own Austin 2021. \u041e\u043d\u0438 \u043e\u0431\u0435\u0449\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c POC \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u044b\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u043d\u0430 OffensiveCon 2022.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/1769"}, {"timestamp": "2022-02-09T18:52:23Z", "date_only": false, "value": "2022-02-09T18:52:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-02-10T00:00:00Z", "date_only": false, "value": "2022-02-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-02-10T17:06:34.377Z", "date_only": false, "value": "2022-02-10T17:06:34.377Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-20699", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-10T18:15:00Z", "date_only": false, "value": "2022-02-10T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VCHR-42H7-32XH", "record": "GHSA-VCHR-42H7-32XH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-10T18:15:00Z", "date_only": false, "value": "2022-02-10T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-20699", "record": "GSD-2022-20699", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-10T18:15:08.980Z", "date_only": false, "value": "2022-02-10T18:15:08.980000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-02-10T18:15:08.980Z", "date_only": false, "value": "2022-02-10T18:15:08.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20699", "record": "FKIE_CVE-2022-20699", "field": "published"}, {"timestamp": "2022-02-10T20:17:11Z", "date_only": false, "value": "2022-02-10T20:17:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37236", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "f6274037-ed03-493e-a18f-54f6e825c835", "content": "\u203c CVE-2022-20699 \u203c\n\nMultiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37236"}, {"timestamp": "2022-02-11T00:00:44Z", "date_only": false, "value": "2022-02-11T00:00:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VCHR-42H7-32XH", "record": "GHSA-VCHR-42H7-32XH", "field": "published"}, {"timestamp": "2022-02-11T17:35:21Z", "date_only": false, "value": "2022-02-11T17:35:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1713", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "9bca6dcb-1dd2-4486-8080-dbb6395bd726", "content": "#exploit\n1. A Zero-Click RCE Exploit for the Peloton Bike\n(And Also Every Other Unpatched Android Device)\nhttps://www.nowsecure.com/blog/2022/02/09/a-zero-click-rce-exploit-for-the-peloton-bike-and-also-every-other-unpatched-android-device\n\n2. An analysis of CVE-2022-21877\nhttps://big5-sec.github.io/posts/an-analysis-of-cve-2022-21877\n\n3. CVE-2022-20699:\nCisco Anyconnect VPN unauth RCE (rwx stack)\nhttps://github.com/Audiobahn/CVE-2022-20699\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1713"}, {"timestamp": "2022-02-13T15:23:03Z", "date_only": false, "value": "2022-02-13T15:23:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/821", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "0599bedc-bfb7-40d9-b4ed-db0a6235ffa4", "content": "CVE-2022-20699\nCisco Anyconnect VPN unauth RCE (\u0441\u0442\u0435\u043a rwx) \u043f\u043b\u043e\u0445\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\nhttps://github.com/Audiobahn/CVE-2022-20699\n\n\u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u2705", "url": "https://t.me/poxek/821"}, {"timestamp": "2022-02-14T13:54:42Z", "date_only": false, "value": "2022-02-14T13:54:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-02-14T13:54:42Z", "date_only": false, "value": "2022-02-14T13:54:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-20699", "field": "timestamps.asserted_at", "uuid": "f489c75d-f830-4948-9803-b9628334dd21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-20699", "field": "timestamps.asserted_at", "uuid": "693d96bb-9029-4c04-bc11-390d65a130af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": true, "value": "2022-03-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20699", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": true, "value": "2022-03-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2022-20699", "record": "GSD-2022-20699", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-20699", "field": "evidence.0.details.added_date", "uuid": "693d96bb-9029-4c04-bc11-390d65a130af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": true, "value": "2022-03-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-20699", "field": "evidence.0.details.date_added", "uuid": "f489c75d-f830-4948-9803-b9628334dd21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-20699", "field": "timestamps.first_seen_at", "uuid": "f489c75d-f830-4948-9803-b9628334dd21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-20699", "field": "timestamps.first_seen_at", "uuid": "693d96bb-9029-4c04-bc11-390d65a130af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-20699", "field": "status.status_updated_at", "uuid": "f489c75d-f830-4948-9803-b9628334dd21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-20699", "field": "status.status_updated_at", "uuid": "693d96bb-9029-4c04-bc11-390d65a130af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-03T00:00:00Z", "date_only": false, "value": "2022-03-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20699", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-03-17T00:00:00Z", "date_only": true, "value": "2022-03-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-20699", "field": "evidence.0.details.due_date", "uuid": "f489c75d-f830-4948-9803-b9628334dd21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-17T00:00:00Z", "date_only": true, "value": "2022-03-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2022-20699", "record": "GSD-2022-20699", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-11T15:36:59Z", "date_only": false, "value": "2022-05-11T15:36:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "93e60c93-b5b2-473a-bba2-333c27c2c4a6", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb"}, {"timestamp": "2022-05-11T19:06:23Z", "date_only": false, "value": "2022-05-11T19:06:23.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2022-20699", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-07-03T19:01:09Z", "date_only": false, "value": "2022-07-03T19:01:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1899", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "2fb00730-35cd-46f3-8430-5d08d7103c59", "content": "CVE-2022-20699\nCisco Anyconnect VPN unauth RCE (rwx stack)\nhttps://github.com/Audiobahn/CVE-2022-20699\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1899"}, {"timestamp": "2023-05-11T00:00:00Z", "date_only": false, "value": "2023-05-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-05-11T09:08:00Z", "date_only": false, "value": "2023-05-11T09:08:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "eff13e45-ff77-4811-ba55-db0ac8e442e6"}, {"timestamp": "2023-06-27T16:37:00Z", "date_only": false, "value": "2023-06-27T16:37Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-20699", "record": "GSD-2022-20699", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-28T00:00:00Z", "date_only": false, "value": "2023-06-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-11-07T00:00:00Z", "date_only": false, "value": "2023-11-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-12-03T12:23:53Z", "date_only": false, "value": "2023-12-03T12:23:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/930", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "c73f8350-4dba-4949-bdc6-22a1ea1c0cb2", "content": "#ExploitObserverAlert\n\nCVE-2022-20699\n\nDESCRIPTION: Exploit Observer has 17 entries related to CVE-2022-20699. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.\n\nFIRST-EPSS: 0.957850000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/930"}, {"timestamp": "2023-12-13T01:19:17.010Z", "date_only": false, "value": "2023-12-13T01:19:17.010655Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-20699", "record": "GSD-2022-20699", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-10T23:12:51Z", "date_only": false, "value": "2024-05-10T23:12:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-SMB-MULT-VULN-KA9PK6D", "record": "CISCO-SA-SMB-MULT-VULN-KA9PK6D", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-03T02:24:48.588Z", "date_only": false, "value": "2024-08-03T02:24:48.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-20699", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-29T16:12:49.438Z", "date_only": false, "value": "2024-10-29T16:12:49.438936Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20699", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-29T16:12:49.438Z", "date_only": false, "value": "2024-10-29T16:12:49.438936Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20699", "record": "FKIE_CVE-2022-20699", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-24T20:28:08.580Z", "date_only": false, "value": "2024-12-24T20:28:08.580459Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971358", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "b024072b-2246-4bf7-962f-c7d1c3494538", "url": "https://feedsin.space/feed/CISAKevBot/items/2971358"}, {"timestamp": "2025-01-09T16:27:14Z", "date_only": false, "value": "2025-01-09T16:27:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5388", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "32196aa0-a6a6-4d50-bbe3-295d7c661a18", "content": "#exploit\n1. A Zero-Click RCE Exploit for the Peloton Bike\n(And Also Every Other Unpatched Android Device)\nhttps://www.nowsecure.com/blog/2022/02/09/a-zero-click-rce-exploit-for-the-peloton-bike-and-also-every-other-unpatched-android-device\n\n2. An analysis of CVE-2022-21877\nhttps://big5-sec.github.io/posts/an-analysis-of-cve-2022-21877\n\n3. CVE-2022-20699:\nCisco Anyconnect VPN unauth RCE (rwx stack)\nhttps://github.com/Audiobahn/CVE-2022-20699", "url": "https://t.me/CyberSecurityTechnologies/5388"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "a75c75e6-4c43-4525-8522-9c542c0d4d96"}, {"timestamp": "2025-02-23T02:10:33Z", "date_only": false, "value": "2025-02-23T02:10:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "c2345dd3-d1d3-4abb-91db-cc233273676a"}, {"timestamp": "2025-02-23T04:10:42Z", "date_only": false, "value": "2025-02-23T04:10:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "2328216f-2517-43f1-a7aa-cceb6dc05c22"}, {"timestamp": "2025-08-31T03:13:03Z", "date_only": false, "value": "2025-08-31T03:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "cd4e897c-3ec6-4c4c-9cc4-0f455e7c99bb"}, {"timestamp": "2025-10-21T23:15:46.824Z", "date_only": false, "value": "2025-10-21T23:15:46.824Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-20699", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:46.824Z", "date_only": false, "value": "2025-10-21T23:15:46.824Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20699", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:29Z", "date_only": false, "value": "2025-10-22T00:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VCHR-42H7-32XH", "record": "GHSA-VCHR-42H7-32XH", "field": "modified"}, {"timestamp": "2025-10-28T13:58:22.657Z", "date_only": false, "value": "2025-10-28T13:58:22.657000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T15:27:29.580Z", "date_only": false, "value": "2025-11-18T15:27:29.580000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202202-1278", "record": "VAR-202202-1278", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:11.674Z", "date_only": false, "value": "2026-02-02T12:28:11.674262Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bff9a071-14f2-4c73-b82b-53b4322d1882", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "376b03d5-cd22-495a-ad58-68167db6fb0a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bff9a071-14f2-4c73-b82b-53b4322d1882"}, {"timestamp": "2026-02-02T12:28:11.674Z", "date_only": false, "value": "2026-02-02T12:28:11.674262Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bff9a071-14f2-4c73-b82b-53b4322d1882", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "24e07f58-f0ff-406c-a790-400414d003e0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bff9a071-14f2-4c73-b82b-53b4322d1882"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-20699", "field": "timestamps.recorded_at", "uuid": "f489c75d-f830-4948-9803-b9628334dd21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:24:53.200Z", "date_only": false, "value": "2026-06-17T04:24:53.200", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20699", "record": "FKIE_CVE-2022-20699", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:36.970Z", "date_only": false, "value": "2026-06-19T12:47:36.970113Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4080d04-7d31-4467-9d12-011d45352fd5", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "64a6be54-0da9-4b6f-9710-4826a6119efe", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4080d04-7d31-4467-9d12-011d45352fd5"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-20699", "field": "timestamps.recorded_at", "uuid": "693d96bb-9029-4c04-bc11-390d65a130af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:35.930Z", "date_only": false, "value": "2026-06-23T11:13:35.930392Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/693d96bb-9029-4c04-bc11-390d65a130af", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "27ee1090-e35a-4caa-976e-aac2fde882a8", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/693d96bb-9029-4c04-bc11-390d65a130af"}, {"timestamp": "2026-06-23T14:05:05.675Z", "date_only": false, "value": "2026-06-23T14:05:05.675160Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a59734c-04c5-41e3-b2ee-9adb578fec61", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "6b46d6bf-d410-4dfc-ae7b-33f4bd8cc140", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a59734c-04c5-41e3-b2ee-9adb578fec61"}, {"timestamp": "2026-09-01T20:01:56.756Z", "date_only": false, "value": "2026-09-01T20:01:56.756662Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/41422", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "58bf25c8-b358-4189-8186-128a81d5b621", "url": "https://t.me/hacking_Attack/41422"}, {"timestamp": "2026-09-01T20:01:56.829Z", "date_only": false, "value": "2026-09-01T20:01:56.829251Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/41421", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "634f00c8-587b-4c0c-bbad-368f3d93c642", "url": "https://t.me/hacking_Attack/41421"}, {"timestamp": "2026-09-06T10:00:05.351Z", "date_only": false, "value": "2026-09-06T10:00:05.351280Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/41422", "record": "CVE-2022-20699", "field": "creation_timestamp", "uuid": "17e27731-aed2-4e41-a7b7-91255b58dff6", "url": "https://t.me/hacking_Attack/41422"}]}