{"metadata": {"vulnerability": "CVE-2022-42475", "count": 238, "kinds": {"milestone": 9, "sighting": 161, "kev": 11, "other": 57}}, "data": [{"timestamp": "2022-10-07T14:05:36.301Z", "date_only": false, "value": "2022-10-07T14:05:36.301Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-42475", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-12-12T17:52:31Z", "date_only": false, "value": "2022-12-12T17:52:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2022/12/kritische-sicherheitslucke-in-fortinet-fortios", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d4b8ddc6-4aa1-4377-bb86-960360c27934", "url": "https://www.cert.at/de/warnungen/2022/12/kritische-sicherheitslucke-in-fortinet-fortios"}, {"timestamp": "2022-12-12T23:00:00Z", "date_only": false, "value": "2022-12-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2293", "record": "WID-SEC-W-2022-2293", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-12T23:00:00Z", "date_only": false, "value": "2022-12-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2293", "record": "WID-SEC-W-2022-2293", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-12T23:00:00Z", "date_only": false, "value": "2022-12-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2293", "record": "WID-SEC-W-2022-2293", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-42475", "field": "timestamps.asserted_at", "uuid": "0898f70b-05f1-4f28-916e-7ef774e877ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-42475", "field": "timestamps.asserted_at", "uuid": "e5dc9432-abd4-4d5d-a278-e189b1a10ec2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-42475", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-42475", "field": "evidence.0.details.added_date", "uuid": "e5dc9432-abd4-4d5d-a278-e189b1a10ec2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-42475", "field": "evidence.0.details.date_added", "uuid": "0898f70b-05f1-4f28-916e-7ef774e877ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-42475", "field": "timestamps.first_seen_at", "uuid": "0898f70b-05f1-4f28-916e-7ef774e877ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-42475", "field": "timestamps.first_seen_at", "uuid": "e5dc9432-abd4-4d5d-a278-e189b1a10ec2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1090", "record": "CERTFR-2022-AVI-1090", "field": "last_revision_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-87170", "record": "CNVD-2022-87170", "field": "openTime"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-012", "record": "CERTFR-2022-ALE-012", "field": "initial_release_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1090", "record": "CERTFR-2022-AVI-1090", "field": "initial_release_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-012", "record": "CERTFR-2022-ALE-012", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1090", "record": "CERTFR-2022-AVI-1090", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-42475", "field": "status.status_updated_at", "uuid": "0898f70b-05f1-4f28-916e-7ef774e877ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-42475", "field": "status.status_updated_at", "uuid": "e5dc9432-abd4-4d5d-a278-e189b1a10ec2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-87170", "record": "CNVD-2022-87170", "field": "submitTime"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-42475", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-12-13T04:00:00Z", "date_only": false, "value": "2022-12-13T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=931", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "16cd527a-f205-4fa9-8fbb-69c80c909aca", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=931"}, {"timestamp": "2022-12-13T04:50:54Z", "date_only": false, "value": "2022-12-13T04:50:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2860", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "4108ea92-78d3-4450-ac88-772b951ccd45", "content": "Urgent: Fortinet has issued emergency patches for a severe pre-auth RCE vulnerability (CVE-2022-42475) affecting its FortiOS SSL-VPN product that is being actively exploited in the wild.\n\nRead: https://thehackernews.com/2022/12/fortinet-warns-of-active-exploitation.html", "url": "https://t.me/thehackernews/2860"}, {"timestamp": "2022-12-13T07:54:53Z", "date_only": false, "value": "2022-12-13T07:54:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e132e5f2-1a09-43e4-b2d6-8046c730616f", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d4d769d6-c38b-413a-8ea7-a35033237509"}, {"timestamp": "2022-12-13T08:34:18Z", "date_only": false, "value": "2022-12-13T08:34:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3817", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "11847b6d-66a7-4b7e-8eef-0a15c4aa7ecd", "content": "Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-42475 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 FortiOS SSL-VPN, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430\u00a0\u0444\u0438\u0440\u043c\u043e\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Olympe Cyberdefense \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 FortiOS sslvpnd.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e PSIRT Fortinet, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,3.\n\n\u0412 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Fortinet \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\nFortinet \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0438 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0430\u0448\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0434\u043b\u044f FortiOS \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 APT-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0441\u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fortinet.\n\nFortinet \u043f\u043e-\u0442\u0438\u0445\u043e\u043c\u0443 \u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 28 \u043d\u043e\u044f\u0431\u0440\u044f FortiOS 7.2.3, \u0438 \u0443\u043c\u043e\u043b\u0447\u0430\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a 0-day.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0437\u0436\u0435 7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0447\u0430\u0441\u0442\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 TLP:Amber \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0430 \u0443\u0436\u0435 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0425\u043e\u0442\u044f Fortinet \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u043e \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOC, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0443\u0434\u0430\u0435\u0442\u0441\u044f, Olympe Cyberdefense \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 VPN-SSL \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043d\u0435\u0441\u0442\u0438\u0441\u044c \u043a \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u0435\u0434\u044c \u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Grey Noise, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0435\u0449\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435.", "url": "https://t.me/true_secator/3817"}, {"timestamp": "2022-12-13T11:51:22Z", "date_only": false, "value": "2022-12-13T11:51:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/81118", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "08e14713-53ad-4de0-8aee-82a6313a9ae8", "content": "Critical FortiOS pre-auth RCE vulnerability exploited by attackers (CVE-2022-42475)\n\nhttps://ift.tt/bYFREAS", "url": "https://t.me/ctinow/81118"}, {"timestamp": "2022-12-19T09:30:55Z", "date_only": false, "value": "2022-12-19T09:30:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/630", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "94552d8f-d1ed-4317-91e7-305ce9478b5f", "content": "\ud83d\udca3 \u0647\u0634\u062f\u0627\u0631!\n\n\u0648\u0628 \u0633\u0627\u06cc\u062a \u0631\u0633\u0645\u06cc \u0634\u0631\u06a9\u062a \u0641\u0648\u0631\u062a\u06cc \u0646\u062a \u062e\u0628\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0627 \u062f\u0631\u062c\u0647 \u0627\u0647\u0645\u06cc\u062a \u062d\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0631\u0633\u0627\u0646\u0647 \u0627\u06cc \u06a9\u0631\u062f.\n\n\u06a9\u0645\u062a\u0631 \u0627\u0632 \u062f\u0648 \u0645\u0627\u0647 \u067e\u06cc\u0634 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645\u06cc \u062f\u0631 \u0628\u062e\u0634 SSL-VPN \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 FortiOS \u062a\u0648\u062c\u0647 \u0645\u062a\u062e\u0635\u0635\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0648 \u0647\u06a9\u0631\u0647\u0627 \u0631\u0627 \u0628\u0647 \u062e\u0648\u062f \u062c\u0644\u0628 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u06af\u0648\u06cc\u0627 \u0646\u0633\u062e\u0647 \u0628\u0647\u06cc\u0646\u0647 \u0634\u062f\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc (\u0627\u0644\u0628\u062a\u0647 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631\u0647\u0627) \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a\u060c \u062f\u0631\u062f\u0633\u0631 \u0633\u0627\u0632 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2022-42475  \u0648 \u062f\u0631\u062c\u0647 \u0627\u0647\u0645\u06cc\u062a \u062d\u06cc\u0627\u062a\u06cc \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.3 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0627\u0631\u062a \u0648 \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc \u0646\u0645\u0627\u06cc\u062f.\n\n\u0636\u0645\u0646 \u062a\u0627\u06a9\u06cc\u062f \u0628\u0631 \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u060c \u0628\u0647 \u0627\u062f\u0645\u06cc\u0646 \u0647\u0627\u06cc \u0634\u0628\u06a9\u0647 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a\u060c \u0628\u0647 \u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0628\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0631\u0627 \u062f\u0631 \u0627\u0648\u0644\u0648\u06cc\u062a \u0642\u0631\u0627\u0631 \u062f\u0647\u0646\u062f.\n\n\ud83d\udcdd \u0646\u06a9\u062a\u0647: \u062f\u0631 \u0635\u0641\u062d\u0647 \u0631\u0633\u0645\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646 \u0636\u0645\u0646 \u062a\u0648\u0636\u06cc\u062d \u0641\u0646\u06cc\u060c \u0628\u0647 \u062c\u0632\u0626\u06cc\u0627\u062a \u062f\u0642\u06cc\u0642 \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0648 \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647\u060c \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u062c\u0632\u0626\u06cc\u0627\u062a \u0631\u0633\u0645\u06cc: https://www.fortiguard.com/psirt/FG-IR-22-398", "url": "https://t.me/MrVGunz/630"}, {"timestamp": "2022-12-20T00:00:00Z", "date_only": false, "value": "2022-12-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-012", "record": "CERTFR-2022-ALE-012", "field": "last_revision_date"}, {"timestamp": "2022-12-20T00:00:00Z", "date_only": false, "value": "2022-12-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-012", "record": "CERTFR-2022-ALE-012", "field": "revisions.2.revision_date"}, {"timestamp": "2022-12-22T23:00:00Z", "date_only": false, "value": "2022-12-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2293", "record": "WID-SEC-W-2022-2293", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-12-22T23:00:00Z", "date_only": false, "value": "2022-12-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2293", "record": "WID-SEC-W-2022-2293", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-02T00:00:00Z", "date_only": false, "value": "2023-01-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_release_date.data.0.date"}, {"timestamp": "2023-01-02T08:18:49.444Z", "date_only": false, "value": "2023-01-02T08:18:49.444Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-42475", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-01-02T08:18:49.444Z", "date_only": false, "value": "2023-01-02T08:18:49.444Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2022-42475", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-01-02T09:15:00Z", "date_only": false, "value": "2023-01-02T09:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P3VQ-4CXH-GFP9", "record": "GHSA-P3VQ-4CXH-GFP9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-01-02T09:15:00Z", "date_only": false, "value": "2023-01-02T09:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-42475", "record": "GSD-2022-42475", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-01-02T09:15:09.490Z", "date_only": false, "value": "2023-01-02T09:15:09.490000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-01-02T09:15:09.490Z", "date_only": false, "value": "2023-01-02T09:15:09.490", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-42475", "record": "FKIE_CVE-2022-42475", "field": "published"}, {"timestamp": "2023-01-02T09:31:57Z", "date_only": false, "value": "2023-01-02T09:31:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P3VQ-4CXH-GFP9", "record": "GHSA-P3VQ-4CXH-GFP9", "field": "published"}, {"timestamp": "2023-01-03T00:00:00Z", "date_only": true, "value": "2023-01-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-42475", "field": "evidence.0.details.due_date", "uuid": "0898f70b-05f1-4f28-916e-7ef774e877ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-09T00:00:00Z", "date_only": false, "value": "2023-01-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-01-09T17:30:00Z", "date_only": false, "value": "2023-01-09T17:30Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-42475", "record": "GSD-2022-42475", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-01-13T07:36:43Z", "date_only": false, "value": "2023-01-13T07:36:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/86736", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "201a40b2-e089-4e03-b34a-f316677b9c07", "content": "Threat actors target govt networks exploiting Fortinet SSL-VPN CVE-2022-42475 bug\n\nhttps://ift.tt/2gl58I4", "url": "https://t.me/ctinow/86736"}, {"timestamp": "2023-01-13T08:57:50Z", "date_only": false, "value": "2023-01-13T08:57:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/042a4478-fe19-4ed0-a309-b96da3542a95", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "00704a3d-b2ab-444d-9367-69618d431c6c"}, {"timestamp": "2023-01-13T10:46:25Z", "date_only": false, "value": "2023-01-13T10:46:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2948", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "340445f7-b9cd-4ace-b7c9-54f53ea57aed", "content": "A vulnerability (CVE-2022-42475) in FortiOS SSL-VPN was exploited by hackers as a \"zero-day\" to attack governments and large organizations before Fortinet fixed it.\n\nDetails: https://thehackernews.com/2023/01/fortios-flaw-exploited-as-zero-day-in.html", "url": "https://t.me/thehackernews/2948"}, {"timestamp": "2023-01-13T12:31:23Z", "date_only": false, "value": "2023-01-13T12:31:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/86776", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "40094cac-aa65-4148-80b8-d1b9b7a817e8", "content": "FortiOS flaw was exploited to compromise governmental targets (CVE-2022-42475)\n\nhttps://ift.tt/q7EwBFk", "url": "https://t.me/ctinow/86776"}, {"timestamp": "2023-01-13T12:36:39Z", "date_only": false, "value": "2023-01-13T12:36:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/49390", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "2ba11afb-8afb-4b6f-b3c6-0509d7d05a7c", "content": "Fortinet Says Recently Patched Vulnerability Exploited to Hack Governments\nhttps://www.securityweek.com/fortinet-says-recently-patched-vulnerability-exploited-hack-governments\n\nFortinet reported this week that a recently patched vulnerability tracked as CVE-2022-42475 has been exploited in highly targeted attacks aimed at government organizations.\nThe security hole impacts the FortiOS SSL-VPN and it can allow a remote, unauthenticated hacker to execute arbitrary code or commands using specially crafted requests.\nread more (https://www.securityweek.com/fortinet-says-recently-patched-vulnerability-exploited-hack-governments)", "url": "https://t.me/information_security_channel/49390"}, {"timestamp": "2023-01-13T13:49:28Z", "date_only": false, "value": "2023-01-13T13:49:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/2064", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "29638e94-f37d-441b-b7ff-d083ae19676b", "content": "\u200b\ud83d\udde1 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c FortiOS \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430.\n\n\ud83d\udcac \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 FortiOS SSL-VPN, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u0443\u0447\u0438 CVE-2022-42475 (CVSS: 9.8) , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 Linux, \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f FortiOS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 Fortinet (Intrusion Prevention System, IPS) \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nFortinet \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u0430\u0442\u0430\u043a. \u041a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435, \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u043f\u0443\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0437\u0443, \u0430 \u0442\u0430\u043a\u0436\u0435 \u00ab\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438\u00bb \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u043c\u0438 FortiOS \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c\u0438. Fortinet \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 , \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u00ab\u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f FortiOS \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00bb, \u0430 \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043d\u0430\u0432\u044b\u043a\u0430\u043c\u0438 \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u0435\u0439 FortiOS.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437\u0435\u0446 Windows \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u0432 \u0447\u0430\u0441\u043e\u0432\u043e\u043c \u043f\u043e\u044f\u0441\u0435 UTC+8, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0445\u043e\u0434\u044f\u0442 \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u044f, \u041a\u0438\u0442\u0430\u0439, \u0420\u043e\u0441\u0441\u0438\u044f, \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0442\u0440\u0430\u043d\u044b \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\n#FortiOS #\u0425\u0430\u043a\u0435\u0440\u044b #0day\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/2064"}, {"timestamp": "2023-01-16T11:00:21Z", "date_only": false, "value": "2023-01-16T11:00:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/7559", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9249d85e-52a0-4e36-972a-f6e4648aa758", "content": "#Malware_analysis\nAnalysis of CVE-2022-42475 - FortiOS - heap-based buffer overflow in SSLVPNd\nhttps://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd", "url": "https://t.me/CyberSecurityTechnologies/7559"}, {"timestamp": "2023-01-17T15:18:22Z", "date_only": false, "value": "2023-01-17T15:18:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2288", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "1e2af17d-09a7-4ad4-9508-b5a09369c4bb", "content": "#Malware_analysis\nAnalysis of CVE-2022-42475 - FortiOS - heap-based buffer overflow in SSLVPNd\nhttps://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd", "url": "https://t.me/crackcodes/2288"}, {"timestamp": "2023-01-20T08:02:34Z", "date_only": false, "value": "2023-01-20T08:02:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2972", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "84c9f505-2b93-41c4-9481-aa748179f8ac", "content": "Researchers are warning of a new Chinese #malware called \"BOLDMOVE\" that exploited a recently discovered vulnerability in Fortinet FortiOS SSL-VPN (CVE-2022-42475) as a zero-day to attack government entities & managed service providers.\n\nhttps://thehackernews.com/2023/01/new-chinese-malware-spotted-exploiting.html", "url": "https://t.me/thehackernews/2972"}, {"timestamp": "2023-01-20T08:38:26Z", "date_only": false, "value": "2023-01-20T08:38:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/jokerplstaeen/12209", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "5416315a-9f17-45be-a14c-7364601cf4df", "content": "\u200f\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 FortiOS Vulnerability (CVE-2022-42475) \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u064a\u0646 APT\u060c \u0648\u0647\u0646\u0627 \u062a\u0642\u0631\u064a\u0631 \u064a\u0634\u0631\u062d \u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0648\u0627\u0644\u0627\u0633\u0627\u0644\u064a\u0628 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0647 \u0645\u0646 \u0642\u0628\u0644\u0647\u0645 \u0645\u0639 \u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642.\n\u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\n\nhttps://www.mandiant.com/resources/blog/chinese-actors-exploit-fortios-flaw", "url": "https://t.me/jokerplstaeen/12209"}, {"timestamp": "2023-01-20T17:10:08Z", "date_only": false, "value": "2023-01-20T17:10:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3969", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "e7b888cf-d04a-443a-91c8-980e267da80c", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet \u044d\u043a\u0441\u043f\u0443\u043b\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a 0-day \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u043f\u043e\u0447\u0442\u0438 \u0437\u0430 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442 \u0430\u043a\u0442\u043e\u0440\u0430 \u0432 \u0441\u0432\u044f\u0437\u044f\u0445 \u0441 \u041a\u041d\u0420, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0410\u0420\u0422 \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0435\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IPS\\IDS \u0438 \u0442.\u0434.). \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Fortinet FortiOS SSL-VPN \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0435 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u043e\u0435 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0438 MSP-\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0432 \u0410\u0444\u0440\u0438\u043a\u0435.\n\n\u0412 \u0445\u043e\u0434\u0435 \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u0439 \u0430\u043a\u0442\u043e\u0440 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043d\u0430\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435\u00a0BOLDMOVE, \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043b\u044f Linux \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate.\n\n\u0420\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 FortiOS SSL-VPN (CVE-2022-42475), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Fortinet \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0410\u0420\u0422 \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 Linux, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u04212.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Mandiant \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0432 \u0441\u0432\u043e\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430\u0445 \u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439.\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e BOLDMOVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043d\u043e \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u043b\u0443\u0436\u0431, \u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432.\n\n\u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 \u043d\u0430 C, \u0438\u043c\u0435\u0435\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043a\u0430\u043a \u0434\u043b\u044f Windows, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f Linux, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0444\u0430\u0439\u043b\u0430, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0433\u043e Fortinet.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f Windows \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443, \u0445\u043e\u0442\u044f \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u043b\u0438\u0441\u044c.\n\nBOLDMOVE \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 C2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u0438 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0439 \u0445\u043e\u0441\u0442.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437\u0435\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Linux \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0438 \u043e\u0442\u0447\u0435\u0442 Fortinet.", "url": "https://t.me/true_secator/3969"}, {"timestamp": "2023-01-23T11:42:48Z", "date_only": false, "value": "2023-01-23T11:42:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/2103", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "5d2efba0-fc3a-4b22-89c8-45af01260ff2", "content": "\u200b\u2694\ufe0f \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\ud83d\udcac \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c\u0443 \u043e\u0442\u0447\u0451\u0442\u0443, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mandiant, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 FortiOS, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortinet, \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-42475 \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0435\u0449\u0451 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430. \u041a \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0442\u0447\u0451\u0442\u0430 \u00ab\u0431\u0440\u0435\u0448\u044c\u00bb \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438. \u0412 \u044f\u043d\u0432\u0430\u0440\u0435 Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0438.\n\nMandiant \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 Boldmove. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate \u043e\u0442 Fortinet.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0443, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u00ab\u041c\u044b \u043e\u0436\u0438\u0434\u0430\u0435\u043c, \u0447\u0442\u043e \u044d\u0442\u0430 \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0438 \u0434\u0430\u043b\u0435\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u043e\u0440\u043e\u0448\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u00bb, \u2014 \u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Mandiant.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0441\u0442\u043e\u044f\u0442 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0437-\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0438\u043c\u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u043d\u0433\u0430. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0431\u044b\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u043c \u0434\u043b\u044f \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0438\u0435\u0440\u043e\u0433\u043b\u0438\u0444\u043e\u0432 \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c \u0432 \u0447\u0430\u0441\u043e\u0432\u043e\u043c \u043f\u043e\u044f\u0441\u0435 UTC+8, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u044e, \u041a\u0438\u0442\u0430\u0439, \u0420\u043e\u0441\u0441\u0438\u044e, \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0442\u0440\u0430\u043d\u044b \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b #\u041a\u0438\u0442\u0430\u0439\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/2103"}, {"timestamp": "2023-01-23T13:07:12Z", "date_only": false, "value": "2023-01-23T13:07:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NeKaspersky/2793", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "8c727fe7-0808-4d32-b098-b3817647168d", "content": "\u041f\u043e\u0434 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0435 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 FortiOS \u043f\u043e\u043f\u0430\u043b\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0433\u043e\u0441. \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0415\u0432\u0440\u043e\u043f\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-42475 \u0432 FortiOS.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0443, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041e\u0442\u043b\u0438\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0447\u0435\u0440\u043a\u0430 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0438 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u043d\u0433. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u041f\u041e \u0431\u044b\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0438\u0435\u0440\u043e\u0433\u043b\u0438\u0444\u043e\u0432. \n\n\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Fortinet \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u0434\u043e\u0431\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043a\u0438\u0431\u0435\u0440\u0431\u0430\u043d\u0434\u0438\u0442\u043e\u0432, \u0442.\u043a. \u0445\u043e\u0442\u044c \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u0438\u0441\u043a\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0439 \u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0441\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430, \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet, \u043e\u043d \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0441\u043b\u0435\u043f\u043e\u0439 \u0437\u043e\u043d\u043e\u0439 \u0434\u043b\u044f \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432. \u0410 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u044f\u0442\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u0439, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u041d\u0435\u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0439", "url": "https://t.me/NeKaspersky/2793"}, {"timestamp": "2023-01-26T23:34:59Z", "date_only": false, "value": "2023-01-26T23:34:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/theninjaway1337/1184", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "fdcb7371-4e88-4043-a850-54721fe42d4b", "content": "Novo malware Boldmove \u00e9 utilizado contra dispositivos Fortinet\n\nCibercriminosos\u00a0exploraram uma vulnerabilidade\u00a0FortiOS SSL-VPN\u00a0divulgada recentemente como um zero day em dezembro, visando um governo europeu e um MSP africano com um novo malware personalizado \u2018BOLDMOVE\u2019 para Linux e Windows.\nA vulnerabilidade \u00e9 rastreada como CVE-2022-42475 e foi discretamente corrigida pela Fortinet em novembro. A Fortinet divulgou publicamente a vulnerabilidade em dezembro, pedindo aos clientes que corrigissem seus dispositivos, pois os agentes de amea\u00e7as estavam explorando ativamente a falha.\n\nhttps://boletimsec.com.br/novo-malware-boldmove-e-utilizado-contra-dispositivos-fortinet/", "url": "https://t.me/theninjaway1337/1184"}, {"timestamp": "2023-02-06T04:33:39Z", "date_only": false, "value": "2023-02-06T04:33:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_0npLBP8Ti45AcRUm9jjZ9kBu0EgPg69_8ItffrKM2przvk", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9923d9b2-37a8-4839-9cea-f5c110db01ed"}, {"timestamp": "2023-02-07T06:37:40Z", "date_only": false, "value": "2023-02-07T06:37:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lb8GcUTVNwZuc-MjrLtl3flnEI3cYO1kQI2OfoJiKo_7ozg", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "ea9fcda8-4496-4be7-90f2-98f94c223730"}, {"timestamp": "2023-02-11T18:30:29Z", "date_only": false, "value": "2023-02-11T18:30:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/691", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "21780f43-035f-4e71-8867-78459389c82a", "content": "CVE-2022-42475 : FortiOS SSL-VPN {.<=>.} - Heap-based Buffer Overflow /RCE\n\u00a0https://wzt.ac.cn/2022/12/15/CVE-2022-42475/", "url": "https://t.me/MrVGunz/691"}, {"timestamp": "2023-03-15T05:45:50Z", "date_only": false, "value": "2023-03-15T05:45:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KHxQLvxoR6lvt8ulEqRXRJEb9RPfzKkNBTfQNd1Vcr8NtNY", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "adc693e8-f807-455e-8c63-e8fc062db17a"}, {"timestamp": "2023-03-15T05:46:13Z", "date_only": false, "value": "2023-03-15T05:46:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZsZ0C0OjHd2kRfLQZqJMy2gua3TbjUYjkO7KjsmWoBNvDhw", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a102825e-b795-4a49-b950-e4ae93e64251"}, {"timestamp": "2023-03-15T07:47:19Z", "date_only": false, "value": "2023-03-15T07:47:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/164", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "479f24d6-594c-4e96-9b89-20f04766dee9", "content": "Producing a POC for CVE-2022-42475 (Fortinet RCE)\n\n\ud83d\udc64 by Alain Mowat\n\nLate last year a new remote code execution vulnerability was discovered in Fortinet\u2019s SSLVPN service. Given the relative lack of information surrounding it at the time, researcher decided to attempt to produce a POC for the vulnerability.\n\n\ud83d\udcdd Contents:\n\u25cf Background information\n\u25cf Extracting the firmware\n\u25cf Searching for the patched function(s)\n\u25cf Getting a crash\n\u25cf The real patched bug\n\u25cf Looking back at the original vulnerability\n\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce/", "url": "https://t.me/ptswarm/164"}, {"timestamp": "2023-03-15T20:16:26Z", "date_only": false, "value": "2023-03-15T20:16:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k3q1ReVYjc19CX-W35oTpMuptMCjZSMeyAwV7-yDtZwDwTI", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "b877818f-896c-4a87-ae34-d3d44414a846"}, {"timestamp": "2023-03-16T03:22:56Z", "date_only": false, "value": "2023-03-16T03:22:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/491", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "60a71a09-d88d-4274-824b-250e3d3b30b2", "content": "\ud83d\udd25Producing a POC for CVE-2022-42475 (Fortinet RCE)", "url": "https://t.me/CNArsenal/491"}, {"timestamp": "2023-03-16T07:20:47Z", "date_only": false, "value": "2023-03-16T07:20:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/257", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a17870e5-2543-4d5c-8fd8-af37aca6321f", "content": "CVE-2022-42475 | Zero-Day: Heap overflow in Fortinet's SSLVPN PoC. This PoC has hardcoded valid which change from system to system.\n\nhttps://github.com/scrt/cve-2022-42475", "url": "https://t.me/ckuRED/257"}, {"timestamp": "2023-03-16T07:20:57Z", "date_only": false, "value": "2023-03-16T07:20:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10796", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "ac319fa4-b382-4f1d-9e12-1431752e59d5", "content": "CVE-2022-42475 | Zero-Day: Heap overflow in Fortinet's SSLVPN PoC. This PoC has hardcoded valid which change from system to system.\n\nhttps://github.com/scrt/cve-2022-42475", "url": "https://t.me/cKure/10796"}, {"timestamp": "2023-03-16T11:03:01Z", "date_only": false, "value": "2023-03-16T11:03:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7939", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "1c242a0a-1269-4f86-9be2-6259197ac7da", "content": "#exploit\n1. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n2. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce", "url": "https://t.me/CyberSecurityTechnologies/7939"}, {"timestamp": "2023-03-21T09:03:42Z", "date_only": false, "value": "2023-03-21T09:03:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2614", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "62e5c127-f395-4b68-a33a-2a810bb89323", "content": "CVE-2022-42475:  heap-based buffer overflow vulnerability in FortiOS SSL-VPN, allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests..\n\nPoC\nhttps://github.com/scrt/cve-2022-42475", "url": "https://t.me/dilagrafie/2614"}, {"timestamp": "2023-03-22T23:09:10Z", "date_only": false, "value": "2023-03-22T23:09:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cmk6nfvupdboN4nN8fkA5Hw4cJoXEFx8xsAKeIKMaCLxIeY", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "854ae225-b97c-4d90-ae53-d75e9d6b4b99"}, {"timestamp": "2023-03-23T12:36:17Z", "date_only": false, "value": "2023-03-23T12:36:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab80f623-9311-47db-8713-661271b987c5", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a9eca5e5-cdf4-4099-8ba1-addaf4dc4673"}, {"timestamp": "2023-03-30T00:00:00Z", "date_only": false, "value": "2023-03-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_release_date.data.2.date"}, {"timestamp": "2023-03-30T06:24:00Z", "date_only": false, "value": "2023-03-30T06:24:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-06-06T04:30:05Z", "date_only": false, "value": "2023-06-06T04:30:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/746", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f8c151a6-dc61-4836-a96c-7b5ea6635bce", "content": "Producing a POC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce/", "url": "https://t.me/MrVGunz/746"}, {"timestamp": "2023-06-13T05:39:23Z", "date_only": false, "value": "2023-06-13T05:39:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/176", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "26fb2e3f-4940-48ec-a600-9d29b91d0b57", "content": "Xortigate, or CVE-2023-27997 - The Rumoured RCE That Was\n\n\ud83d\udc64 by Aliz Hammond \n\nWhen Lexfo Security teased a critical pre-authentication RCE bug in FortiGate devices on Saturday 10th, many people speculated on the practical impact of the bug. Would this be a true, sky-is-falling level vulnerability like the recent CVE-2022-42475? Or was it some edge-case hole, requiring some unusual and exotic requisite before any exposure? Others even went further, questioning the legitimacy of the bug itself. Details were scarce and guesswork was rife.\n\nThe watchTowr's team successfully reproduced the CVE-2023-27997 vulnerability and published detailed blogpost with a Python PoC for crashing the target device.\n\n\ud83d\udcdd Contents:\n\u25cf Patch Diffing \n\u25cf Exploitation\n\u25cf Impact\n\u25cf Rapid Response\n\nhttps://labs.watchtowr.com/xortigate-or-cve-2023-27997/", "url": "https://t.me/ptswarm/176"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "7ff40cee-4ce2-4bdc-9517-678c6fabab49"}, {"timestamp": "2023-09-08T02:39:32Z", "date_only": false, "value": "2023-09-08T02:39:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/47d2918b-967f-48aa-8680-8e990fa258b3", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "8133d229-dc53-4984-90b8-8c8f2cc3ed03"}, {"timestamp": "2023-09-08T09:59:44Z", "date_only": false, "value": "2023-09-08T09:59:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3148", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f0d7f1fe-2ae0-4e05-8649-211fac378165", "content": "\u200b\u26a1\ufe0f\u0413\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0437 \u0418\u0440\u0430\u043d\u0430 \u2014 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0432\u0438\u0430\u0446\u0438\u0438.\n\n\ud83d\udcac \u0414\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho \u0438 Fortinet.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u043c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f \u0432 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432 \u0430\u0432\u0438\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0444\u0435\u0440\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho \u0438 Fortinet \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u043d\u0435\u0439.\n\n\u0412 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 , \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c 7-\u0433\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0421\u0428\u0410 (CISA), \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0431\u044e\u0440\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 (\u0424\u0411\u0420) \u0438 \u041a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0443 \u0421\u0428\u0410 (USCYBERCOM) \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f, \u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0437\u0430 \u044d\u0442\u0438\u043c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c, \u043d\u043e \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0438\u0445 \u0441 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u043c \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\nCISA \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u043e \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0432 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e \u0430\u043f\u0440\u0435\u043b\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0430\u0432\u0438\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u044f\u043d\u0432\u0430\u0440\u044f. \u041e\u043d\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 Zoho ManageEngine ServiceDesk Plus \u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Fortinet.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47966 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e (Zoho ManageEngine ServiceDesk Plus), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u0430 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 ManageEngine\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438.\n\n\u00ab\u0414\u0440\u0443\u0433\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-42475 \u0432 FortiOS SSL-VPN \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\u00bb.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430, \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u0446\u0435\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u043e \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 \u0437\u0432\u0435\u043d\u044c\u044f \u0438\u043b\u0438 \u043a\u0430\u043a \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0435\u0442\u0435\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0432 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 NSA \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0442 \u0432\u0441\u0435\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0437\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0433\u0440\u0443\u043f\u043f.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3148"}, {"timestamp": "2023-10-26T22:27:51Z", "date_only": false, "value": "2023-10-26T22:27:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BABATATASASA/5858", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "ea8c4dcf-6725-4eae-bb72-ae3102953463", "content": "Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475 | CISA\nhttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-250a", "url": "https://t.me/BABATATASASA/5858"}, {"timestamp": "2023-12-03T03:47:28Z", "date_only": false, "value": "2023-12-03T03:47:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VsCIkmSd3KI9gUYDIJwJFrYHgmZtPA364Wt0XCxu58juw_M", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "1faed04a-4562-45f6-9d7e-7108fd23ed5d"}, {"timestamp": "2023-12-13T01:19:10.899Z", "date_only": false, "value": "2023-12-13T01:19:10.899325Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-42475", "record": "GSD-2022-42475", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-07T08:26:47Z", "date_only": false, "value": "2024-02-07T08:26:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/67033954-cb9d-4aad-ae23-435b246b016e", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "e96b6d89-7160-4424-9063-27c1067464e3"}, {"timestamp": "2024-02-07T18:43:20Z", "date_only": false, "value": "2024-02-07T18:43:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5388", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "3b033848-c386-45fa-854e-64a3f15326f7", "content": "\u0421\u043b\u0443\u0436\u0431\u0430 \u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (MIVD) \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0410\u0420\u0422 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441\u0435\u0442\u044c \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Fortinet FortiGate (CVE-2022-42475, CVSS: 9,3).\n\n\u0412\u043b\u0438\u044f\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0432\u0435\u0441\u044c\u043c\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u0435\u0442\u044c MIVD \u0431\u044b\u043b\u0430 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438 \u0432 \u043d\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u0435\u043d\u0435\u0435 50 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0421\u0430\u043c\u0430 \u0436\u0435 \u043e\u043d\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043d\u0435\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u041d\u0418\u041e\u041a\u0420 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0434\u0432\u0443\u043c\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430\u043c\u0438. \n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0448\u0442\u0430\u043c\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Coathanger \u2014 \u0442\u0440\u043e\u044f\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RAT), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortigate \u0432 \u0446\u0435\u043b\u044f\u0445 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\nCOATHANGER \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0438 \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e, \u0441\u043a\u0440\u044b\u0432\u0430\u044f\u0441\u044c \u0437\u0430 \u0441\u0447\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0441\u0432\u043e\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435. \n\n\u041d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u044d\u0442\u0438\u043c \u0436\u0435 \u0430\u043a\u0442\u043e\u0440\u043e\u043c \u0442\u0440\u043e\u044f\u043d\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BOLDMOVE, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0430\u0444\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0433\u043e MSP-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u0432 2022 \u0433\u043e\u0434\u0443.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u041a\u0438\u0442\u0430\u044e.\n\n\u0418 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043d\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439, \u0432\u0435\u0434\u044c \u0440\u0430\u0437\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0421\u0428\u0410 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0438\u0441\u0442\u0435\u0440\u0438\u044f \u0441 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u041a\u041d\u0420 \u0432 \u0440\u0430\u0437\u0436\u0438\u0433\u0430\u043d\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0439\u043d\u044b \u0434\u043e\u043b\u0436\u043d\u0430 \u0447\u0435\u043c-\u0442\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\u0412 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043d\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0438 \u042f\u043f\u043e\u043d\u0446\u044b. \u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u043c\u0435\u0441\u0442\u043d\u044b\u0445 \u0421\u041c\u0418, \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u041c\u0418\u0414 \u042f\u043f\u043e\u043d\u0438\u0438, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0439 \u043e\u0431\u043c\u0435\u043d \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438.\n\n\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0435\u0449\u0435 \u0432 2020 \u0433\u043e\u0434\u0443, \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u0435\u0441\u0435\u0447\u044c \u043f\u043e \u043d\u0430\u0432\u043e\u0434\u043a\u0435 \u0421\u0428\u0410. \u041f\u0440\u0438\u0447\u0435\u043c \u0442\u0430 \u0436\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u043e\u0439\u00a0\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u042f\u043f\u043e\u043d\u0438\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0432\u043e\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0440\u0438\u043f\u043e\u043c\u043d\u044f\u0442 \u0432\u0441\u0435 \u0438 \u043d\u0435 \u043f\u043e \u0440\u0430\u0437\u0443. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/5388"}, {"timestamp": "2024-02-08T06:37:50Z", "date_only": false, "value": "2024-02-08T06:37:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/14838", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "357e5919-d270-4be4-bb73-7fb854aaa231", "content": "\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u044b \u043f\u0440\u043e\u043d\u0438\u043a\u043b\u0438 \u0432 \u0441\u0435\u0442\u044c \u043d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0439 \u0430\u0440\u043c\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet\n\n\ud83d\ude31 \u0425\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c FortiOS SSL VPN (CVE-2022-42475), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet FortiGate.\n\n\ud83d\ude08\u0425\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440 COATHANGER, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u0432\u0430\u043b \u0438\u043c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n \n\ud83d\ude21 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0438\u0437 \u041a\u0438\u0442\u0430\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0446\u0435\u043b\u0438 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435.\n\n#Fortinet #CyberEspionage #China @SecLabNews", "url": "https://t.me/SecLabNews/14838"}, {"timestamp": "2024-02-08T17:16:42Z", "date_only": false, "value": "2024-02-08T17:16:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/51502", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "cb352673-3ee3-4642-8e61-fcd9a7937863", "content": "Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks\nhttps://www.securityweek.com/fortinet-apts-exploiting-fortios-vulnerabilities-in-critical-infrastructure-attacks/\n\nFortinet warns that Chinese and other APTs are exploiting CVE-2022-42475 and CVE-2023-27997 in attacks.\nThe post Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks (https://www.securityweek.com/fortinet-apts-exploiting-fortios-vulnerabilities-in-critical-infrastructure-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/51502"}, {"timestamp": "2024-02-19T07:40:19Z", "date_only": false, "value": "2024-02-19T07:40:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1141", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "7d689434-897a-45d2-9106-3cb8a9f6d6ae", "content": "\ud83d\udd0e \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\ude93 \u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 APT, \u043d\u0430 \u0441\u0435\u0439 \u0440\u0430\u0437 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0410\u0432\u0442\u043e\u0440\u044b \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0443 \u0433\u0440\u0443\u043f\u043f\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 VOLTZITE, \u043f\u0435\u0440\u0435\u0441\u0435\u0447\u0435\u043d\u0438\u044f \u0441 Volt Typhoon, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043f\u043e\u0434\u0440\u0443\u0447\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 (LotL) \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0431\u044b\u0442\u043e\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438, \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u0438. \u0414\u043b\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0439 \u043f\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0432\u043e\u0440\u0443\u044e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043a\u0438.\n\n\ud83d\udfe2 \u0412 \u0442\u043e\u0442 \u0436\u0435 \u0445\u043e\u0440 \u0432\u043b\u0438\u043b\u0438\u0441\u044c \u0438 Fortinet, \u0447\u044c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a \u043b\u044e\u0431\u044f\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435. \u0410\u0432\u0442\u043e\u0440\u044b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043e\u0442\u0447\u0451\u0442\u0430 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e APT \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043a\u0430\u0442\u044c \u0437\u0438\u0440\u043e\u0434\u0435\u0438, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (N-day) \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u043a\u0430\u0437\u0432\u044b\u0430\u044e\u0442\u0441\u044f \u0432\u043f\u043e\u043b\u043d\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438. \u041f\u0440\u0438\u043c\u0435\u0440\u044b \u2014 CVE-2022-42475 \u043e\u0442 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0438 CVE-2023-27997 \u043e\u0442 \u0438\u044e\u043d\u044f 2023, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0431\u044b\u043b\u0438 \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435. \ud83d\ude13\n\n\ud83c\udd94 \u041d\u043e\u0432\u043e\u0435 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0444\u0438\u0448\u0438\u043d\u0433\u0435 \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0437 CharmingCypress \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0446\u0435\u043b\u0443\u044e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0435\u0431\u0438\u043d\u0430\u0440\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0431\u043e\u043b\u0435\u0435 \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u043c\u0430\u043d\u0438\u0432\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432. \u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u044c \u0434\u043e\u043a\u043b\u0430\u0434\u0447\u0438\u043a\u043e\u043c \u043d\u0430 \u0432\u0435\u0431\u0438\u043d\u0430\u0440\u0435, \u043f\u0440\u0438\u0447\u0451\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 \u0442\u0435\u043c\u0430 \u0432\u0435\u0431\u0438\u043d\u0430\u0440\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b. \u0414\u0430\u043b\u044c\u0448\u0435 - \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u0430\u044f \u0432\u0435\u0431-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0445 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432. \u0412\u0441\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u2014 \u0441 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430, \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436.\n\n\ud83d\udd3a\u0410\u043d\u0430\u043b\u0438\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u043c Darkme, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0437\u0430\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 Windows Smartscreen. \u0426\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u0431\u0438\u0440\u0436\u0435\u0432\u044b\u0435 \u0442\u0440\u0435\u0439\u0434\u0435\u0440\u044b.\n\n\ud83d\udcbc \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Azure \u2014 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043d\u0435\u043b\u0435\u0433\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0435\u0439 Ivanti, \u0435\u0451 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udd13 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83d\udfe6 \u041a\u0441\u0442\u0430\u0442\u0438, \u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u0445. \u0412 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0432\u0445\u043e\u0434\u0438\u0442 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u044f\u0442\u043d\u043e, \u0437\u0430\u0431\u043b\u0430\u0433\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0421\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b Windows Production PCA 2011, Microsoft UEFI CA 2011 \u0438 KEK CA 2011, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0435\u0436\u0430\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Secure Boot \u0438 \u0438\u0441\u0442\u0435\u043a\u0443\u0442 \u0432 2026 \u0433\u043e\u0434\u0443, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b. \u041e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0435 DBX \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430\u0447\u043d\u0443\u0442 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043a\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441 \u0430\u043f\u0440\u0435\u043b\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435\u043d\u0430\u0440\u043e\u043a\u043e\u043c \u043d\u0435 \u043e\u043a\u0438\u0440\u043f\u0438\u0447\u0438\u0442\u044c. \u041d\u043e \u0443\u0436\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0441\u043b\u0435\u0434\u0443\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0438\u0437 \u0431\u043b\u043e\u0433\u0430 Microsoft.\n\n\u270f\ufe0f  \u041d\u0435 APT, \u043d\u043e \u0442\u043e\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0412\u041f\u041e Glupteba \u2014 \u0435\u0449\u0451 \u043e\u0434\u0438\u043d \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0442\u0440\u043e\u044f\u043d \u043e\u0431\u0437\u0430\u0432\u0451\u043b\u0441\u044f UEFI-\u0431\u0443\u0442\u043a\u0438\u0442\u043e\u043c. \ud83d\ude1e\n\n\ud83d\udc6e\u200d\u2642\ufe0f \u041a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043b\u0430\u043d\u0442\u043b\u0438\u0432\u044b\u0435 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u043b\u0438 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u043e\u0442\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u043b\u0438\u0446 \u0436\u0435\u0440\u0442\u0432 \u043d\u0430 iOS \u0438 Android, \u043f\u0440\u0438\u0442\u0432\u043e\u0440\u044f\u044f\u0441\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u043c\u0435\u0441\u0442\u043d\u044b\u0445 \u0433\u043e\u0441\u0443\u0441\u043b\u0443\u0433, \u0431\u0430\u043d\u043a\u043e\u0432 \u0438 \u043f\u0435\u043d\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u043e\u043d\u0434\u043e\u0432. \u0416\u0435\u0440\u0442\u0432\u044b, \u0441\u043a\u0430\u0447\u0430\u0432\u0448\u0438\u0435 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u0441\u0451 \u044d\u0442\u043e \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u043d\u043e. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u0431\u0430\u043d\u043a\u0430\u0445 \u043f\u0440\u0438 \u043a\u0440\u0430\u0436\u0435 \u0434\u0435\u043d\u0435\u0433. \u0412\u043e\u0440\u043e\u0432\u0441\u0442\u0432\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (FaceID \u0438 \u043f\u0440\u043e\u0447.) \u043d\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442. \u0410\u0442\u0430\u043a\u0430 Goldfactory \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0410\u0437\u0438\u0438, \u043d\u043e \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445.\n\n\ud83d\udcf8 \u042f\u0432\u043d\u043e \u043a 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b \u043f\u0440\u0438\u043f\u0430\u0441\u0451\u043d \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0445\u0435\u043c pig butchering, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u044b\u043c\u0430\u043d\u0438\u0442\u044c \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b \u0434\u0435\u043d\u0435\u0433 \u043f\u043e\u0441\u043b\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u043e\u043c\u0430\u043d\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c \u0430\u0437\u0431\u0443\u0447\u043d\u044b\u0439, \u043d\u043e \u0435\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u043e \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0412\u0442\u043e\u0440\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430 \u043c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0438 \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u0430\u043c \u0441\u0445\u0435\u043c\u044b: \u043e\u0447\u0435\u043d\u044c \u0447\u0430\u0441\u0442\u043e \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u044e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b, \u0430 \u043d\u0435 \u0444\u0438\u0430\u0442\u043d\u044b\u0435 \u0434\u0435\u043d\u044c\u0433\u0438.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1141"}, {"timestamp": "2024-02-22T11:14:58Z", "date_only": false, "value": "2024-02-22T11:14:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/260b243a-47a7-46fe-9442-1ad87d9ca940", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "3258f083-f39b-4531-b59a-6eb43f6bced7"}, {"timestamp": "2024-03-19T16:52:55Z", "date_only": false, "value": "2024-03-19T16:52:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/VENOMOUS7t1/2117", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a84e14a5-7d43-48ee-842d-102c0a276378", "content": "\ud83d\udcdd Producing a POC for CVE-2022-42475 (Fortinet RCE)\n\nJoin us: @DarkWeb", "url": "https://t.me/VENOMOUS7t1/2117"}, {"timestamp": "2024-06-12T10:28:48Z", "date_only": false, "value": "2024-06-12T10:28:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MrVGunz/1171", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "04d4b91d-9675-482a-aff8-ad308e18c233", "content": "\u062e\u0628\u0631 : \ud83d\uddd3\u0647\u06a9\u0631\u200c\u0647\u0627\u06cc \u0686\u06cc\u0646\u06cc \u062d\u062f\u0648\u062f 20000 \u0633\u06cc\u0633\u062a\u0645 Fortigate \u0631\u0627 \u0645\u0648\u0631\u062f \u0646\u0641\u0648\u0630 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646\u062f!\n\n\u0633\u0631\u0648\u06cc\u0633 \u0627\u0645\u0646\u06cc\u062a \u0645\u0644\u06cc \u0647\u0644\u0646\u062f (MIVD) \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u062d\u0645\u0644\u0627\u062a \u0627\u062e\u06cc\u0631 \u0686\u06cc\u0646\u06cc\u200c\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u062a\u0631 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0642\u0628\u0644\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u0647\u06a9\u0631\u200e\u0647\u0627\u06cc \u0686\u06cc\u0646\u06cc \u062f\u0631 \u0628\u06cc\u0646 \u0633\u0627\u0644\u200c\u0647\u0627\u06cc 2022 \u0648 2023 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc RCE \u0628\u0627 \u0634\u0645\u0627\u0631\u0647  CVE-2022-42475 \u0631\u0627  \u0628\u0631 \u0631\u0648\u06cc \u0634\u0631\u06a9\u062a\u200c\u0647\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u062f\u0631\u062d\u0627\u0644\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc 2 \u0645\u0627\u0647 \u0628\u0639\u062f \u0627\u0632 \u0634\u0631\u0648\u0639 \u062d\u0645\u0644\u0627\u062a \u0686\u06cc\u0646\u06cc\u200c\u0647\u0627 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u062a\u0627\u0631\u06cc\u062e \u0627\u0646\u062a\u0634\u0627\u0631 \u062e\u0628\u0631: 1403 - 22 \u062e\u0631\u062f\u0627\u062f\n\u0645\u0646\u0628\u0639 \u062e\u0628\u0631: \n\ud83d\udd17Bleeping Computer\n\nNews: \ud83d\uddd3 Chinese Hackers Breached Around 20,000 Fortigate Systems!\n\nThe Dutch National Security Service (MIVD) announced that recent Chinese attacks are significantly more extensive than previous ones. Between 2022 and 2023, Chinese hackers exploited the RCE vulnerability CVE-2022-42475 on company systems. Notably, this vulnerability was disclosed two months after the Chinese attacks began.\n\nDate of News Release: June 11, 2024  \nSource:  \n\ud83d\udd17Bleeping Computer", "url": "https://t.me/MrVGunz/1171"}, {"timestamp": "2024-06-12T21:31:55Z", "date_only": false, "value": "2024-06-12T21:31:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/theninjaway1337/1645", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "78d506b0-6ad6-4b01-b400-8da5f4385eac", "content": "China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally\n\nState-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security flaw between 2022 and 2023, indicating that the operation had a broader impact than previously known.\n\n\"The state actor behind this campaign was already aware of this vulnerability in FortiGate systems at least two months before Fortinet disclosed the vulnerability,\" the Dutch National Cyber Security Centre (NCSC) said in a new bulletin. \"During this so-called zero-day period, the actor alone infected 14,000 devices.\"\n\nThe campaign targeted dozens of Western governments, international organizations, and a large number of companies within the defense industry. The names of the entities were not disclosed.\n\nThe findings build on an earlier advisory from February 2024, which found that the attackers had breached a computer network used by the Dutch armed forces by exploiting CVE-2022-42475 (CVSS score: 9.8), which allows for remote code execution.\n\nhttps://thehackernews.com/2024/06/china-backed-hackers-exploit-fortinet.html", "url": "https://t.me/theninjaway1337/1645"}, {"timestamp": "2024-06-13T15:10:30Z", "date_only": false, "value": "2024-06-13T15:10:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5849", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f5feae3f-0b46-45f1-b129-f6cc5537b457", "content": "\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0441\u0442\u0440\u0430\u043d\u044b \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u043a \u0430\u0442\u0430\u043a\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0437\u043c\u0430\u0445\u043e\u043c, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435.\n\n\u041a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043b\u0438\u0446\u0430, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2022-42475 (CVSS: 9,8) \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 000 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Fortinet FortiGate \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 COATHANGER \u0438 \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0436\u0435\u0440\u0442\u0432 \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0430\u0441\u044c \u043a 0-day, \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b\u0438\u0441\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u0417\u0430 \u0442.\u043d. \u043f\u0435\u0440\u0438\u043e\u0434 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043e\u0434\u0438\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u043a\u0442\u0435\u0440 \u0437\u0430\u0440\u0430\u0437\u0438\u043b 14 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 6 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0438 \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 (!), \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u0438\u0445 \u0432\u043e\u0435\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435, \u0432\u043e\u043e\u0431\u0449\u0435 \u0431\u0435\u0437 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432.", "url": "https://t.me/true_secator/5849"}, {"timestamp": "2024-06-15T00:03:27Z", "date_only": false, "value": "2024-06-15T00:03:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/darkcommunityofficial/996", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "581e79e2-c3d1-4c59-ac47-c8e165f1ed75", "content": "\ud83d\udc6e\u200d\u2640\ufe0f Chinese hackers hacked 20 thousand FortiGate systems | \u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0433. \u041d\u0430 \u0441\u0432\u044f\u0437\u0438 \u042d\u043b\u043b\u0438\u043e\u0442.\n\nDutch military intelligence has warned that the fallout from Chinese hackers is \"much larger\" than initially thought. Between 2022 and 2023, hackers compromised 20,000 Fortinet FortiGate systems worldwide by exploiting a critical vulnerability.\n\n\u2014 In February 2024, MIVD, together with the Dutch General Intelligence and Security Service (AIVD), published a report according to which Chinese hackers exploited a critical RCE vulnerability in FortiOS/FortiProxy ( CVE-2022-42475 ) for several months in 2022 and 2023 .\n\n\u2757\ufe0f The narrow-eyed still have access to most devices, since Coathanger is extremely difficult to detect, because the malware intercepts system calls so as not to reveal its presence.\n\n#News #RCE #Forti #CVE", "url": "https://t.me/darkcommunityofficial/996"}, {"timestamp": "2024-08-03T13:10:40.927Z", "date_only": false, "value": "2024-08-03T13:10:40.927Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-42475", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:39:42.904Z", "date_only": false, "value": "2024-08-15T17:39:42.904+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2293", "record": "WID-SEC-W-2022-2293", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:59:55Z", "date_only": false, "value": "2024-08-16T08:59:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Rootsec_2/2414", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "3637ad90-04c9-4493-a76c-fb0be9cf7c86", "content": "#exploit\n#Analytics\nTop 10 Vulnerabilities of 2023:\n\n1. CVE-2023-34362: MOVEit Vulnerability\nhttps://t.me/CyberSecurityTechnologies/8493\n2. CVE-2023-23397: MS Outlook PE\nhttps://t.me/CyberSecurityTechnologies/8677\n3. CVE-2023-43641: 1-Click RCE on GNOME\nhttps://t.me/CyberSecurityTechnologies/9175\n4. CVE-2023-28252: Windows CLFS PE\nhttps://t.me/CyberSecurityTechnologies/8595\n5. CVE-2023-2868: Barracuda ESG CI\nhttps://t.me/CyberSecurityTechnologies/8627\n6. CVE-2023-26360: Adobe ColdFusion\nhttps://t.me/CyberSecurityTechnologies/9702\n7. CVE-2023-4966: Citrix Bleed\nhttps://t.me/CyberSecurityTechnologies/9257\n8. CVE-2023-22952: SugarCRM RCE\nhttps://t.me/CyberSecurityTechnologies/7907\n9. CVE-2023-24880: Win Smart Screen Bypass\nhttps://www.vicarius.io/vsociety/posts/windows-smartscreen-security-feature-bypass-cve-2023-24880\n10. CVE-2022-42475:\nFortiOS heap-based buffer overflow in sslvpnd\nhttps://bishopfox.com/blog/exploit-cve-2022-42475\n]-> https://github.com/scrt/cve-2022-42475", "url": "https://t.me/Rootsec_2/2414"}, {"timestamp": "2024-10-11T02:08:15Z", "date_only": false, "value": "2024-10-11T02:08:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/9712", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "1675f333-912e-4e90-96a0-ac865000e3a4", "content": "#exploit\n#Analytics\nTop 10 Vulnerabilities of 2023:\n\n1. CVE-2023-34362: MOVEit Vulnerability\n2. CVE-2023-23397: MS Outlook PE\n3. CVE-2023-43641: 1-Click RCE on GNOME\n4. CVE-2023-28252: Windows CLFS PE\n5. CVE-2023-2868: Barracuda ESG CI\n6. CVE-2023-26360: Adobe ColdFusion\n7. CVE-2023-4966: Citrix Bleed\n8. CVE-2023-22952: SugarCRM RCE\n9. CVE-2023-24880: Win Smart Screen Bypass\n10. CVE-2022-42475: FortiOS heap-based BoF in sslvpnd\n]-> https://github.com/scrt/cve-2022-42475", "url": "https://t.me/CyberSecurityTechnologies/9712"}, {"timestamp": "2024-10-23T13:26:56.926Z", "date_only": false, "value": "2024-10-23T13:26:56.926267Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-42475", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-23T13:26:56.926Z", "date_only": false, "value": "2024-10-23T13:26:56.926267Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-42475", "record": "FKIE_CVE-2022-42475", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-24T20:33:36.483Z", "date_only": false, "value": "2024-12-24T20:33:36.483820Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971749", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "91554847-f056-494f-a96c-2d52566ef2f6", "url": "https://feedsin.space/feed/CISAKevBot/items/2971749"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-23T02:10:39Z", "date_only": false, "value": "2025-02-23T02:10:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "ec78815e-4735-46d4-877d-2833f25b81f2"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-03-11T20:37:58.600Z", "date_only": false, "value": "2025-03-11T20:37:58.600981Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9d1476d4-8de1-442e-addf-08176cc5fd93", "url": "https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-04-11T15:55:00Z", "date_only": false, "value": "2025-04-11T15:55:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/04/fortinet-warns-attackers-retain.html", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "5fe0e62b-d7fc-45f3-9978-5a8345d9bd8c", "url": "https://thehackernews.com/2025/04/fortinet-warns-attackers-retain.html"}, {"timestamp": "2025-04-11T19:59:10Z", "date_only": false, "value": "2025-04-11T19:59:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6654", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "c0375e2b-6353-45c8-9838-0624923d9ef6", "content": "\u26a1 Even patching won't save you.\n\nFortinet confirms attackers kept read-only access to FortiGate devices after patching old flaws (CVE-2022-42475, CVE-2023-27997, CVE-2024-21762) via hidden symlink in SSL-VPN.\n\nFull details \ud83d\udc49 https://thehackernews.com/2025/04/fortinet-warns-attackers-retain.html", "url": "https://t.me/thehackernews/6654"}, {"timestamp": "2025-04-11T21:56:56Z", "date_only": false, "value": "2025-04-11T21:56:56.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dtIe1Va1bhf-Dx_dB3ROG2j7z94vgRQ-g5x8umtx3v695g", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "8453538c-3559-4731-9e69-7eae289eccab"}, {"timestamp": "2025-04-12T02:01:18Z", "date_only": false, "value": "2025-04-12T02:01:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3012", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "eaf9aa8e-5761-4360-a58f-dae7ae706ed0", "content": "\u26a1\ufe0fFortinet confirms attackers kept read-only access to FortiGate devices after patching old flaws (CVE-2022-42475, CVE-2023-27997, CVE-2024-21762) via hidden symlink in SSL-VPN.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3012"}, {"timestamp": "2025-04-12T09:24:46.464Z", "date_only": false, "value": "2025-04-12T09:24:46.464250Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lmm7lumup22a", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "240a77ae-ee98-4401-9b4c-9a86dd2788a3", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lmm7lumup22a"}, {"timestamp": "2025-04-13T12:51:45.886Z", "date_only": false, "value": "2025-04-13T12:51:45.886948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lmp3mxo5nc2f", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "7ecfacaa-36e1-4432-a348-7c62b4999a0d", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lmp3mxo5nc2f"}, {"timestamp": "2025-04-13T13:44:46.807Z", "date_only": false, "value": "2025-04-13T13:44:46.807768Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6loq4hk2q", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "af95d90c-c3d5-4739-927e-c4a25d64c88f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6loq4hk2q"}, {"timestamp": "2025-04-13T13:44:47.909Z", "date_only": false, "value": "2025-04-13T13:44:47.909264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6loqga22q", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "c1c76d2e-433e-4d1e-acf6-f6c96cad7d22", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6loqga22q"}, {"timestamp": "2025-04-13T13:52:13.339Z", "date_only": false, "value": "2025-04-13T13:52:13.339640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6yz7tys2q", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "74617352-a722-4b47-82ce-f4788c2938e7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6yz7tys2q"}, {"timestamp": "2025-04-14T06:02:20.196Z", "date_only": false, "value": "2025-04-14T06:02:20.196974Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lmqv7qzhmb2x", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "ef659e50-5ade-4b51-8a09-57de13cd280f", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lmqv7qzhmb2x"}, {"timestamp": "2025-04-14T18:19:02Z", "date_only": false, "value": "2025-04-14T18:19:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1697", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9f84a729-68d9-44d7-8813-d73911e95b0b", "content": "\ud83d\udc40 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a APT GOFFEE \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u043e\u0432\u044b\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442 PowerModul, \u0430 \u0437\u0430\u0442\u0435\u043c \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 Mythic \u043f\u0440\u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u043e \u0441\u0435\u0442\u0438.\n\nAPT MirrorFace \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Windows Sandbox. \u041e\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u0441\u0432\u043e\u0451 \u0412\u041f\u041e (Anel). \u0412 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 Defender, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0444\u0430\u0439\u043b\u044b \u0445\u043e\u0441\u0442\u0430, \u0431\u0443\u0444\u0435\u0440 \u043e\u0431\u043c\u0435\u043d\u0430, \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435. \u0422\u0435\u0445\u043d\u0438\u043a\u0443, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435.\n\n\u041d\u043e\u0432\u044b\u0435 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 APT ToddyCat. \n\nFortinet \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 FortiGate \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 read only \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430. \u0422\u0435\u0445\u043d\u0438\u043a\u0430, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d SSL-VPN \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c CVE-2022-42475, CVE-2023-27997, CVE-2024-21762 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0434\u0440\u0443\u0433\u0438\u0435 CVE.\n\nAPT Sidecopy \u0441\u043c\u0435\u043d\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0412\u041f\u041e \u0432 \u043f\u0430\u043a\u0435\u0442\u0430 MSI \u0432\u043c\u0435\u0441\u0442\u043e \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u043e\u0433\u043e HTA.\n\n\u0420\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a APT-Q-2/Kimsuky \u043d\u0430 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041a\u0440\u0430\u0442\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0418\u0411 \u0437\u0430 Q4/2024.\n\n\u0413\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0412\u041f\u041e \u0438 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u0438 HelloKitty ransomware.\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u0432\u0441\u0435\u0433\u043e 4 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress OttoKit/Suretriggers \u0435\u0451 \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f LLM \u0432 \u0441\u043f\u0430\u043c\u0435 \u0438 SEO: Akirabot \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 API OpenAI \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u043e\u0440\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0439 \u0432 \u0447\u0430\u0442 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0438\u043b\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u043f\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0432\u0430\u0439\u0431\u043a\u043e\u0434\u0438\u043d\u0433\u0430: 20% \u0418\u0418-\u043a\u043e\u0434\u0430 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0436\u0438\u0434\u0430\u044e\u0442 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a slopsquatting \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0443\u0434\u0443\u0442 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 typosquatting.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a password spraying \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u2014 \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u043e\u043c \u043b\u044e\u0431\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437 MFA.\n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1697"}, {"timestamp": "2025-04-15T07:59:58.179Z", "date_only": false, "value": "2025-04-15T07:59:58.179689Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-672871d8-0239cb22accdcf12", "record": "cve-2022-42475", "field": "creation_timestamp", "uuid": "0ff77807-452f-4bbd-b7c3-128a5e82d97e", "url": "https://poliverso.org/objects/0477a01e-672871d8-0239cb22accdcf12"}, {"timestamp": "2025-04-17T03:11:57.893Z", "date_only": false, "value": "2025-04-17T03:11:57.893429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmy53uo6vs2l", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f37f0daf-0d12-49cc-aecf-b07e55c76875", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmy53uo6vs2l"}, {"timestamp": "2025-04-25T20:20:37Z", "date_only": false, "value": "2025-04-25T20:20:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ics_cert/1132", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "981ac866-3f84-4a12-a5d7-6666affc06a9", "content": "\u0641\u0648\u0631\u062a\u06cc\u0646\u062a \u0647\u0634\u062f\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 FortiGate \u0631\u0627 \u067e\u0633 \u0627\u0632 \u0648\u0635\u0644\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 SSL-VPN Symlink Exploit \u062d\u0641\u0638 \u0645\u06cc\u06a9\u0646\u0646\u062f.\n\n\u0641\u0648\u0631\u062a\u06cc\u200c\u0646\u062a \u0641\u0627\u0634 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0639\u0648\u0627\u0645\u0644 \u062a\u0647\u062f\u06cc\u062f \u0631\u0627\u0647\u06cc \u0628\u0631\u0627\u06cc \u062d\u0641\u0638 \u062f\u0633\u062a\u0631\u0633\u06cc \u0641\u0642\u0637 \u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0641\u0648\u0631\u062a\u06cc\u200c\u06af\u06cc\u062a \u062d\u062a\u06cc \u067e\u0633 \u0627\u0632 \u0627\u0635\u0644\u0627\u062d \u0648\u0635\u0644\u0647\u200c\u0628\u0646\u062f\u06cc \u0628\u0631\u062f\u0627\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u060c \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u06af\u0645\u0627\u0646 \u0645\u06cc\u200c\u0631\u0648\u062f \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647\u060c \u0627\u0632 \u062c\u0645\u0644\u0647\u060c \u0627\u0645\u0627 \u0646\u0647 \u0645\u062d\u062f\u0648\u062f \u0628\u0647\u060c CVE-2022-42475 \u060c CVE-2023-27997 \u0648 CVE-2024-21762 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f .\n\n\u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a \u0634\u0628\u06a9\u0647 \u062f\u0631 \u0645\u0634\u0627\u0648\u0631\u0647 \u0627\u06cc \u06a9\u0647 \u0631\u0648\u0632 \u067e\u0646\u062c\u0634\u0646\u0628\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f \u06af\u0641\u062a : \u00ab\u06cc\u06a9 \u0639\u0627\u0645\u0644 \u062a\u0647\u062f\u06cc\u062f \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0641\u0642\u0637 \u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0641\u0648\u0631\u062a\u06cc \u06af\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f. \"\u0627\u06cc\u0646 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u067e\u06cc\u0648\u0646\u062f \u0646\u0645\u0627\u062f\u06cc\u0646 \u06a9\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0648 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0631\u06cc\u0634\u0647 \u0631\u0627 \u062f\u0631 \u067e\u0648\u0634\u0647 \u0627\u06cc \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0632\u0628\u0627\u0646 \u0628\u0631\u0627\u06cc SSL-VPN \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0647 \u0647\u0645 \u0645\u062a\u0635\u0644 \u0645\u06cc \u06a9\u0646\u062f.\"\n\n\u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc\n\u0641\u0648\u0631\u062a\u06cc \u0646\u062a \u06af\u0641\u062a \u06a9\u0647 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0646\u062c\u0627\u0645 \u0634\u062f \u0648 \u0645\u0648\u0641\u0642 \u0634\u062f \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0641\u0631\u0627\u0631 \u06a9\u0646\u062f \u0648 \u0628\u0627\u0639\u062b \u0634\u062f \u06a9\u0647 \u067e\u06cc\u0648\u0646\u062f \u0646\u0645\u0627\u062f\u06cc\u0646 (\u0645\u0639\u0631\u0648\u0641 \u0628\u0647 symlink) \u062d\u062a\u06cc \u067e\u0633 \u0627\u0632 \u0628\u0633\u062a\u0647 \u0634\u062f\u0646 \u062d\u0641\u0631\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0633\u0626\u0648\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0628\u0627\u0642\u06cc \u0628\u0645\u0627\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0628\u0647 \u0646\u0648\u0628\u0647 \u062e\u0648\u062f\u060c \u0639\u0627\u0645\u0644\u0627\u0646 \u062a\u0647\u062f\u06cc\u062f \u0631\u0627 \u0642\u0627\u062f\u0631 \u0645\u06cc\u200c\u0633\u0627\u0632\u062f \u062a\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0641\u0642\u0637 \u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u062f\u0633\u062a\u06af\u0627\u0647\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a\u060c \u0631\u0627 \u062d\u0641\u0638 \u06a9\u0646\u0646\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u06cc \u06a9\u0647 \u0647\u0631\u06af\u0632 SSL-VPN \u0631\u0627 \u0641\u0639\u0627\u0644 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0646\u062f \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc \u06af\u06cc\u0631\u0646\u062f.\n\n\u0645\u0634\u062e\u0635 \u0646\u06cc\u0633\u062a \u0686\u0647 \u06a9\u0633\u06cc \u067e\u0634\u062a \u0627\u06cc\u0646 \u0641\u0639\u0627\u0644\u06cc\u062a \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0641\u0648\u0631\u062a\u06cc \u0646\u062a \u06af\u0641\u062a \u062a\u062d\u0642\u06cc\u0642\u0627\u062a\u0634 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0647\u062f\u0641 \u0622\u0646 \u0645\u0646\u0637\u0642\u0647 \u06cc\u0627 \u0635\u0646\u0639\u062a \u062e\u0627\u0635\u06cc \u0646\u0628\u0648\u062f\u0647 \u0627\u0633\u062a. \u0647\u0645\u0686\u0646\u06cc\u0646 \u06af\u0641\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u06cc \u06a9\u0647 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06a9\u0627\u0647\u0634 \u0628\u06cc\u0634\u062a\u0631 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062a\u06a9\u0631\u0627\u0631 \u0686\u0646\u06cc\u0646 \u0645\u0634\u06a9\u0644\u0627\u062a\u06cc\u060c \u06cc\u06a9 \u0633\u0631\u06cc \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc FortiOS \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a -\n\nFortiOS 7.4\u060c 7.2\u060c 7.0 \u0648 6.4 - \u0633\u06cc\u0645\u0644\u06cc\u0646\u06a9 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062e\u0631\u0628 \u0639\u0644\u0627\u0645\u062a \u06af\u0630\u0627\u0631\u06cc \u0634\u062f \u062a\u0627 \u0628\u0647 \u0637\u0648\u0631 \u062e\u0648\u062f\u06a9\u0627\u0631 \u062a\u0648\u0633\u0637 \u0645\u0648\u062a\u0648\u0631 \u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633 \u062d\u0630\u0641 \u0634\u0648\u062f.\nFortiOS 7.6.2\u060c 7.4.7\u060c 7.2.11\u060c 7.0.17\u060c \u0648 6.4.16 - \u067e\u06cc\u0648\u0646\u062f \u0646\u0645\u0627\u062f\u06cc\u0646 \u062d\u0630\u0641 \u0634\u062f \u0648 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc SSL-VPN \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0631\u0627\u0626\u0647 \u0686\u0646\u06cc\u0646 \u067e\u06cc\u0648\u0646\u062f\u0647\u0627\u06cc \u0646\u0645\u0627\u062f\u06cc\u0646 \u0645\u062e\u0631\u0628 \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u0627\u0633\u062a.\n\u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 7.6.2\u060c 7.4.7\u060c 7.2.11\u060c 7.0.17 \u06cc\u0627 6.4.16 FortiOS \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f\u060c \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f\u060c \u0648 \u0647\u0645\u0647 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u0646\u062f \u0648 \u0645\u0631\u0627\u062d\u0644 \u0628\u0627\u0632\u06cc\u0627\u0628\u06cc \u0645\u0646\u0627\u0633\u0628 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f .\n\n\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 (CISA) \u062a\u0648\u0635\u06cc\u0647\u200c\u0627\u06cc \u0627\u0632 \u062e\u0648\u062f \u0635\u0627\u062f\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u062f \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0627\u0641\u0634\u0627 \u0634\u062f\u0647 \u0631\u0627 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f \u0648 \u062a\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0648\u0635\u0644\u0647\u200c\u0647\u0627 \u0627\u0639\u0645\u0627\u0644 \u0634\u0648\u0646\u062f\u060c \u0639\u0645\u0644\u06a9\u0631\u062f SSL-VPN \u0631\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0646\u0646\u062f. \u062a\u06cc\u0645 \u0648\u0627\u06a9\u0646\u0634 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647 \u0627\u06cc \u0641\u0631\u0627\u0646\u0633\u0647 (CERT-FR)\u060c \u062f\u0631 \u0628\u0648\u0644\u062a\u0646 \u0645\u0634\u0627\u0628\u0647\u06cc\u060c \u06af\u0641\u062a \u06a9\u0647 \u0627\u0632 \u0645\u0635\u0627\u0644\u062d\u0647 \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0647 \u0627\u0648\u0627\u06cc\u0644 \u0633\u0627\u0644 2023 \u0628\u0627\u0632\u0645\u06cc \u06af\u0631\u062f\u062f\u060c \u0622\u06af\u0627\u0647 \u0627\u0633\u062a.\n\n\n\u0628\u0646\u062c\u0627\u0645\u06cc\u0646 \u0647\u0631\u06cc\u0633\u060c \u0645\u062f\u06cc\u0631\u0639\u0627\u0645\u0644 watchTowr \u062f\u0631 \u0628\u06cc\u0627\u0646\u06cc\u0647\u200c\u0627\u06cc  \u06af\u0641\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u062d\u0627\u062f\u062b\u0647 \u0628\u0647 \u062f\u0648 \u062f\u0644\u06cc\u0644 \u0645\u0647\u0645 \u0628\u0627\u0639\u062b \u0646\u06af\u0631\u0627\u0646\u06cc \u0627\u0633\u062a.\n\n\u0647\u0631\u06cc\u0633 \u06af\u0641\u062a: \u00ab\u0627\u0648\u0644\u060c \u062f\u0631 \u0637\u0628\u06cc\u0639\u062a \u0627\u0633\u062a\u062b\u0645\u0627\u0631 \u0628\u0633\u06cc\u0627\u0631 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0627\u0632 \u0622\u0646 \u0686\u06cc\u0632\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u0646\u062f. \u0645\u0647\u0645\u062a\u0631 \u0627\u0632 \u0622\u0646\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0647 \u0648\u0636\u0648\u062d \u0648 \u0639\u0645\u06cc\u0642\u0627\u064b \u0627\u0632 \u0627\u06cc\u0646 \u0648\u0627\u0642\u0639\u06cc\u062a \u0622\u06af\u0627\u0647 \u0647\u0633\u062a\u0646\u062f.\u00bb\n\n\u062f\u0648\u0645 \u0648 \u0648\u062d\u0634\u062a\u0646\u0627\u06a9\u200c\u062a\u0631\u060c \u0628\u0627\u0631\u0647\u0627 \u062f\u06cc\u062f\u0647\u200c\u0627\u06cc\u0645 \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0633\u0631\u06cc\u0639\u060c \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627 \u0648 \u062f\u0631\u0647\u0627\u06cc \u067e\u0634\u062a\u06cc \u0631\u0627 \u0628\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0632\u0646\u062f\u0647 \u0645\u0627\u0646\u062f\u0646 \u0627\u0632 \u0641\u0631\u0622\u06cc\u0646\u062f\u0647\u0627\u06cc \u0648\u0635\u0644\u0647\u200c\u0633\u0627\u0632\u06cc\u060c \u0627\u0631\u062a\u0642\u0627 \u0648 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u06a9\u0627\u0631\u062e\u0627\u0646\u0647\u200c\u0627\u06cc \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u0627\u06cc\u0646 \u0645\u0648\u0642\u0639\u06cc\u062a\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u062d\u0641\u0638 \u067e\u0627\u06cc\u062f\u0627\u0631\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u062a\u06a9\u06cc\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\u00bb\n\n\u0647\u0631\u06cc\u0633 \u0647\u0645\u0686\u0646\u06cc\u0646 \u06af\u0641\u062a \u06a9\u0647 \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u062f\u0631\u0628\u200c\u0647\u0627\u06cc \u067e\u0634\u062a\u06cc \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u067e\u0627\u06cc\u06af\u0627\u0647 \u0645\u0634\u062a\u0631\u06cc WatchTowr \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0648 \u0622\u0646\u0647\u0627 \"\u062a\u0623\u062b\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u06a9\u0647 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0628\u0647 \u0648\u0636\u0648\u062d \u0622\u0646 \u0631\u0627 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062d\u06cc\u0627\u062a\u06cc \u0645\u06cc\u200c\u0646\u0627\u0645\u0646\u062f.\"\n\n\u0628\u0646\u06cc\u0627\u062f Shadowserver \u0641\u0627\u0634 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 16620 \u062f\u0633\u062a\u06af\u0627\u0647 Fortinet \u062f\u0631 \u0645\u0639\u0631\u0636 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0627 \u062f\u0631\u067e\u0634\u062a\u06cc \u067e\u06cc\u0648\u0646\u062f \u0646\u0645\u0627\u062f\u06cc\u0646 \u06a9\u0647 \u0628\u0647 \u0639\u0648\u0627\u0645\u0644 \u062a\u0647\u062f\u06cc\u062f \u062f\u0633\u062a\u0631\u0633\u06cc \u0641\u0642\u0637 \u062e\u0648\u0627\u0646\u062f\u0646\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0642\u0628\u0644\u0627\u064b \u0646\u0642\u0636 \u0634\u062f\u0647 \u0627\u0645\u0627 \u06a9\u0627\u0645\u0644\u0627\u064b \u0648\u0635\u0644\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0645\u06cc\u200c\u062f\u0647\u062f \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u0627\u0632 15 \u0622\u0648\u0631\u06cc\u0644 2025\u060c 7886 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u062f\u0631 \u0622\u0633\u06cc\u0627 \u0648\u0627\u0642\u0639 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0627\u0631\u0648\u067e\u0627 (3766)\u060c \u0622\u0645\u0631\u06cc\u06a9\u0627\u06cc \u0634\u0645\u0627\u0644\u06cc (3217)\u060c \u0622\u0645\u0631\u06cc\u06a9\u0627\u06cc \u062c\u0646\u0648\u0628\u06cc (1054)\u060c \u0622\u0641\u0631\u06cc\u0642\u0627 (399) \u0648 \u0627\u0642\u06cc\u0627\u0646\u0648\u0633\u06cc\u0647 (298).\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR", "url": "https://t.me/ics_cert/1132"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-07-28T16:05:40.391Z", "date_only": false, "value": "2025-07-28T16:05:40.391406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxvbtph62d", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "6aeb28ce-a402-48cc-a5b2-db8d9b968241", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxvbtph62d"}, {"timestamp": "2025-08-09T13:26:57Z", "date_only": false, "value": "2025-08-09T13:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9eb63eb9-9683-4150-ba3f-7e1aeb934f36"}, {"timestamp": "2025-08-11T18:47:42Z", "date_only": false, "value": "2025-08-11T18:47:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "0382b76d-5834-4d37-afce-e484c961bec1"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2025-08-31T03:13:16Z", "date_only": false, "value": "2025-08-31T03:13:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9b69c13b-b498-48f0-bfb7-b1989358ae65"}, {"timestamp": "2025-10-21T23:15:29.105Z", "date_only": false, "value": "2025-10-21T23:15:29.105Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-42475", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:29.105Z", "date_only": false, "value": "2025-10-21T23:15:29.105Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-42475", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:37Z", "date_only": false, "value": "2025-10-22T00:32:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P3VQ-4CXH-GFP9", "record": "GHSA-P3VQ-4CXH-GFP9", "field": "modified"}, {"timestamp": "2025-10-24T12:54:20.620Z", "date_only": false, "value": "2025-10-24T12:54:20.620000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "sources_update_date.data.3.date"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2025-11-18T15:35:29.590Z", "date_only": false, "value": "2025-11-18T15:35:29.590000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202212-1132", "record": "VAR-202212-1132", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:27:07.117Z", "date_only": false, "value": "2026-02-02T12:27:07.117274Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6bacbf8-707f-4ef7-84c3-17c25fc76591", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "2a379618-1d75-41f9-8991-ec1fd8cd23ce", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6bacbf8-707f-4ef7-84c3-17c25fc76591"}, {"timestamp": "2026-02-02T12:27:07.117Z", "date_only": false, "value": "2026-02-02T12:27:07.117274Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6bacbf8-707f-4ef7-84c3-17c25fc76591", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "177ebae3-6ea9-4dcc-8876-8be821b2485e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6bacbf8-707f-4ef7-84c3-17c25fc76591"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-42475", "field": "timestamps.recorded_at", "uuid": "0898f70b-05f1-4f28-916e-7ef774e877ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-770770", "record": "SSA-770770", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-11T21:23:50.812Z", "date_only": false, "value": "2026-03-11T21:23:50.812872Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-044-06", "record": "ICSA-25-044-06", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T05:04:59.630Z", "date_only": false, "value": "2026-06-17T05:04:59.630", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-42475", "record": "FKIE_CVE-2022-42475", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:01.062Z", "date_only": false, "value": "2026-06-19T12:47:01.062920Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c8bfbc0e-8116-4f89-a1ee-d435a1122f2c", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "4006556b-7019-4d86-a6f8-c85d41539083", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c8bfbc0e-8116-4f89-a1ee-d435a1122f2c"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-42475", "field": "timestamps.recorded_at", "uuid": "e5dc9432-abd4-4d5d-a278-e189b1a10ec2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:02.846Z", "date_only": false, "value": "2026-06-23T11:14:02.846738Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e5dc9432-abd4-4d5d-a278-e189b1a10ec2", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "b15e2c39-c874-43a3-9d49-be708c07518b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e5dc9432-abd4-4d5d-a278-e189b1a10ec2"}, {"timestamp": "2026-06-23T14:05:35.834Z", "date_only": false, "value": "2026-06-23T14:05:35.834464Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89030af9-3cd4-458c-9784-464cb30694d2", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "de909e82-cdae-49f9-af9b-1ae4904bbd4b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89030af9-3cd4-458c-9784-464cb30694d2"}, {"timestamp": "2026-06-25T16:45:30.187Z", "date_only": false, "value": "2026-06-25T16:45:30.187071Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "bd4b97ff-ffb3-4e97-970a-a5b7ebdae42c", "url": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet"}, {"timestamp": "2026-07-12T22:00:16.195Z", "date_only": false, "value": "2026-07-12T22:00:16.195175Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/10379", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "43658c15-ef91-4f59-8102-de93eefb0543", "url": "https://t.me/pleyades_it/10379"}, {"timestamp": "2026-07-13T00:00:40.027Z", "date_only": false, "value": "2026-07-13T00:00:40.027697Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/10379", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "304b389a-b7ae-4ee4-8b58-c7a5a2199332", "url": "https://t.me/pleyades_it/10379"}, {"timestamp": "2026-07-14T00:00:52.514Z", "date_only": false, "value": "2026-07-14T00:00:52.514908Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pleyades_it/10379", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "484e3836-725f-4252-a79b-f64dd41f3c57", "url": "https://t.me/pleyades_it/10379"}, {"timestamp": "2026-07-20T22:00:03.975Z", "date_only": false, "value": "2026-07-20T22:00:03.975670Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/315", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "7e03ab97-ae34-4a2d-8d34-7db00ab9e943", "url": "https://t.me/pphm_HackerNews/315"}, {"timestamp": "2026-07-21T00:00:10.282Z", "date_only": false, "value": "2026-07-21T00:00:10.282949Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/315", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "68180c3e-5c91-464e-ab51-21eb0479d52c", "url": "https://t.me/pphm_HackerNews/315"}, {"timestamp": "2026-07-21T15:00:04.500Z", "date_only": false, "value": "2026-07-21T15:00:04.500600Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/bimbosec/51", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d4730697-1e8b-4075-9dc2-1c16dce26cd0", "url": "https://t.me/bimbosec/51"}, {"timestamp": "2026-07-22T00:00:23.159Z", "date_only": false, "value": "2026-07-22T00:00:23.159652Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/bimbosec/51", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "7f10d038-2df1-4ecb-83af-cb5df113dc32", "url": "https://t.me/bimbosec/51"}, {"timestamp": "2026-07-22T00:15:02.943Z", "date_only": false, "value": "2026-07-22T00:15:02.943344Z", "kind": "sighting", "label": "Seen", "source": "MISP/89fc5796-831d-4951-8283-821975790b72", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "b83cc0e0-f56c-4809-81f5-e2b3806851b7"}, {"timestamp": "2026-07-23T18:15:03.354Z", "date_only": false, "value": "2026-07-23T18:15:03.354963Z", "kind": "sighting", "label": "Seen", "source": "MISP/260b243a-47a7-46fe-9442-1ad87d9ca940", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "c1d12923-dd55-4f84-abd9-352d2a7d19f3"}, {"timestamp": "2026-07-24T00:15:04.085Z", "date_only": false, "value": "2026-07-24T00:15:04.085842Z", "kind": "sighting", "label": "Seen", "source": "MISP/260b243a-47a7-46fe-9442-1ad87d9ca940", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "8896d150-a521-425a-a4f2-20f179c3828d"}, {"timestamp": "2026-07-26T02:02:26.058Z", "date_only": false, "value": "2026-07-26T02:02:26.058399Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1615", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "679d69e5-b4e6-4ea8-b214-76491c19c104", "url": "https://t.me/EchelonEyes/1615"}, {"timestamp": "2026-07-26T02:02:30.463Z", "date_only": false, "value": "2026-07-26T02:02:30.463537Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1173", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d810ee69-d456-429b-909a-3c5d6053f17e", "url": "https://t.me/EchelonEyes/1173"}, {"timestamp": "2026-07-26T02:02:32.138Z", "date_only": false, "value": "2026-07-26T02:02:32.138732Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1071", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a61a0b85-7783-406d-b0c8-23095db8942c", "url": "https://t.me/EchelonEyes/1071"}, {"timestamp": "2026-07-26T02:02:35.069Z", "date_only": false, "value": "2026-07-26T02:02:35.069489Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/969", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "2fad18f0-d8b2-43c7-897f-b8f10c96a6ef", "url": "https://t.me/EchelonEyes/969"}, {"timestamp": "2026-07-27T00:01:03.503Z", "date_only": false, "value": "2026-07-27T00:01:03.503360Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1615", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "cd7475e1-ae02-48c6-807f-ae54d011a33c", "url": "https://t.me/EchelonEyes/1615"}, {"timestamp": "2026-07-27T00:01:07.230Z", "date_only": false, "value": "2026-07-27T00:01:07.230029Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1173", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "e5e3aa4b-d353-413e-a51b-3a3b5923ddf7", "url": "https://t.me/EchelonEyes/1173"}, {"timestamp": "2026-07-27T00:01:09.662Z", "date_only": false, "value": "2026-07-27T00:01:09.662933Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1071", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f2354108-a125-401e-bfc9-3a1ac85354b1", "url": "https://t.me/EchelonEyes/1071"}, {"timestamp": "2026-07-27T00:01:11.072Z", "date_only": false, "value": "2026-07-27T00:01:11.072536Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/969", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a24143ff-064f-4e6a-97de-8beb28615716", "url": "https://t.me/EchelonEyes/969"}, {"timestamp": "2026-07-28T00:00:09.852Z", "date_only": false, "value": "2026-07-28T00:00:09.852308Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1615", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "4bb7e065-2660-4ec7-8310-de5814a6f356", "url": "https://t.me/EchelonEyes/1615"}, {"timestamp": "2026-07-28T02:00:05.294Z", "date_only": false, "value": "2026-07-28T02:00:05.294423Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1173", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "2c433164-2ec9-4595-860d-e1a37d445c4d", "url": "https://t.me/EchelonEyes/1173"}, {"timestamp": "2026-07-28T03:00:03.768Z", "date_only": false, "value": "2026-07-28T03:00:03.768011Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1071", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "806da794-b47b-4b69-ba3e-d079f292bcbd", "url": "https://t.me/EchelonEyes/1071"}, {"timestamp": "2026-07-28T04:00:05.447Z", "date_only": false, "value": "2026-07-28T04:00:05.447289Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/969", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "467c85c7-a0ac-429a-8aeb-155121e0109c", "url": "https://t.me/EchelonEyes/969"}, {"timestamp": "2026-07-29T00:00:48.637Z", "date_only": false, "value": "2026-07-29T00:00:48.637679Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/969", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "dafa773c-87aa-4817-8a31-0a06e49530bb", "url": "https://t.me/EchelonEyes/969"}, {"timestamp": "2026-07-29T00:00:50.142Z", "date_only": false, "value": "2026-07-29T00:00:50.142940Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1071", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "602a3b6b-6a31-4b4c-9851-acf9cbbe32b9", "url": "https://t.me/EchelonEyes/1071"}, {"timestamp": "2026-07-29T00:00:52.432Z", "date_only": false, "value": "2026-07-29T00:00:52.432889Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1173", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "8c42cab9-4753-4eb8-ad60-34ae6d89404e", "url": "https://t.me/EchelonEyes/1173"}, {"timestamp": "2026-07-29T12:00:21.507Z", "date_only": false, "value": "2026-07-29T12:00:21.507445Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/15535", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "7ee3219d-3fa3-4a9e-b295-19cce8001d7e", "url": "https://t.me/CVEhub/15535"}, {"timestamp": "2026-07-29T12:00:31.339Z", "date_only": false, "value": "2026-07-29T12:00:31.339371Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12874", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d7efdfea-3edf-4269-91bf-45b45e5bace9", "url": "https://t.me/CVEhub/12874"}, {"timestamp": "2026-07-29T12:00:35.365Z", "date_only": false, "value": "2026-07-29T12:00:35.365351Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11670", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "0d5729c7-2a54-47a9-aef9-8bb8c09b4982", "url": "https://t.me/CVEhub/11670"}, {"timestamp": "2026-07-29T12:00:46.810Z", "date_only": false, "value": "2026-07-29T12:00:46.810973Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8947", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "49be75eb-c7b6-4d86-a565-0eb96e7fcd58", "url": "https://t.me/CVEhub/8947"}, {"timestamp": "2026-07-29T12:00:47.581Z", "date_only": false, "value": "2026-07-29T12:00:47.581689Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8858", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "fb5f8a94-4953-46a7-a2ff-3ba1d2a38200", "url": "https://t.me/CVEhub/8858"}, {"timestamp": "2026-07-29T12:00:49.422Z", "date_only": false, "value": "2026-07-29T12:00:49.422007Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8260", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "3b83c140-02aa-4d1f-9a47-46706e36d022", "url": "https://t.me/CVEhub/8260"}, {"timestamp": "2026-07-29T12:00:49.618Z", "date_only": false, "value": "2026-07-29T12:00:49.618035Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8130", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "2e8a1a28-b91d-403c-8d01-1a66690b7f9f", "url": "https://t.me/CVEhub/8130"}, {"timestamp": "2026-07-29T12:02:23.480Z", "date_only": false, "value": "2026-07-29T12:02:23.480388Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3917", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "36f4749f-31c4-4e83-9e77-518f90d228ad", "url": "https://t.me/reverseame/3917"}, {"timestamp": "2026-07-29T12:02:29.908Z", "date_only": false, "value": "2026-07-29T12:02:29.908357Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3329", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "83c8b932-20c3-4f47-91ce-8ed75e295891", "url": "https://t.me/reverseame/3329"}, {"timestamp": "2026-07-29T12:03:04.931Z", "date_only": false, "value": "2026-07-29T12:03:04.931228Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/3460", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f903e7e8-7aec-4687-8413-84fc6b5e0bbe", "url": "https://t.me/cisoclub/3460"}, {"timestamp": "2026-07-30T00:00:42.173Z", "date_only": false, "value": "2026-07-30T00:00:42.173773Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/15535", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "72eabd57-559d-437a-96de-c3c849e3565b", "url": "https://t.me/CVEhub/15535"}, {"timestamp": "2026-07-30T00:00:56.760Z", "date_only": false, "value": "2026-07-30T00:00:56.760124Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12874", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "49ca38e9-3e41-4d28-8249-5cf53aa5cd1d", "url": "https://t.me/CVEhub/12874"}, {"timestamp": "2026-07-30T00:01:01.766Z", "date_only": false, "value": "2026-07-30T00:01:01.766882Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11670", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "99e39c8e-bfc1-4247-b37e-18a0de8830f9", "url": "https://t.me/CVEhub/11670"}, {"timestamp": "2026-07-30T00:01:16.734Z", "date_only": false, "value": "2026-07-30T00:01:16.734188Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8947", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "901c88fe-8557-4de6-a801-37f769165937", "url": "https://t.me/CVEhub/8947"}, {"timestamp": "2026-07-30T00:01:17.357Z", "date_only": false, "value": "2026-07-30T00:01:17.357098Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8858", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "695faaf1-6cd5-4585-8075-4d733bffa64f", "url": "https://t.me/CVEhub/8858"}, {"timestamp": "2026-07-30T00:01:20.893Z", "date_only": false, "value": "2026-07-30T00:01:20.893345Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8260", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "b26aff65-407e-45a3-8162-5c65e60bd7eb", "url": "https://t.me/CVEhub/8260"}, {"timestamp": "2026-07-30T00:01:21.299Z", "date_only": false, "value": "2026-07-30T00:01:21.299209Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8130", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "85c815c1-9fea-40d5-af92-9dddad122756", "url": "https://t.me/CVEhub/8130"}, {"timestamp": "2026-07-30T00:02:25.792Z", "date_only": false, "value": "2026-07-30T00:02:25.792694Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3917", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "5b0b0747-fdb1-4803-8543-289f5a6f4aaa", "url": "https://t.me/reverseame/3917"}, {"timestamp": "2026-07-30T00:02:30.608Z", "date_only": false, "value": "2026-07-30T00:02:30.608243Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3329", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "9c767cc9-4661-473c-b27e-3e479dc7b90d", "url": "https://t.me/reverseame/3329"}, {"timestamp": "2026-07-30T00:02:53.956Z", "date_only": false, "value": "2026-07-30T00:02:53.956782Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/3460", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "55b197d9-335a-4624-ba80-ce1eb6e3fd3d", "url": "https://t.me/cisoclub/3460"}, {"timestamp": "2026-07-31T00:00:08.909Z", "date_only": false, "value": "2026-07-31T00:00:08.909858Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12874", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "6b1753b2-3f72-4508-a4c7-6a30dcbdceb2", "url": "https://t.me/CVEhub/12874"}, {"timestamp": "2026-07-31T00:00:34.205Z", "date_only": false, "value": "2026-07-31T00:00:34.205201Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/15535", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a4e4e82a-0067-400c-8bd7-20a8324f6701", "url": "https://t.me/CVEhub/15535"}, {"timestamp": "2026-07-31T03:00:04.420Z", "date_only": false, "value": "2026-07-31T03:00:04.420521Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11670", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d39006d1-d4b5-45b7-baaa-f55f4a5bbbc9", "url": "https://t.me/CVEhub/11670"}, {"timestamp": "2026-07-31T13:00:04.185Z", "date_only": false, "value": "2026-07-31T13:00:04.185557Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8858", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "b676cc1a-da3a-4907-b68b-515932fc8394", "url": "https://t.me/CVEhub/8858"}, {"timestamp": "2026-07-31T13:00:04.899Z", "date_only": false, "value": "2026-07-31T13:00:04.899952Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8947", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "ab30eea3-a5c1-4f45-a542-5f54c11b3f7f", "url": "https://t.me/CVEhub/8947"}, {"timestamp": "2026-07-31T16:00:04.180Z", "date_only": false, "value": "2026-07-31T16:00:04.180463Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8130", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f52f5886-dc63-4aaa-a90b-0933d53d702e", "url": "https://t.me/CVEhub/8130"}, {"timestamp": "2026-07-31T16:00:04.581Z", "date_only": false, "value": "2026-07-31T16:00:04.581844Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8260", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a590bd37-889c-4e91-9ec6-662e1c135618", "url": "https://t.me/CVEhub/8260"}, {"timestamp": "2026-08-01T00:00:28.299Z", "date_only": false, "value": "2026-08-01T00:00:28.299780Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8130", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "cd273cf9-4bb2-499b-9415-0b4fe23cf230", "url": "https://t.me/CVEhub/8130"}, {"timestamp": "2026-08-01T00:00:28.679Z", "date_only": false, "value": "2026-08-01T00:00:28.679704Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8260", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "723b53d6-6b16-4e2e-aaef-5e95be253768", "url": "https://t.me/CVEhub/8260"}, {"timestamp": "2026-08-01T00:00:31.269Z", "date_only": false, "value": "2026-08-01T00:00:31.269885Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8858", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "a9efa24b-6844-4ec4-9fee-f41a250f146e", "url": "https://t.me/CVEhub/8858"}, {"timestamp": "2026-08-01T00:00:31.739Z", "date_only": false, "value": "2026-08-01T00:00:31.739684Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8947", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "514b00de-305a-4614-80c0-516755c85963", "url": "https://t.me/CVEhub/8947"}, {"timestamp": "2026-08-01T00:00:44.014Z", "date_only": false, "value": "2026-08-01T00:00:44.014910Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11670", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "4deacc1f-eab9-4bb5-9eb2-4d9b2a321d8a", "url": "https://t.me/CVEhub/11670"}, {"timestamp": "2026-08-02T12:04:24.908Z", "date_only": false, "value": "2026-08-02T12:04:24.908469Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3917", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "241f274e-1a36-4434-af6f-009041693dba", "url": "https://t.me/reverseame/3917"}, {"timestamp": "2026-08-02T18:00:04.854Z", "date_only": false, "value": "2026-08-02T18:00:04.854467Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3329", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "786b680c-dc0c-4da2-951c-3a596025a109", "url": "https://t.me/reverseame/3329"}, {"timestamp": "2026-08-03T01:29:05.064Z", "date_only": false, "value": "2026-08-03T01:29:05.064022Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3329", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "2b9f5d56-2ea7-491e-91c4-814899fc9a35", "url": "https://t.me/reverseame/3329"}, {"timestamp": "2026-08-03T02:07:12.021Z", "date_only": false, "value": "2026-08-03T02:07:12.021804Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3917", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "22821cbb-fc09-4488-91fe-3b830b900814", "url": "https://t.me/reverseame/3917"}, {"timestamp": "2026-08-03T17:00:05.313Z", "date_only": false, "value": "2026-08-03T17:00:05.313901Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/3460", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "51962f9e-b212-4bd4-8ca3-6fbd611c89ee", "url": "https://t.me/cisoclub/3460"}, {"timestamp": "2026-08-04T01:00:12.909Z", "date_only": false, "value": "2026-08-04T01:00:12.909152Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/3460", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d7248fa6-f6c8-46df-83f9-996e0a826e25", "url": "https://t.me/cisoclub/3460"}, {"timestamp": "2026-08-14T16:00:18.197Z", "date_only": false, "value": "2026-08-14T16:00:18.197052Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/507", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "5c6b19e9-970f-4d24-9747-a2c0ae72422b", "url": "https://t.me/purp_sec/507"}, {"timestamp": "2026-08-27T12:00:07.386Z", "date_only": false, "value": "2026-08-27T12:00:07.386093Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "5d79bd46-37d0-40b3-953b-9998429c7a50"}, {"timestamp": "2026-08-29T00:00:29.003Z", "date_only": false, "value": "2026-08-29T00:00:29.003821Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "1f6c420f-b4c0-4f76-97d6-45496e0a49e3"}, {"timestamp": "2026-09-01T17:00:15.726Z", "date_only": false, "value": "2026-09-01T17:00:15.726647Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7372", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f06a4da4-1c9a-433d-be4e-0a14a362d789", "url": "https://t.me/cissp/7372"}, {"timestamp": "2026-09-01T17:00:21.517Z", "date_only": false, "value": "2026-09-01T17:00:21.517056Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6663", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "78dcd9c8-1f62-4592-bdbf-dfde5d358c7a", "url": "https://t.me/cissp/6663"}, {"timestamp": "2026-09-01T17:00:23.746Z", "date_only": false, "value": "2026-09-01T17:00:23.746499Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6525", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "8de8a33a-5d00-44fd-8255-dde1b8c4a4ab", "url": "https://t.me/cissp/6525"}, {"timestamp": "2026-09-01T17:00:23.961Z", "date_only": false, "value": "2026-09-01T17:00:23.961473Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6490", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f6254d51-e4fe-4690-87d6-f2b56f36046d", "url": "https://t.me/cissp/6490"}, {"timestamp": "2026-09-01T17:00:24.094Z", "date_only": false, "value": "2026-09-01T17:00:24.094583Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6475", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "d20964c9-0b8e-4cc6-9fab-e4d686d0b78c", "url": "https://t.me/cissp/6475"}, {"timestamp": "2026-09-01T20:00:55.734Z", "date_only": false, "value": "2026-09-01T20:00:55.734350Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/108228", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "29279762-be39-4c04-896f-c48d2b3c782c", "url": "https://t.me/hacking_Attack/108228"}, {"timestamp": "2026-09-02T16:00:04.073Z", "date_only": false, "value": "2026-09-02T16:00:04.073074Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IRTE9BuztUkbbzgFrWUM1pze1uX-gYcshu3x9GLl0PBW0lw", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "cc621a91-0cfc-4de4-a691-3ee3a8914622"}, {"timestamp": "2026-09-03T00:00:42.786Z", "date_only": false, "value": "2026-09-03T00:00:42.786330Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/IRTE9BuztUkbbzgFrWUM1pze1uX-gYcshu3x9GLl0PBW0lw", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "b22fd456-34db-4a1c-999c-228b5fb0ad72"}, {"timestamp": "2026-09-04T12:00:11.458Z", "date_only": false, "value": "2026-09-04T12:00:11.458845Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/108228", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "44ac6ef0-a02d-4735-9867-39f32d596336", "url": "https://t.me/hacking_Attack/108228"}, {"timestamp": "2026-09-10T02:00:04.930Z", "date_only": false, "value": "2026-09-10T02:00:04.930270Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6663", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "724c9bd3-5537-4aa6-bcab-5e0e0ddede69", "url": "https://t.me/cissp/6663"}, {"timestamp": "2026-09-10T03:00:03.638Z", "date_only": false, "value": "2026-09-10T03:00:03.638624Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/6525", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "386c040d-5137-43ef-9c4d-31532ec36b6c", "url": "https://t.me/cissp/6525"}, {"timestamp": "2026-09-10T04:00:04.659Z", "date_only": false, "value": "2026-09-10T04:00:04.659983Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/6475", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "da949aad-94c5-4876-9013-d5ae0a88d3b8", "url": "https://t.me/cissp/6475"}, {"timestamp": "2026-09-10T04:00:04.760Z", "date_only": false, "value": "2026-09-10T04:00:04.760704Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6490", "record": "CVE-2022-42475", "field": "creation_timestamp", "uuid": "f507ab91-5002-4361-a80a-dc90a6c9c15f", "url": "https://t.me/cissp/6490"}]}