{"metadata": {"vulnerability": "CVE-2023-20198", "count": 1087, "kinds": {"milestone": 11, "sighting": 1012, "kev": 17, "other": 47}}, "data": [{"timestamp": "2022-10-27T18:47:50.365Z", "date_only": false, "value": "2022-10-27T18:47:50.365Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-20198", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-20198", "field": "timestamps.asserted_at", "uuid": "e3f2e1f2-4e22-46b8-bdc7-2aad34b8b61f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-20198", "field": "timestamps.asserted_at", "uuid": "3108ec93-2edb-49a5-adf2-8e04b5a03cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": true, "value": "2023-10-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20198", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-20198", "field": "evidence.0.details.added_date", "uuid": "3108ec93-2edb-49a5-adf2-8e04b5a03cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": true, "value": "2023-10-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-20198", "field": "evidence.0.details.date_added", "uuid": "e3f2e1f2-4e22-46b8-bdc7-2aad34b8b61f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-20198", "field": "timestamps.first_seen_at", "uuid": "e3f2e1f2-4e22-46b8-bdc7-2aad34b8b61f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-20198", "field": "timestamps.first_seen_at", "uuid": "3108ec93-2edb-49a5-adf2-8e04b5a03cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": true, "value": "2023-10-16", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-20198", "field": "status.status_updated_at", "uuid": "e3f2e1f2-4e22-46b8-bdc7-2aad34b8b61f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-20198", "field": "status.status_updated_at", "uuid": "3108ec93-2edb-49a5-adf2-8e04b5a03cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": false, "value": "2023-10-16T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20198", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-10-16T15:00:00Z", "date_only": false, "value": "2023-10-16T15:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-16T15:04:20Z", "date_only": false, "value": "2023-10-16T15:04:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-16T15:12:58.735Z", "date_only": false, "value": "2023-10-16T15:12:58.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-20198", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-16T16:15:10Z", "date_only": false, "value": "2023-10-16T16:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4XRF-PCXR-RF3C", "record": "GHSA-4XRF-PCXR-RF3C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-16T16:15:10.023Z", "date_only": false, "value": "2023-10-16T16:15:10.023", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20198", "record": "FKIE_CVE-2023-20198", "field": "published"}, {"timestamp": "2023-10-16T16:15:10.023Z", "date_only": false, "value": "2023-10-16T16:15:10.023", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-20198", "record": "GSD-2023-20198", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-10-16T18:30:28Z", "date_only": false, "value": "2023-10-16T18:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4XRF-PCXR-RF3C", "record": "GHSA-4XRF-PCXR-RF3C", "field": "published"}, {"timestamp": "2023-10-16T20:31:56Z", "date_only": false, "value": "2023-10-16T20:31:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/72322", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9ef56c24-49b0-4b7d-9dee-7df3f1009431", "content": "\u203c CVE-2023-20198 \u203c\n\nCisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature of Cisco IOS XE Software when exposed to the internet or to untrusted networks. This vulnerability allows a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access. The attacker can then use that account to gain control of the affected system. For steps to close the attack vector for this vulnerability, see the Recommendations section of this advisory\u00c2\u00a0 Cisco will provide updates on the status of this investigation and when a software patch is available.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/72322"}, {"timestamp": "2023-10-16T20:38:59Z", "date_only": false, "value": "2023-10-16T20:38:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/alexmakus/5163", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1764d606-c425-415c-a03c-6cdf79aa45b3", "content": "\u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 Cisco\n\n\u2022 Cisco has identified active exploitation of a previously unknown vulnerability in the Web User Interface (Web UI) feature of Cisco IOS XE software (CVE-2023-20198) when exposed to the internet or untrusted networks. This affects both physical and virtual devices running Cisco IOS XE software that also have the HTTP or HTTPS Server feature enabled.\u00a0\u00a0\n \u2022 Successful exploitation of this vulnerability allows an attacker to create an account on the affected device with privilege level 15 access, effectively granting them full control of the compromised device and allowing possible subsequent unauthorized activity.\u00a0\u00a0\n \u2022 The recommendation that Cisco has provided in its security advisory to disable the HTTP server feature on internet-facing systems is consistent with not only best practices but also guidance the U.S. government has provided in the past on mitigating risk from internet-exposed management interfaces.\u00a0\u00a0\n \u2022 Cisco support centers collaborated with the security team after using methods and procedures to correlate similar indicators in a very small number of cases out of our normal substantial daily case volume.\u00a0\u00a0\n \u2022 This is a critical vulnerability, and we strongly recommend affected entities immediately implement the steps outlined in Cisco\u2019s PSIRT advisory.\u00a0\n\nhttps://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/", "url": "https://t.me/alexmakus/5163"}, {"timestamp": "2023-10-16T21:10:02Z", "date_only": false, "value": "2023-10-16T21:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "80146a05-07a9-468f-bf4c-83ed01cf675a"}, {"timestamp": "2023-10-16T21:11:26Z", "date_only": false, "value": "2023-10-16T21:11:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-16T22:00:00Z", "date_only": false, "value": "2023-10-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2658", "record": "WID-SEC-W-2023-2658", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-16T22:00:00Z", "date_only": false, "value": "2023-10-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2658", "record": "WID-SEC-W-2023-2658", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-16T22:00:00Z", "date_only": false, "value": "2023-10-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2658", "record": "WID-SEC-W-2023-2658", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-16T22:48:46Z", "date_only": false, "value": "2023-10-16T22:48:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/143469", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "968cdcc9-733f-45d9-9da2-85cc6c0c7cfc", "content": "https://ift.tt/uiHsAOU\nCisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198)", "url": "https://t.me/ctinow/143469"}, {"timestamp": "2023-10-17T00:00:00Z", "date_only": true, "value": "2023-10-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-77098", "record": "CNVD-2023-77098", "field": "openTime"}, {"timestamp": "2023-10-17T00:00:00Z", "date_only": false, "value": "2023-10-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "initial_release_date"}, {"timestamp": "2023-10-17T00:00:00Z", "date_only": false, "value": "2023-10-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "revisions.0.revision_date"}, {"timestamp": "2023-10-17T00:00:00Z", "date_only": true, "value": "2023-10-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-77098", "record": "CNVD-2023-77098", "field": "submitTime"}, {"timestamp": "2023-10-17T04:00:00Z", "date_only": false, "value": "2023-10-17T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1139", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f627534e-ba8d-4668-90c8-3f8667089f3f", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1139"}, {"timestamp": "2023-10-17T06:14:29Z", "date_only": false, "value": "2023-10-17T06:14:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4013", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6f651596-9545-4942-ab34-97fc75393ca4", "content": "\ud83d\udea8 Cisco alerts about a critical UNPATCHED zero-day security vulnerability (CVE-2023-20198) in its IOS XE software that's under active exploitation. \n \nLearn more: https://thehackernews.com/2023/10/warning-unpatched-cisco-zero-day.html", "url": "https://t.me/thehackernews/4013"}, {"timestamp": "2023-10-17T07:15:36Z", "date_only": false, "value": "2023-10-17T07:15:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/940", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "16ecc196-fa10-4f28-9db7-050ea8488686", "content": "Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild\nhttps://thehackernews.com/2023/10/warning-unpatched-cisco-zero-day.html\n\nCisco has warned of a critical, unpatched security flaw impacting IOS XE software that\u2019s under active exploitation in the wild.\nRooted in the web UI feature, the zero-day vulnerability is assigned as\u00a0CVE-2023-20198\u00a0and has been assigned the maximum severity rating of 10.0 on the CVSS scoring system.\nIt\u2019s worth pointing out that the shortcoming only affects enterprise networking gear that have", "url": "https://t.me/KomunitiSiber/940"}, {"timestamp": "2023-10-17T07:43:31Z", "date_only": false, "value": "2023-10-17T07:43:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_20/2023", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c1fb226b-a526-45a9-a46d-40534060e225", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_20/2023"}, {"timestamp": "2023-10-17T08:02:03Z", "date_only": false, "value": "2023-10-17T08:02:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/14419", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0ad8d733-f53b-43ad-b706-5242bdb77980", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 CISCO \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udeab \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-20198) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Cisco IOS XE \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 15.\n\n\ud83d\udeab \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 18 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\ud83d\udeab \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c  \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 Cisco, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0438\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#Cisco #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c @SecLabNews", "url": "https://t.me/SecLabNews/14419"}, {"timestamp": "2023-10-17T08:02:22Z", "date_only": false, "value": "2023-10-17T08:02:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/mEHlS73T4PG7ekyBzKDVcLBTVDVGbWIoDLUAP2nv3wRDyw", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "73e0ac43-a49b-4108-8c82-b30f1e1307ef"}, {"timestamp": "2023-10-17T08:07:34Z", "date_only": false, "value": "2023-10-17T08:07:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5459", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "390d889b-a441-4c2b-91e7-aef639947f40", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20198 Checkscript\nURL\uff1ahttps://github.com/Atea-Redteam/CVE-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5459"}, {"timestamp": "2023-10-17T12:18:12Z", "date_only": false, "value": "2023-10-17T12:18:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-10-17T12:45:20Z", "date_only": false, "value": "2023-10-17T12:45:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/935", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4d6a051c-16e0-48a5-87fd-fe80c77dc7ea", "content": "\u27a1\ufe0f Cisco IOS XE \u2014 CVSS 10\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0437\u0438\u0440\u043e\u0434\u0435\u0435 \u0432 Cisco IOS XE (CVE-2023-20198), \u0442\u043e\u0447\u043d\u0435\u0435 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043d\u043e\u0432\u044b\u0439 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u042d\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0442\u0430\u043a \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\u0412 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u043c \u0431\u043b\u043e\u0433\u043f\u043e\u0441\u0442\u0435  Cisco Talos \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442\u0430\u043a \u0438 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n CVE-2023-20198 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Cisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 (\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u0435\u0431-\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f) \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/935"}, {"timestamp": "2023-10-17T14:00:21Z", "date_only": false, "value": "2023-10-17T14:00:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4971", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "654da6b4-99f9-4bcc-97c2-26de18665a3a", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 0-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 IOS XE \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2023-20198, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f IOS XE, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 15) \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0440\u0438 \u0442\u0430\u043a\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u0442\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n28 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f Cisco Talos \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431  \u0430\u0442\u0430\u043a\u0430\u0445\u00a0\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2023-20198, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0432\u0448\u0438\u0441\u044c \u0441 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043d\u0430 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u043c\u0435\u043d\u0435\u043c \u00abcisco_tac_admin\u00bb \u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0435\u0449\u0435 18 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\u00a0\n\n\u041f\u043e\u0437\u0436\u0435 \u043e\u043d\u0430 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b\u0430\u0441\u044c 1 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u043e 12 \u043e\u043a\u0442\u044f\u0431\u0440\u044f Cisco \u0441\u043d\u043e\u0432\u0430 \u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u2014 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u0443\u044e \u0442\u0435\u043c \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0415\u0441\u043b\u0438 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u0431\u044b\u043b\u0430 \u043b\u0438\u0448\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c, \u0442\u043e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043b\u0438 IOS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c CVE-2021-1435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 IOS XE, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Cisco \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 CVE-2021-1435, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c.\n\n\u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u043c \u2014 \u043e\u043d \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2014 \u043d\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b.\u00a0\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u0437\u0430 \u044d\u0442\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438. \u041f\u043e\u043a\u0430 \u0436\u0435 Cisco \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f CVE-2023-20198.\u00a0\n\n\u041f\u043e\u043a\u0430 \u043f\u0430\u0442\u0447 \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u043f\u0438\u0441\u043a\u043e\u043c IoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.", "url": "https://t.me/true_secator/4971"}, {"timestamp": "2023-10-17T14:19:07Z", "date_only": false, "value": "2023-10-17T14:19:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5468", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ee778d75-adb0-47b0-b015-3ca8113e548f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20198 PoC (!)\nURL\uff1ahttps://github.com/d0rb/CVE-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5468"}, {"timestamp": "2023-10-17T15:13:55Z", "date_only": false, "value": "2023-10-17T15:13:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/50849", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7f25024c-5251-41aa-9e6e-e5b9dc8b6eed", "content": "Cisco Devices Hacked via IOS XE Zero-Day Vulnerability\nhttps://www.securityweek.com/cisco-devices-hacked-via-ios-xe-zero-day-vulnerability/\n\nCisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices.\u00a0\nThe post Cisco Devices Hacked via IOS XE Zero-Day Vulnerability (https://www.securityweek.com/cisco-devices-hacked-via-ios-xe-zero-day-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/50849"}, {"timestamp": "2023-10-17T17:40:12Z", "date_only": false, "value": "2023-10-17T17:40:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/29881", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "46379c61-ffc4-4317-9453-7635695957b3", "content": "\u05e1\u05d9\u05db\u05d5\u05dd \u05d7\u05d3\u05e9\u05d5\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d1\u05e2\u05d5\u05dc\u05dd \u05de\u05d4\u05d9\u05de\u05de\u05d5\u05ea \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d5\u05ea:\n\n\ud83d\udd3a \u05d0\u05dc\u05e4\u05d9 \u05de\u05db\u05e9\u05d9\u05e8\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Cisco \u05d4\u05e2\u05d5\u05e9\u05d9\u05dd \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 Cisco IOS XE \u05e0\u05e4\u05e8\u05e6\u05d5 \u05e2\"\u05d9 \u05d4\u05d0\u05e7\u05e8\u05d9\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d0\u05dc\u05d4 \u05e0\u05d9\u05e6\u05dc\u05d5 \u05d7\u05d5\u05dc\u05e9\u05ea Zero Day \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4. (CVE-2023-20198)\n\n\ud83d\udd3a \u05d1\u05ea\u05d9 \u05d4\u05de\u05e9\u05e4\u05d8 \u05e9\u05d1\u05de\u05d3\u05d9\u05e0\u05ea \u05e7\u05e0\u05d6\u05e1, \u05d0\u05e8\u05d4\"\u05d1, \u05e2\u05d1\u05e8\u05d5 \u05dc\u05e2\u05d1\u05d5\u05d3\u05d4 \u05e2\u05dd \u05e2\u05d8 \u05d5\u05e0\u05d9\u05d9\u05e8 \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05de\u05ea\u05e7\u05e4\u05ea \u05db\u05d5\u05e4\u05e8 \u05e9\u05d2\u05e8\u05de\u05d4 \u05dc\u05d4\u05e9\u05d1\u05ea\u05d4 \u05e0\u05e8\u05d7\u05d1\u05ea \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05d4\u05de\u05d9\u05d7\u05e9\u05d5\u05d1.\n\n\ud83d\udd3a\u05de\u05d7\u05d5\u05d6 \u05d1\u05ea\u05d9 \u05d4\u05e1\u05e4\u05e8 Clark \u05e9\u05d1\u05d0\u05e8\u05d4\"\u05d1 \u05de\u05d3\u05d5\u05d5\u05d7 \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05de\u05ea\u05e7\u05e4\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8.\n\n\ud83d\udd3a \u05d7\u05d1\u05e8\u05ea Ampersand, \u05d4\u05e2\u05d5\u05e1\u05e7\u05ea \u05d1\u05ea\u05d7\u05d5\u05dd \u05d4\u05ea\u05d5\u05db\u05df \u05d4\u05e9\u05d9\u05d5\u05d5\u05e7\u05d9 \u05d1\u05d8\u05dc\u05d5\u05d5\u05d9\u05d6\u05d9\u05d4 \u05d5\u05e0\u05de\u05e6\u05d0\u05ea \u05e9\u05d1\u05d1\u05e2\u05dc\u05d5\u05ea \u05e9\u05dc\u05d5\u05e9\u05ea \u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05db\u05d1\u05dc\u05d9\u05dd \u05d4\u05d2\u05d3\u05d5\u05dc\u05d5\u05ea \u05d1\u05d0\u05de\u05e8\u05d9\u05e7\u05d4, \u05e1\u05d5\u05d1\u05dc\u05ea \u05de\u05de\u05ea\u05e7\u05e4\u05ea \u05db\u05d5\u05e4\u05e8 \u05e9\u05d1\u05d5\u05e6\u05e2\u05d4 \u05e2\"\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea Black Basta.\n\n\ud83d\udd3a \u05de\u05d0\u05d6 \u05e1\u05d5\u05e4\"\u05e9 \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 37 \u05e7\u05e8\u05d1\u05e0\u05d5\u05ea \u05d7\u05d3\u05e9\u05d9\u05dd \u05d1\u05d0\u05ea\u05e8\u05d9\u05dd \u05e9\u05dc \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 \u05d4\u05e9\u05d5\u05e0\u05d5\u05ea - \u05db\u05dc \u05d4\u05e7\u05e8\u05d1\u05e0\u05d5\u05ea \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05d1\u05e4\u05d9\u05d3 \u05d4\u05db\u05d5\u05e4\u05e8 \u05d4\u05d6\u05de\u05d9\u05df \u05dc\u05ea\u05d5\u05de\u05db\u05d9 \u05d4\u05e2\u05e8\u05d5\u05e5.\n\n\ud83c\uddee\ud83c\uddf1 \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05d4\u05ea\u05e7\u05d9\u05e4\u05d4 \u05d1\u05d8\u05dc\u05d2\u05e8\u05dd \u05de\u05de\u05e9\u05d9\u05db\u05d5\u05ea \u05dc\u05e4\u05e2\u05d5\u05dc \u05db\u05e0\u05d2\u05d3 \u05d0\u05ea\u05e8\u05d9\u05dd \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc \u05d1\u05d9\u05ea\u05e8 \u05e9\u05d0\u05ea \u05de\u05d0\u05d6 \u05d4\u05d7\u05dc\u05d4 \u05de\u05dc\u05d7\u05de\u05ea \u05d7\u05d1\u05e8\u05d5\u05ea \u05d1\u05e8\u05d6\u05dc, \u05e8\u05d5\u05d1 \u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05d4-DDoS \u05d4\u05df \u05e7\u05e6\u05e8\u05d5\u05ea \u05de\u05d0\u05d3/\u05dc\u05d0 \u05de\u05d5\u05e8\u05d2\u05e9\u05d5\u05ea \u05d5\u05dc\u05db\u05df \u05dc\u05d0 \u05de\u05ea\u05e4\u05e8\u05e1\u05de\u05d5\u05ea \u05db\u05d0\u05df.\n\u05d1\u05de\u05e7\u05d1\u05d9\u05dc \u05dc\u05d3\u05d9\u05d3\u05d5\u05e1 \u05d4\u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05de\u05d1\u05e6\u05e2\u05d5\u05ea \u05d2\u05dd \u05d4\u05e9\u05d7\u05ea\u05d4 \u05dc\u05d0\u05ea\u05e8\u05d9\u05dd \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc, \u05d2\u05dd \u05db\u05d0\u05df \u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05d4\u05e9\u05e4\u05e2\u05d4 \u05d9\u05d7\u05e1\u05d9\u05ea \u05d6\u05e0\u05d9\u05d7\u05d4.\n\n\ud83c\uddee\ud83c\uddf1\u05d1\u05de\u05e7\u05d1\u05d9\u05dc \u05dc\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05d4\u05de\u05e4\u05d5\u05e8\u05e1\u05de\u05d5\u05ea \u05d1\u05d8\u05dc\u05d2\u05e8\u05dd, \u05d1\u05e4\u05d5\u05e8\u05d5\u05de\u05d9\u05dd \u05e9\u05d5\u05e0\u05d9\u05dd \u05de\u05d5\u05e6\u05e2 \u05dc\u05de\u05db\u05d9\u05e8\u05d4 \u05de\u05d9\u05d3\u05e2 \u05d4\u05e9\u05d9\u05d9\u05da \u05dc\u05d2\u05d5\u05e4\u05d9\u05dd \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc.\n\u05db\u05e9\u05d0\u05e0\u05d9 \u05de\u05ea\u05d5\u05d5\u05d3\u05e2 \u05dc\u05e4\u05d5\u05e1\u05d8 \u05de\u05db\u05d9\u05e8\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05db\u05d6\u05d4 \u05d0\u05e0\u05d9 \u05de\u05e2\u05d3\u05db\u05df \u05d0\u05ea \u05d4\u05d2\u05d5\u05e3 \u05d4\u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9 \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc - \u05d1\u05e9\u05d1\u05d5\u05e2 \u05d4\u05d0\u05d7\u05e8\u05d5\u05df \u05e9\u05dc\u05d7\u05ea\u05d9 \u05de\u05d9\u05d3\u05e2 \u05dc\u05de\u05e1\u05e4\u05e8 \u05d2\u05d5\u05e4\u05d9\u05dd \u05db\u05d0\u05dc\u05d5 \u05d1\u05d0\u05e8\u05e5.\n\n\ud83c\uddee\ud83c\uddf1\u05e4\u05d5\u05e1\u05d8 \u05dc\u05d3\u05d5\u05d2\u05de\u05d0 \u05e9\u05e4\u05d5\u05e8\u05e1\u05dd \u05d4\u05e9\u05d1\u05d5\u05e2 - \u05de\u05d9\u05d3\u05e2 \u05dc\u05db\u05d0\u05d5\u05e8\u05d4 \u05e9\u05dc \u05d0\u05e0\u05e9\u05d9 \u05d1\u05d9\u05d8\u05d7\u05d5\u05df \u05d1\u05e6\u05d4\"\u05dc \u05d5\u05d1\u05e9\u05d1\"\u05db \u05d4\u05d5\u05e6\u05e2 \u05dc\u05de\u05db\u05d9\u05e8\u05d4 \u05ea\u05de\u05d5\u05e8\u05ea 15,000 \u05d3\u05d5\u05dc\u05e8. \u05d4\u05ea\u05d5\u05e7\u05e3 \u05d8\u05d5\u05e2\u05df \u05db\u05d9 \u05d4\u05d5\u05d0 \u05d0\u05e3 \u05de\u05d7\u05d6\u05d9\u05e7 \u05d1\u05d2\u05d9\u05e9\u05d4 \u05dc\u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05d1\u05e8\u05e9\u05ea\u05d5\u05ea \u05d4\u05d7\u05d1\u05e8\u05ea\u05d9\u05d5\u05ea \u05e9\u05dc \u05d7\u05dc\u05e7 \u05de\u05d4\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\nhttps://t.me/CyberSecurityIL/3855\n\n#\u05db\u05d5\u05e4\u05e8 #\u05d7\u05d9\u05e0\u05d5\u05da #\u05d3\u05dc\u05e3_\u05de\u05d9\u05d3\u05e2 #\u05d9\u05e9\u05e8\u05d0\u05dc #\u05de\u05d3\u05d9\u05d4", "url": "https://t.me/CyberSecurityIL/29881"}, {"timestamp": "2023-10-17T18:20:34Z", "date_only": false, "value": "2023-10-17T18:20:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BitLenta/19645", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c9f5587d-9876-46a4-9e25-11c3c6ce2794", "content": "\u0423 Cisco \u0432 IOS XE \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0434\u0435\u0441\u044f\u0442\u043e\u0447\u043a\u0443 \u043f\u043e CVSS \u0438 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0436\u0434\u0443\u0449\u0430\u044f \u043f\u0430\u0442\u0447\u0430. \u041d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c CVE-2023-20198 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0438 \u0441\u0432\u0438\u0442\u0447\u0430\u0445. \u0421\u0443\u0434\u044f \u043f\u043e Shodan, \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 ~80 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0441\u0435\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044f\u0442: \u0441 18 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u0438 \u0441\u0442\u0430\u0432\u0438\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0434\u043b\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u041e\u0421. \u0427\u0442\u043e \u0437\u0430\u043d\u044f\u0442\u043d\u043e, \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u0436\u0435 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e CVE-2021-1435. \u041a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438\u043c\u043f\u043b\u0430\u043d\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0430\u0441\u044c. \u0421 \u0443\u0447\u0451\u0442\u043e\u043c \u043b\u0451\u0433\u043a\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0432\u044b\u0431\u0438\u0442\u043e\u0439 \u0434\u0435\u0441\u044f\u0442\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0431\u0435\u0437 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f. \u041f\u043e\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u043f\u0430\u0442\u0447, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0435\u0437\u0432\u0430\u043d\u044b\u0445 \u0433\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. (tomhunter)", "url": "https://t.me/BitLenta/19645"}, {"timestamp": "2023-10-17T20:01:22Z", "date_only": false, "value": "2023-10-17T20:01:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/143713", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "048c0e23-a242-4df2-a18e-6afd287ce3fb", "content": "https://ift.tt/PFLJeRg\nCVE-2023-20198 zero-day widely exploited to install implants on Cisco IOS XE systems", "url": "https://t.me/ctinow/143713"}, {"timestamp": "2023-10-17T20:49:27Z", "date_only": false, "value": "2023-10-17T20:49:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/143720", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "05413aa5-75e3-43fb-a951-abf7c756bd9d", "content": "https://ift.tt/PFLJeRg\nCVE-2023-20198 zero-day widely exploited to install implants on ... - Security Affairs", "url": "https://t.me/ctinow/143720"}, {"timestamp": "2023-10-17T21:35:28Z", "date_only": false, "value": "2023-10-17T21:35:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/72447", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "66b42023-79e2-42d4-94bf-a1f6256e4c26", "content": "\ud83d\udd74 Zero-Day Alert: Ten Thousand Cisco IOS XE Systems Now Compromised \ud83d\udd74\n\nJust a day after Cisco disclosed CVE-2023-20198, it remains unpatched, and one vendor says a Shodan scan shows at least 10,000 Cisco devices with an implant for arbitrary code execution on them. The vendor meanwhile has updated the advisory with more mitigation steps.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/72447"}, {"timestamp": "2023-10-17T22:44:03Z", "date_only": false, "value": "2023-10-17T22:44:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5472", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "87a39d38-2ccb-4f61-b194-67594a63ee9c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20198 & 0Day Implant Scanner\nURL\uff1ahttps://github.com/ZephrFish/Cisco-IOS-EX-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5472"}, {"timestamp": "2023-10-17T22:52:15Z", "date_only": false, "value": "2023-10-17T22:52:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5473", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ac4e8fa4-db31-4b2e-8047-a1fe69a6e34f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20198 & 0Day Implant Scanner\nURL\uff1ahttps://github.com/ZephrFish/Cisco-IOS-XE-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5473"}, {"timestamp": "2023-10-18T08:29:48Z", "date_only": false, "value": "2023-10-18T08:29:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2023/10/kritische-sicherheitslucke-in-cisco-ios-xe-aktiv-ausgenutzt", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f072a5aa-dee1-4129-af25-bc89dad4cb8f", "url": "https://www.cert.at/de/warnungen/2023/10/kritische-sicherheitslucke-in-cisco-ios-xe-aktiv-ausgenutzt"}, {"timestamp": "2023-10-18T12:35:56Z", "date_only": false, "value": "2023-10-18T12:35:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4976", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0af380ac-2d4d-4988-ac8b-7cb18e356c8a", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Cisco IOS XE.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-20198 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0438\u043c\u0435\u044e\u0449\u0443\u044e \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c IOS XE, \u0432\u0445\u043e\u0434\u044f\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0430\u0433\u0440\u0435\u0433\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435.\n\nCisco \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0435\u0449\u0435 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044f \u0436\u0430\u043b\u043e\u0431\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10/10, \u0438 \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u0441\u0435\u0440\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u043d\u0430 IOS XE \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 CVE-2023-20109. \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 IOS XE.\n\n\u0410 \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u043f\u0435\u0440\u0435\u0433\u043e\u043d\u043a\u0438 \u0440\u0430\u043f\u043e\u0440\u0442\u0443\u044e\u0442 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445. VulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0442\u044b\u0441\u044f\u0447\u0438\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u043a\u0430\u043d\u0435\u0440 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432, \u0430 LeakIX \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 30 000.\n\n\u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 CERT Orange\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u00a0\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 34,5 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a CVE-2023-20198.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 140 000.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0432\u0441\u0435 \u0435\u0449\u0435 \u0432\u043f\u0435\u0440\u0435\u0434\u0438.", "url": "https://t.me/true_secator/4976"}, {"timestamp": "2023-10-18T14:00:45Z", "date_only": false, "value": "2023-10-18T14:00:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/50856", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "62f3503e-240f-4753-84e4-7767cbd73bed", "content": "Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability\nhttps://www.securityweek.com/tens-of-thousands-of-cisco-devices-hacked-via-zero-day-vulnerability/\n\nTens of thousands of Cisco devices have reportedly been hacked via the exploitation of the zero-day vulnerability CVE-2023-20198.\nThe post Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability (https://www.securityweek.com/tens-of-thousands-of-cisco-devices-hacked-via-zero-day-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/50856"}, {"timestamp": "2023-10-18T15:15:58Z", "date_only": false, "value": "2023-10-18T15:15:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5481", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f9372877-000c-4609-b5e7-3b9dbf4ff39c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aThis script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198\nURL\uff1ahttps://github.com/alekos3/CVE_2023_20198_Detector\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5481"}, {"timestamp": "2023-10-18T15:18:32Z", "date_only": false, "value": "2023-10-18T15:18:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cybersecurity_memes_off/760", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6d36da63-b6e9-4355-a7ca-a0ea9a627719", "content": "\u0418 \u0447\u0443\u0442\u043e\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430. \u041d\u0435 \u043e\u0434\u043d\u0438 \u0436\u0435 \u043c\u0435\u043c\u044b \u043f\u043e\u0441\u0442\u0438\u0442\u044c. https://vk.com/@52182800-cisco-ios-xe-cve-2023-20198", "url": "https://t.me/cybersecurity_memes_off/760"}, {"timestamp": "2023-10-19T04:13:16Z", "date_only": false, "value": "2023-10-19T04:13:16+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-20198", "field": "timestamps.asserted_at", "uuid": "41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-19T04:13:16Z", "date_only": false, "value": "2023-10-19T04:13:16+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-20198", "field": "timestamps.first_seen_at", "uuid": "41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-19T05:57:56Z", "date_only": false, "value": "2023-10-19T05:57:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5488", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "955d6392-3714-4663-9878-a26dabd5aacf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAnsible Playbook for CVE-2023-20198\nURL\uff1ahttps://github.com/ditekshen/ansible-cve-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5488"}, {"timestamp": "2023-10-19T09:31:44Z", "date_only": false, "value": "2023-10-19T09:31:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9218", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "23c8c6cd-3aa4-4487-a1ce-2329582dd07d", "content": "#exploit\n1. CVE-2023-20198:\nCisco ISO XE Software Web Management User Interface Vulnerability\nhttps://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software\n]-> PoC: https://github.com/Tounsi007/CVE-2023-20198\n]-> Checkscript: https://github.com/Atea-Redteam/CVE-2023-20198\n\n2. CVE-2023-36728:\nWindows SQL Server Pre-Auth Overflow Read\nhttps://v-v.space/2023/10/16/sqlserver-dos-CVE-2023-36728\n\n3. CVE-2023-38545:\nSocks5 heap buffer overflow\nhttps://github.com/d0rb/CVE-2023-38545", "url": "https://t.me/CyberSecurityTechnologies/9218"}, {"timestamp": "2023-10-20T00:00:00Z", "date_only": true, "value": "2023-10-20", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-20198", "field": "evidence.0.details.due_date", "uuid": "e3f2e1f2-4e22-46b8-bdc7-2aad34b8b61f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-20T01:12:10Z", "date_only": false, "value": "2023-10-20T01:12:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18641", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5591b530-0abb-41a7-ae6f-7ca5fd355e95", "content": "Latest news and stories from BleepingComputer.com\nOver 40,000 Cisco IOS XE devices infected with backdoor using zero-day\n\nMore than 40,000 Cisco devices running the IOS XE operating system have been compromised after hackers exploited a recently disclosed maximum severity vulnerability tracked as CVE-2023-20198. [...]", "url": "https://t.me/BleepingComputer/18641"}, {"timestamp": "2023-10-20T01:18:09Z", "date_only": false, "value": "2023-10-20T01:18:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18645", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1ff26cd1-d03c-4c53-a7de-7d07a3716df1", "content": "\u200aOver 40,000 Cisco IOS XE devices infected with backdoor using zero-day\n\nMore than 40,000 Cisco devices running the IOS XE operating system have been compromised after hackers exploited a recently disclosed maximum severity vulnerability tracked as CVE-2023-20198. [...]\n\nhttps://www.bleepingcomputer.com/news/security/over-40-000-cisco-ios-xe-devices-infected-with-backdoor-using-zero-day/", "url": "https://t.me/BleepingComputer/18645"}, {"timestamp": "2023-10-20T01:23:40Z", "date_only": false, "value": "2023-10-20T01:23:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/19764", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6145e9d1-7e85-46b9-9033-0a66382c9375", "content": "10 \u0438\u0437 10: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Cisco IOS XE\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 10 \u0442\u044b\u0441. \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\nCVE-2023-20198 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Cisco IOS XE, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f HTTP(S)-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 10 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u0423\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043f\u0430\u0442\u0447 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0433\u043e\u0442\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u042d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u2328\ufe0f \u0417\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0434\u0438\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0432\u043e \u0432\u0441\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0435\u0433\u043e \u043f\u0443\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0430 \u0435\u0433\u043e \u0437\u043b\u043e\u0434\u0435\u044f\u043d\u0438\u044f \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 10 \u0442\u044b\u0441. \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 Cisco IOS XE \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u043c \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0427\u0442\u043e \u0436\u0435 \u0434\u0435\u043b\u0430\u0442\u044c? Cisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 IOS XE \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \u0422\u0430\u043a\u0436\u0435 \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/19764"}, {"timestamp": "2023-10-20T06:33:18Z", "date_only": false, "value": "2023-10-20T06:33:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3482", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6a355b14-2b1f-4b04-822b-3744c2d917b5", "content": "\u200b\u26a1\ufe0f\u0411\u043e\u043b\u0435\u0435 40 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \"\u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\".\n\n\ud83d\udcac \u0411\u043e\u043b\u0435\u0435 40 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 IOS XE, \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u043a\u0430\u043a CVE-2023-20198 . \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u043d\u0438 \u043f\u0430\u0442\u0447\u0430, \u043d\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0438 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 - \"\u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\".\n\n\u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u043d\u0430 Cisco IOS XE, \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0430\u0433\u0440\u0435\u0433\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0438 \u0444\u0438\u043b\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b.\n\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043e\u043a\u043e\u043b\u043e 10 000, \u043d\u043e \u044d\u0442\u043e \u0447\u0438\u0441\u043b\u043e \u043d\u0430\u0447\u0430\u043b\u043e \u0440\u0430\u0441\u0442\u0438, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u043e\u0447\u043d\u043e\u0439 \u0446\u0438\u0444\u0440\u044b. \u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 LeakIX \u0434\u043b\u044f \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043e\u043a\u043e\u043b\u043e 30 000 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u043e\u0442 \u0436\u0435 \u043c\u0435\u0442\u043e\u0434 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442 Cisco, \u0447\u0430\u0441\u0442\u043d\u044b\u0439 CERT \u043e\u0442 Orange \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u0432 \u0441\u0440\u0435\u0434\u0443, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 34 500 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 Cisco IOS XE \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-20198.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u042e\u0442\u0430\u043a\u0430 \u0421\u0435\u0434\u0436\u0438\u044f\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043a\u0430\u043b \u0432 Shodan \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco IOS XE, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u043b\u044f CVE-2023-20198, \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0432 \u0441\u0435\u0442\u0438 \u043e\u043a\u043e\u043b\u043e 90 000 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0412 \u0421\u0428\u0410 \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0442\u0430\u043a\u0438\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0443\u0441\u043b\u0443\u0433 \u0441\u0432\u044f\u0437\u0438, \u043a\u0430\u043a Comcast, Verizon, Cox Communications, Frontier, AT&T, Spirit, CenturyLink, Charter, Cobridge, Windstream \u0438 Google Fiber.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0421\u0435\u0434\u0436\u0438\u044f\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0432\u0445\u043e\u0434\u044f\u0442 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0435 \u0446\u0435\u043d\u0442\u0440\u044b, \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u044b, \u043e\u0444\u0438\u0441\u044b \u0448\u0435\u0440\u0438\u0444\u0430, \u0448\u043a\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0433\u0430, \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u0441\u043f\u0440\u043e\u0441\u0430, \u0431\u0430\u043d\u043a\u0438, \u0431\u043e\u043b\u044c\u043d\u0438\u0446\u044b \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco IOS XE \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0438\u0445 \u043d\u043e\u0432\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 Snort \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0442\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0442 Cisco \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443. \u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0438\u0440\u0430\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0443\u0434\u0430\u043b\u044f\u044e\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u043b\u0435\u0434\u044b.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0441\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u044b \u043e\u0434\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u0445 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\nCisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u0434\u0435\u043b\u0438\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0430.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3482"}, {"timestamp": "2023-10-20T07:25:17Z", "date_only": false, "value": "2023-10-20T07:25:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/144331", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4d3f30f0-4f2c-42fc-b531-4188e8c9689d", "content": "https://ift.tt/5bRwG4C\nCisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198", "url": "https://t.me/ctinow/144331"}, {"timestamp": "2023-10-20T10:04:28Z", "date_only": false, "value": "2023-10-20T10:04:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tech_b0lt_Genona/4072", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "601efbf9-1e12-49aa-8f0c-2f985b2e7935", "content": "\u034f\u0410\u0434\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco IOS XE, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u043e\u0437\u0430\u0432\u0447\u0435\u0440\u0430, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441. \n\nCVE-2023-20198, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0438\u0437 10 \u043f\u043e CVSS \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434, \u0432 \u043c\u0438\u0440\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u043e\u0447\u0442\u0438 42 \u0442\u044b\u0441\u044f\u0447\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 Cisco, \u043d\u0430 \u041a\u041e\u0422\u041e\u0420\u042b\u0425 \u0423\u0416\u0415 \u0423\u0421\u0422\u0410\u041d\u041e\u0412\u041b\u0415\u041d \u0412\u0420\u0415\u0414\u041e\u041d\u041e\u0421\u041d\u042b\u0419 \u0418\u041c\u041f\u041b\u0410\u041d\u0422! \u0421\u0430\u043c\u0430 Cisco \u043f\u0440\u043e \u044d\u0442\u043e \"\u0431\u043b\u0430\u0433\u043e\u0440\u043e\u0434\u043d\u043e\" \u0443\u043c\u0430\u043b\u0447\u0438\u0432\u0430\u0435\u0442.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 42 \u0442\u044b\u0441\u044f\u0447 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 436 \u0423\u0421\u0422\u0420\u041e\u0419\u0421\u0422\u0412 CISCO \u0421 \u0423\u0416\u0415 \u0423\u0421\u0422\u0410\u041d\u041e\u0412\u041b\u0415\u041d\u041d\u042b\u041c\u0418 \u0418\u041c\u041f\u041b\u0410\u041d\u0422\u0410\u041c\u0418! \u042d\u0442\u043e \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e, \u0435\u0449\u0435 \u0440\u0430\u0437, \u043d\u0430 \u043d\u043e\u0447\u044c \u0441 18 \u043d\u0430 19 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u0421\u0435\u0439\u0447\u0430\u0441, \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430, \u0431\u043e\u043b\u044c\u0448\u0435. \u041f\u0430\u0442\u0447\u0430, \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u043d\u0435\u0442.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Cisco \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0443 \u043d\u0430\u0441 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 , \u044d\u0442\u043e, \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0435 \u0436\u043e\u043f\u0430 - \u044d\u0442\u043e \u0416\u041e\u041f\u0418\u0429\u0415. \n\n\u0412\u0441\u0435\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c \u0418\u0411 \u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445.\n\n\u0412\u044b \u0434\u0435\u0440\u0436\u0438\u0442\u0435\u0441\u044c \u0437\u0434\u0435\u0441\u044c! \u0412\u0430\u043c \u0432\u0441\u0435\u0433\u043e \u0434\u043e\u0431\u0440\u043e\u0433\u043e, \u0445\u043e\u0440\u043e\u0448\u0435\u0433\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f! (\u0441)", "url": "https://t.me/tech_b0lt_Genona/4072"}, {"timestamp": "2023-10-20T10:34:26Z", "date_only": false, "value": "2023-10-20T10:34:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/integral_security/525", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "534e1293-454c-4240-8779-11fe7ce043f4", "content": "\u27a1\ufe0f \u0414\u0430\u0439\u0434\u0436\u0435\u0441\u0442 16 \u2014 20 \u043e\u043a\u0442\u044f\u0431\u0440\u044f\n\n\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u043e \u0432\u0432\u0435\u0441\u0442\u0438 \u0443\u0442\u0438\u043b\u044c\u0441\u0431\u043e\u0440 \u043d\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0435 IT-\u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 \u0441\u0431\u043e\u0440\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432.\n\n\u0412\u00a0\u0413\u043e\u0441\u0434\u0443\u043c\u0435 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0438 \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u043e\u0440\u044c\u0431\u0443 \u0441\u00a0\u0431\u043e\u0442\u043d\u0435\u0442\u0430\u043c\u0438\n\u0411\u043e\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u00a0\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\n\u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0421\u041c\u0418 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0432\u044f\u0437\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0418\u0411 \u043a 2025\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u043e\u0433\u043e, \u043e\u043d\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u0443\u0434\u0443\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0422\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u00a0CVE-2023-20198\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c IOS XE.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u0438 MATA \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0432 \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435\u0444\u0442\u0435\u0433\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u0441\u0442\u0440\u0430\u043d \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u044b.\u00a0\n\n\u041f\u043b\u0430\u0433\u0438\u043d WordPress Royal Elementor \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Royal Elementor Addons and Templates (\u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.3.78), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 200 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\nAndroid-\u0442\u0440\u043e\u044f\u043d SpyNote \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0430\u0443\u0434\u0438\u043e \u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438\n\u0422\u0440\u043e\u044f\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 SMS \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0443\u0431\u0435\u0436\u0434\u0430\u044f \u043b\u044e\u0434\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435. \n\n\u041a\u0438\u0442\u0430\u0439 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 IPv6 \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e Wi-Fi \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0441\u0442\u0440\u0430\u043d\u0435\n\u041d\u043e\u0432\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0442\u0443\u043f\u044f\u0442 \u0432 \u0441\u0438\u043b\u0443 \u0441 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Outpost24 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443\u00a0\u043e\u0431 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0418\u0422-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u043b\u0430\u0431\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u00abadmin\u00bb.", "url": "https://t.me/integral_security/525"}, {"timestamp": "2023-10-20T10:47:05Z", "date_only": false, "value": "2023-10-20T10:47:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4988", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1e56b351-eb0a-4165-86a0-b661e50f72e9", "content": "\u034f\u0410\u0434\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco IOS XE, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u043e\u0437\u0430\u0432\u0447\u0435\u0440\u0430, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441. \n\nCVE-2023-20198, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0438\u0437 10 \u043f\u043e CVSS \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434, \u0432 \u043c\u0438\u0440\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u043e\u0447\u0442\u0438 42 \u0442\u044b\u0441\u044f\u0447\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 Cisco, \u043d\u0430 \u041a\u041e\u0422\u041e\u0420\u042b\u0425 \u0423\u0416\u0415 \u0423\u0421\u0422\u0410\u041d\u041e\u0412\u041b\u0415\u041d \u0412\u0420\u0415\u0414\u041e\u041d\u041e\u0421\u041d\u042b\u0419 \u0418\u041c\u041f\u041b\u0410\u041d\u0422! \u0421\u0430\u043c\u0430 Cisco \u043f\u0440\u043e \u044d\u0442\u043e \"\u0431\u043b\u0430\u0433\u043e\u0440\u043e\u0434\u043d\u043e\" \u0443\u043c\u0430\u043b\u0447\u0438\u0432\u0430\u0435\u0442.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 42 \u0442\u044b\u0441\u044f\u0447 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 436 \u0423\u0421\u0422\u0420\u041e\u0419\u0421\u0422\u0412 CISCO \u0421 \u0423\u0416\u0415 \u0423\u0421\u0422\u0410\u041d\u041e\u0412\u041b\u0415\u041d\u041d\u042b\u041c\u0418 \u0418\u041c\u041f\u041b\u0410\u041d\u0422\u0410\u041c\u0418! \u042d\u0442\u043e \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e, \u0435\u0449\u0435 \u0440\u0430\u0437, \u043d\u0430 \u043d\u043e\u0447\u044c \u0441 18 \u043d\u0430 19 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u0421\u0435\u0439\u0447\u0430\u0441, \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430, \u0431\u043e\u043b\u044c\u0448\u0435. \u041f\u0430\u0442\u0447\u0430, \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u043d\u0435\u0442.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Cisco \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0443 \u043d\u0430\u0441 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 , \u044d\u0442\u043e, \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0435 \u0436\u043e\u043f\u0430 - \u044d\u0442\u043e \u0416\u041e\u041f\u0418\u0429\u0415. \n\n\u0412\u0441\u0435\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c \u0418\u0411 \u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445.\n\n\u0412\u044b \u0434\u0435\u0440\u0436\u0438\u0442\u0435\u0441\u044c \u0437\u0434\u0435\u0441\u044c! \u0412\u0430\u043c \u0432\u0441\u0435\u0433\u043e \u0434\u043e\u0431\u0440\u043e\u0433\u043e, \u0445\u043e\u0440\u043e\u0448\u0435\u0433\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f! (\u0441)", "url": "https://t.me/true_secator/4988"}, {"timestamp": "2023-10-20T11:37:17Z", "date_only": false, "value": "2023-10-20T11:37:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5505", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "46cdd7b7-7427-4c37-a77a-1c0663758184", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20198 straight RCE without implant\nURL\uff1ahttps://github.com/m474r5/CVE-2023-20198-RCE\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5505"}, {"timestamp": "2023-10-20T11:45:33Z", "date_only": false, "value": "2023-10-20T11:45:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/944", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f9247e5c-1367-43dc-ba6f-4f693f96dafb", "content": "\ud83d\udea8 \u0418\u0434\u0451\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-20198 \u0432 Cisco IOS XE.  \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u00ab\u0442\u043e\u0440\u0447\u0430\u0442\u00bb \u043f\u043e\u0447\u0442\u0438 150 \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c Cisco. \u0418\u0437 \u043d\u0438\u0445 \u043f\u043e\u043b\u0442\u043e\u0440\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u0445\u043e\u0441\u0442\u043e\u0432 \u2014 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432  \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/944"}, {"timestamp": "2023-10-20T13:07:29Z", "date_only": false, "value": "2023-10-20T13:07:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/144370", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "060c4f7e-3e2a-4a4b-befd-4b0c3872cbda", "content": "https://ift.tt/F7YUZvd\nTens of thousands Cisco IOS XE devices were hacked by exploiting CVE-2023-20198", "url": "https://t.me/ctinow/144370"}, {"timestamp": "2023-10-20T16:18:02Z", "date_only": false, "value": "2023-10-20T16:18:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5511", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fbf0d36a-3764-4075-8489-dd728624afec", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a1vere$k POC on the CVE-2023-20198\nURL\uff1ahttps://github.com/iveresk/cve-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5511"}, {"timestamp": "2023-10-20T16:43:51Z", "date_only": false, "value": "2023-10-20T16:43:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-10-20T22:24:11Z", "date_only": false, "value": "2023-10-20T22:24:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/72709", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cf1d6546-1870-4dfc-b59b-d61cf1dc72f0", "content": "\ud83d\udd74 Cisco Finds New Zero Day Bug, Pledges Patches in Days \ud83d\udd74\n\nA patch for the max severity zero-day bug tracked as CVE-2023-20198 is coming soon, but the bug has already led to the compromise of tens of thousands of Cisco devices. And now, there's a new unpatched threat.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/72709"}, {"timestamp": "2023-10-21T01:18:29Z", "date_only": false, "value": "2023-10-21T01:18:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18656", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a338986b-84c5-4359-83cc-9ff4858179c4", "content": "\u200aCisco discloses new IOS XE zero-day exploited to deploy malware implant\n\nCisco disclosed a new high-severity zero-day (CVE-2023-20273) today, actively exploited to deploy malicious implants on IOS XE devices compromised using the CVE-2023-20198 zero-day unveiled earlier this week. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-discloses-new-ios-xe-zero-day-exploited-to-deploy-malware-implant/", "url": "https://t.me/BleepingComputer/18656"}, {"timestamp": "2023-10-21T02:04:48Z", "date_only": false, "value": "2023-10-21T02:04:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18657", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "89032e02-1422-4969-ad4f-3aa914b40fa8", "content": "Latest news and stories from BleepingComputer.com\nCisco discloses new IOS XE zero-day exploited to deploy malware implant\n\nCisco disclosed a new high-severity zero-day (CVE-2023-20273) today, actively exploited to deploy malicious implants on IOS XE devices compromised using the CVE-2023-20198 zero-day unveiled earlier this week. [...]", "url": "https://t.me/BleepingComputer/18657"}, {"timestamp": "2023-10-21T06:34:57Z", "date_only": false, "value": "2023-10-21T06:34:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/966", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "97a50912-647b-4e89-9a21-b9ea1c970d6b", "content": "Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices\nhttps://thehackernews.com/2023/10/cisco-zero-day-exploited-to-implant.html\n\nCisco has warned of a new zero-day flaw in IOS XE that has been actively exploited by an unknown threat actor to deploy a\u00a0malicious Lua-based implant\u00a0on susceptible devices.\nTracked as\u00a0CVE-2023-20273\u00a0(CVSS score: 7.2), the issue relates to a privilege escalation flaw in the web UI feature and is said to have been used alongside CVE-2023-20198 as part of an exploit chain.\n\"The attacker first", "url": "https://t.me/KomunitiSiber/966"}, {"timestamp": "2023-10-21T07:53:13Z", "date_only": false, "value": "2023-10-21T07:53:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/8QclPQdNk2tBDh7iCM6hN4Ie8GbuWM6CcrUhxJ5Rr7asPg", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1a63e26d-0cc8-41b3-95a8-20fdb2dacb1c"}, {"timestamp": "2023-10-21T12:27:35Z", "date_only": false, "value": "2023-10-21T12:27:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ylEC10fMJr-LdHw3csP_5TeTJBZ8Q8ZrqrHxu1sGszR9gA4", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "03feb402-8cf8-446d-989f-13981c937984"}, {"timestamp": "2023-10-21T14:57:23Z", "date_only": false, "value": "2023-10-21T14:57:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3497", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "89f07052-cf68-4ddc-865f-0eb57670346a", "content": "\u200b\u26a1\ufe0fCisco \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 IOS XE \u0438 \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u043f\u0430\u0442\u0447\u0438.\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043b\u0438\u043d\u0438\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0438 \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u044f \u043e \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432, \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 zero-day.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043f\u043e\u0441\u0442 \u043e CVE-2023-20198, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f, \u0447\u0442\u043e \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS 10, \u0438 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b . \u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0438 Cisco \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u0437\u0430\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u043e\u0441\u044c \u0432 \u0431\u043b\u043e\u0433\u0435 \u0438 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u043b\u0430 \u0442\u0440\u0435\u0432\u043e\u0433\u0443 \u0441\u0440\u0435\u0434\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432. Cisco \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 CVE-2021-1435, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 2021 \u0433\u043e\u0434\u0443.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 \u044d\u0442\u043e\u0433\u043e \u0431\u0430\u0433\u0430, \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438, \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \"\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0435\u0449\u0435 \u043d\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\".\n\nCisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0441\u043e\u0432\u0435\u0442 \u043f\u043e CVE-2023-20198, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2023-20273, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0435\u0448\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441. \u041e\u043d\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0431\u043b\u043e\u0433, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0442\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0439\u0434\u0435\u0442 \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435, \u0440\u0435\u0448\u0438\u0442 \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041e\u043d\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-1435, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0430\u044f \u0432 2021 \u0433\u043e\u0434\u0443, \"\u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u044d\u0442\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e\".\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b Cisco \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u044d\u0442\u043e\u0442 \u0431\u0430\u0433, \u043c\u043e\u0433\u0443\u0442 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043a\u0430\u043a \"\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f \u0441\u0435\u0442\u0438\".\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3497"}, {"timestamp": "2023-10-22T07:24:39Z", "date_only": false, "value": "2023-10-22T07:24:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackyourmom/5597", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "95577825-e9a1-430d-bde7-3beab4bc7d17", "content": "\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f Cisco \u0432\u0438\u044f\u0432\u0438\u043b\u0430 \u0449\u0435 \u043e\u0434\u043d\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0443 \u0437 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u044e \u043b\u0456\u043d\u0456\u0454\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u0431\u0435\u0437\u043f\u0435\u0447\u0435\u043d\u043d\u044f \u043f\u0456\u0441\u043b\u044f \u0442\u043e\u0433\u043e, \u044f\u043a \u0435\u043a\u0441\u043f\u0435\u0440\u0442\u0438 \u0437 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0432\u0438\u0441\u043b\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u0443\u0440\u0435\u043d\u043d\u044f \u0442\u0438\u0441\u044f\u0447\u0430\u043c\u0438 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \"zero-day\". \u041d\u0430 \u0446\u044c\u043e\u043c\u0443 \u0442\u0438\u0436\u043d\u0456 Cisco \u043e\u043f\u0443\u0431\u043b\u0456\u043a\u0443\u0432\u0430\u043b\u0430 \u0437\u0432\u0456\u0442 \u0442\u0430 \u0434\u043e\u043a\u043b\u0430\u0434\u043d\u0438\u0439 \u043f\u043e\u0441\u0442 \u0449\u043e\u0434\u043e CVE-2023-20198, \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u0436\u0430\u044e\u0447\u0438, \u0449\u043e \u0437\u0430\u0433\u0440\u043e\u0437\u0430 \u043c\u0430\u0454 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0438\u0439 \u0431\u0430\u043b CVSS 10 \u0456 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0454\u0442\u044c\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0438 \u0431\u0443\u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0438\u0439, \u0456 Cisco \u043d\u0430\u0441\u0442\u0456\u0439\u043b\u0438\u0432\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0432\u0430\u043b\u0430 \u043a\u043b\u0456\u0454\u043d\u0442\u0430\u043c \u043f\u0435\u0440\u0435\u043a\u043e\u043d\u0430\u0442\u0438\u0441\u044f, \u0449\u043e \u0437\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0456 \u043f\u0440\u0438\u0441\u0442\u0440\u043e\u0457 \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0456 \u0437 \u0406\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443. \u0412 \u043f'\u044f\u0442\u043d\u0438\u0446\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0456\u0447\u043d\u0438\u0439 \u0433\u0456\u0433\u0430\u043d\u0442 \u0437\u0430\u044f\u0432\u0438\u0432, \u0449\u043e \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0446\u0456\u0454\u0457 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0438 \u0431\u0443\u0434\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0438\u0439 \u0443 \u043d\u0435\u0434\u0456\u043b\u044e. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0442\u0430\u043a\u043e\u0436 \u0440\u043e\u0437\u0433\u043b\u044f\u043d\u0443\u043b\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043f\u0440\u043e \u044f\u043a\u0443 \u0437\u0433\u0430\u0434\u0443\u0432\u0430\u043b\u043e\u0441\u044f \u0432 \u0431\u043b\u043e\u0437\u0456 \u0456 \u044f\u043a\u0430 \u0432\u0438\u043a\u043b\u0438\u043a\u0430\u043b\u0430 \u0442\u0440\u0438\u0432\u043e\u0433\u0443 \u0441\u0435\u0440\u0435\u0434 \u0435\u043a\u0441\u043f\u0435\u0440\u0442\u0456\u0432. Cisco \u0441\u043f\u043e\u0447\u0430\u0442\u043a\u0443 \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u0438\u043b\u0430, \u0449\u043e \u043f\u0456\u0434 \u0447\u0430\u0441 \u0430\u0442\u0430\u043a, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0438\u0445 \u0437 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044e, \u0457\u0445 \u0444\u0430\u0445\u0456\u0432\u0446\u0456 \u0437 \u0440\u0435\u0430\u0433\u0443\u0432\u0430\u043d\u043d\u044f \u043d\u0430 \u0456\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0438 \u043f\u043e\u043c\u0456\u0442\u0438\u043b\u0438, \u0449\u043e \u0445\u0430\u043a\u0435\u0440\u0438 \u0442\u0430\u043a\u043e\u0436 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438 CVE-2021-1435, \u044f\u043a\u0443 Cisco \u0432\u0438\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 2021 \u0440\u043e\u0446\u0456. \u041f\u0440\u0438\u0441\u0442\u0440\u043e\u0457, \u043f\u043e\u0432\u043d\u0456\u0441\u0442\u044e \u0437\u0430\u0445\u0438\u0449\u0435\u043d\u0456 \u0432\u0456\u0434 \u0446\u0456\u0454\u0457 \u043f\u043e\u043c\u0438\u043b\u043a\u0438, \u0431\u0443\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0456 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0438\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u043c\u0438, \u044f\u043a\u0456 \u0443\u0441\u043f\u0456\u0448\u043d\u043e \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044f \"\u0437\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0449\u0435 \u043d\u0435 \u0432\u0438\u0437\u043d\u0430\u0447\u0435\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0456\u0437\u043c\u0443\". Cisco \u043e\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u044e \u043f\u043e\u0440\u0430\u0434\u0443 \u0449\u043e\u0434\u043e CVE-2023-20198, \u0432\u043a\u043b\u044e\u0447\u0438\u0432\u0448\u0438 \u043d\u043e\u0432\u0443 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c, \u044f\u043a\u0443 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0443\u044e\u0442\u044c \u044f\u043a CVE-2023-20273, \u0449\u043e \u0432\u0438\u0440\u0456\u0448\u0443\u0454 \u0446\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0435 \u043f\u0438\u0442\u0430\u043d\u043d\u044f. \u0412\u043e\u043d\u0438 \u043e\u043d\u043e\u0432\u0438\u043b\u0438 \u0431\u043b\u043e\u0433, \u0449\u043e\u0431 \u043f\u043e\u044f\u0441\u043d\u0438\u0442\u0438, \u0449\u043e \u043f\u0430\u0442\u0447, \u044f\u043a\u0438\u0439 \u0432\u0438\u0439\u0434\u0435 \u0432 \u043d\u0435\u0434\u0456\u043b\u044e, \u0432\u0438\u0440\u0456\u0448\u0438\u0442\u044c \u043e\u0431\u0438\u0434\u0432\u0456 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0438. \u0412\u043e\u043d\u0438 \u0434\u043e\u0434\u0430\u043b\u0438, \u0449\u043e \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2021-1435, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 2021 \u0440\u043e\u0446\u0456, \"\u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0435 \u0432\u0432\u0430\u0436\u0430\u0454\u0442\u044c\u0441\u044f \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u043e\u044e \u0437 \u0446\u0456\u0454\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u0456\u0441\u0442\u044e\". \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0447\u0456\u043f\u0430\u0454 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0438, \u043a\u043e\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0438, \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0443, \u0431\u0435\u0437\u0434\u0440\u043e\u0442\u043e\u0432\u0456 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u0440\u0438 Cisco \u0442\u0430 \u0431\u0430\u0433\u0430\u0442\u043e \u0456\u043d\u0448\u0438\u0445 \u043f\u0440\u0438\u0441\u0442\u0440\u043e\u0457\u0432. \u0415\u043a\u0441\u043f\u0435\u0440\u0442\u0438 \u0437 \u043a\u0456\u0431\u0435\u0440\u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0432\u0432\u0430\u0436\u0430\u044e\u0442\u044c, \u0449\u043e \u0445\u0430\u043a\u0435\u0440\u0438, \u044f\u043a\u0456 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0443\u044e\u0442\u044c \u0446\u044e \u043f\u043e\u043c\u0438\u043b\u043a\u0443, \u043c\u043e\u0436\u0443\u0442\u044c \u043c\u043e\u043d\u0456\u0442\u043e\u0440\u0438\u0442\u0438 \u043c\u0435\u0440\u0435\u0436\u0435\u0432\u0438\u0439 \u0442\u0440\u0430\u0444\u0456\u043a, \u043f\u0435\u0440\u0435\u0445\u043e\u043f\u043b\u044e\u0432\u0430\u0442\u0438 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0433\u043e\u0432\u0430\u043d\u0456 \u043c\u0435\u0440\u0435\u0436\u0435\u0432\u0456 \u043a\u043e\u043c\u0443\u043d\u0456\u043a\u0430\u0446\u0456\u0457, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u0438 \u0442\u0430 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u0438 \u043c\u0435\u0440\u0435\u0436\u0435\u0432\u0438\u0439 \u0442\u0440\u0430\u0444\u0456\u043a, \u043f\u043e\u0440\u0443\u0448\u0443\u0432\u0430\u0442\u0438 \u0437\u0430\u0445\u0438\u0449\u0435\u043d\u0456 \u043c\u0435\u0440\u0435\u0436\u0435\u0432\u0456 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438 \u0442\u0430 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u0438\u0441\u0442\u0440\u0456\u0439 \u044f\u043a \"\u043f\u043e\u0441\u0442\u0456\u0439\u043d\u0443 \u043e\u043f\u043e\u0440\u0443 \u0434\u043b\u044f \u043c\u0435\u0440\u0435\u0436\u0456\".", "url": "https://t.me/hackyourmom/5597"}, {"timestamp": "2023-10-22T16:45:48Z", "date_only": false, "value": "2023-10-22T16:45:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-10-22T22:00:00Z", "date_only": false, "value": "2023-10-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2658", "record": "WID-SEC-W-2023-2658", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-22T22:00:00Z", "date_only": false, "value": "2023-10-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2658", "record": "WID-SEC-W-2023-2658", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-10-22T23:14:08Z", "date_only": false, "value": "2023-10-22T23:14:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JgvYIW4biXG1JXys_MBRNoNCLhrSewkoVIbGMljfH-iJ", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "eda21ff4-15b0-4e22-b8a4-9ca6f93988c1"}, {"timestamp": "2023-10-23T00:00:00Z", "date_only": false, "value": "2023-10-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0878", "record": "CERTFR-2023-AVI-0878", "field": "initial_release_date"}, {"timestamp": "2023-10-23T00:00:00Z", "date_only": false, "value": "2023-10-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0878", "record": "CERTFR-2023-AVI-0878", "field": "revisions.0.revision_date"}, {"timestamp": "2023-10-23T09:35:18Z", "date_only": false, "value": "2023-10-23T09:35:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/945", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5e13f109-707d-431d-8d31-184cdda34eb6", "content": "\u26a1\ufe0f\u26a1\ufe0f\u26a1\ufe0f\u26a1\ufe0f\u0412 Cisco \u043d\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445. \u041d\u0430\u0448\u043b\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0432 IOS XE, \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \u0444\u0438\u043a\u0441 \n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435, \u043f\u043e\u0445\u043e\u0436\u0435, \u0442\u043e\u0436\u0435 \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \u0444\u0438\u043a\u0441 \ud83d\ude1e. \n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c\u0443 CVE-2023-20198 (CVSS 10), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2023-20273 (CVSS 7.2), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e root.\n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0440\u0435\u0448\u0438\u043b\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435, \u043c\u044b \u0441\u043a\u043e\u0440\u043e \u0443\u0437\u043d\u0430\u0435\u043c \ud83d\ude0f.\n\u0417\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0438\u0434\u0438\u043c\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 50 \u0442\u044b\u0441\u044f\u0447, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043d\u0438\u0437\u0438\u043b\u043e\u0441\u044c \u0434\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043e\u0442\u0435\u043d. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0435\u0434\u0438\u043d\u043e\u0434\u0443\u0448\u043d\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u043e \u2014 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0438\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0432\u043e\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u0430\u043a\u0438\u0435 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 IoC \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b \u2014 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0432\u043e\u043f\u0440\u043e\u0441.\n\n\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043e\u0439-\u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco \u043d\u0430 IOS XE, \u0431\u0443\u0434\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0441\u0432\u0435\u0436\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043d\u0430\u0434\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/945"}, {"timestamp": "2023-10-23T13:04:22Z", "date_only": false, "value": "2023-10-23T13:04:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4993", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d89fd364-260f-4fdc-9114-dd36fc08274a", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 Cisco IOS XE 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u0430\u0440\u0434\u0438\u043d\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0438\u043b\u0430\u0441\u044c.\n\n\u0415\u0441\u043b\u0438 \u0432 \u0432\u043a\u0440\u0430\u0442\u0446\u0435, \u0442\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 28 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u044c\u0442\u0441\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-20198 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f IOS XE, \u043a\u043e\u0442\u043e\u0440\u0443\u044e 16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 Cisco.\n\n0-day \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441 \u0441\u0430\u043c\u044b\u043c \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0432 \u0441\u0435\u0442\u0438 \u043f\u0430\u043d\u0435\u043b\u044c\u044e WebUI.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0432\u0442\u043e\u0440\u043e\u0439 0-day, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 IOS XE \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0412 Cisco \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Lua \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0418 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u0430\u0433\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 2021 \u0433\u043e\u0434\u0443 CVE-2021-1435. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0435\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u0440\u0443\u0433\u0430\u044f 0-day, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u043a\u0430\u043a CVE-2023-20273.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, CVE-2021-1435 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435, \u0447\u0442\u043e \u0441 \u043a\u043e\u043d\u0446\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0430\u0447\u0430\u043b \u0438\u0441\u0447\u0435\u0437\u0430\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 Lua, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0441\u044f \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 Cisco IOS XE.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Censys \u0438 Shadowserver, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IOS XE \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u043b\u043e \u0434\u043e 42 000 \u0438 \u0434\u0430\u0436\u0435 \u0431\u043e\u043b\u0435\u0435, \u043d\u043e \u0432 \u044d\u0442\u0438 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043e\u043d\u043e \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043d\u0435 \u0443\u043f\u0430\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0434\u043e\u00a0500-1000.\n\n\u041a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0432\u044b\u0437\u0432\u0430\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c\u0438 \u0441\u0430\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043a \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0430 \u0441\u0430\u043c \u043e\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u043b \u043d\u0438\u0437\u043a\u043e\u0439 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u044c\u044e.\n\n\u041d\u043e \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f \u0434\u0440\u0443\u0433\u0438\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u0430\u043a \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Barracuda.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u044f, Cisco \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u043e\u0431\u043e\u0438\u0445 0-day.\n\n\u041f\u0440\u0430\u0432\u0434\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0432\u0441\u0435 \u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438 \u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Cisco \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u043d\u0435 \u0434\u0430\u0435\u0442, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043c\u043e\u043b\u0447\u0430\u043d\u0438\u0435.\n\n\u041f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0435\u0449\u0435 \u0442\u043e, \u0447\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0441\u044f \u0435\u0449\u0435 \u043e\u0434\u0438\u043d 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 CVE-2023-20109, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u043d\u043e\u0441\u0438\u0442 \u0438\u043c \u043d\u0435\u043f\u043b\u043e\u0445\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/4993"}, {"timestamp": "2023-10-23T14:11:01Z", "date_only": false, "value": "2023-10-23T14:11:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18677", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d10795a5-396e-47a0-b2c4-7f2060b3dcb5", "content": "Latest news and stories from BleepingComputer.com\nCisco patches IOS XE zero-days used to hack over 50,000 devices\n\nCisco has addressed the two vulnerabilities (CVE-2023-20198 and CVE-2023-20273) that hackers exploited to compromise tens of thousands of IOS XE devices over the past week. [...]", "url": "https://t.me/BleepingComputer/18677"}, {"timestamp": "2023-10-23T17:15:56Z", "date_only": false, "value": "2023-10-23T17:15:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BitLenta/19937", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "316a5769-fd86-47eb-9b4c-c8ab81332d21", "content": "Cisco \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 IOS XE\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2023-20273), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IOS XE, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0440\u0443\u0433\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 CVE-2023-20198. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043e\u0431\u0449\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 50 000.\n\nhttps://xakep.ru/2023/10/23/cisco-ios-xe-attacks-and-0day/", "url": "https://t.me/BitLenta/19937"}, {"timestamp": "2023-10-23T18:22:52Z", "date_only": false, "value": "2023-10-23T18:22:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18679", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9bce56a2-1e54-4aa9-87f5-db8e92e7fbde", "content": "\u200aCisco patches IOS XE zero-days used to hack over 50,000 devices\n\nCisco has addressed the two vulnerabilities (CVE-2023-20198 and CVE-2023-20273) that hackers exploited to compromise tens of thousands of IOS XE devices over the past week. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-patches-ios-xe-zero-days-used-to-hack-over-50-000-devices/", "url": "https://t.me/BleepingComputer/18679"}, {"timestamp": "2023-10-23T18:38:02Z", "date_only": false, "value": "2023-10-23T18:38:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14881", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "81173d1c-d9a0-412b-8223-765dabf79685", "content": "Cisco \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 IOS XE\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2023-20273), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IOS XE, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0440\u0443\u0433\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 CVE-2023-20198. \u0412 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043e\u0431\u0449\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 50 000.\n\nhttps://xakep.ru/2023/10/23/cisco-ios-xe-attacks-and-0day/", "url": "https://t.me/xakep_ru/14881"}, {"timestamp": "2023-10-23T19:33:47Z", "date_only": false, "value": "2023-10-23T19:33:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/5532", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f7b17997-ae8c-4711-ac12-03b28f1054ae", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aThis is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273\nURL\uff1ahttps://github.com/Shadow0ps/CVE-2023-20198-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5532"}, {"timestamp": "2023-10-23T19:59:06Z", "date_only": false, "value": "2023-10-23T19:59:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-10-24T06:00:00Z", "date_only": false, "value": "2023-10-24T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-297-01", "record": "ICSA-23-297-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-24T06:00:00Z", "date_only": false, "value": "2023-10-24T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-297-01", "record": "ICSA-23-297-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-24T08:37:10Z", "date_only": false, "value": "2023-10-24T08:37:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/337", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "38ac9b54-ae61-486a-ab09-ffcc8232c2df", "content": "A backdoor is implanted on Cisco devices by exploiting a pair of zero-day flaws in IOS XE software that has been modified by the threat actor so as to escape visibility via previous fingerprinting methods.\n\nThe attacks entail fashioning CVE-2023-20198 (CVSS score: 10.0) and CVE-2023-20273 (CVSS score: 7.2) into an exploit chain that grants the threat actor the ability to gain access to the devices, create a privileged account, and ultimately deploy a Lua-based implant on the devices.\n\nhttps://thehackernews.com/2023/10/backdoor-implant-on-hacked-cisco.html", "url": "https://t.me/ckuRED/337"}, {"timestamp": "2023-10-24T08:37:17Z", "date_only": false, "value": "2023-10-24T08:37:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11807", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "21c9c6ba-a31a-48d8-8b83-b621684309b4", "content": "A backdoor is implanted on Cisco devices by exploiting a pair of zero-day flaws in IOS XE software that has been modified by the threat actor so as to escape visibility via previous fingerprinting methods.\n\nThe attacks entail fashioning CVE-2023-20198 (CVSS score: 10.0) and CVE-2023-20273 (CVSS score: 7.2) into an exploit chain that grants the threat actor the ability to gain access to the devices, create a privileged account, and ultimately deploy a Lua-based implant on the devices.\n\nhttps://thehackernews.com/2023/10/backdoor-implant-on-hacked-cisco.html", "url": "https://t.me/cKure/11807"}, {"timestamp": "2023-10-24T09:52:47Z", "date_only": false, "value": "2023-10-24T09:52:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5540", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6f4d0b79-e8be-4e29-8ec9-8989bbcd5989", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCheck a target IP for CVE-2023-20198\nURL\uff1ahttps://github.com/kacem-expereo/CVE-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5540"}, {"timestamp": "2023-10-24T14:29:43Z", "date_only": false, "value": "2023-10-24T14:29:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4999", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "40273c80-6cff-4527-b47e-60e15388664f", "content": "\u041a\u0430\u043a \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c Fox-IT NCC Group, \u0431\u044d\u043a\u0434\u043e\u0440 Lua, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u044b 0-day \u0432 IOS XE (CVE-2023-20198 \u0438\u00a0CVE-2023-20273), \u0431\u044b\u043b \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \n\n\u0412\u044b\u044f\u0432\u0438\u0442\u044c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0443\u044e \u043d\u0430\u043c\u0438 \u0432\u0447\u0435\u0440\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u044e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0441\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043c\u043f\u043b\u0430\u043d\u0442 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0438\u0432\u0435\u043d, \u043d\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u044d\u0442\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u043f\u043e\u0447\u0435\u043c\u0443 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0440\u0435\u0437\u043a\u043e\u00a0\u0443\u043f\u0430\u043b\u043e\u00a0\u0441 40 000 \u0434\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043e\u0442\u0435\u043d, \u0447\u0442\u043e \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u043c \u0432\u043d\u0435\u0441\u0435\u043d\u0435\u043d\u0438\u0438 \u0430\u043a\u0442\u043e\u0440\u043e\u043c \u043a\u0430\u043a\u0438\u0445-\u0442\u043e\u00a0\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Fox-IT \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0438\u0441\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 37 000.\n\nCisco, \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430\u00a0\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u00a0\u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430\u00a0\u0432 \u0441\u0432\u043e\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445, \u043f\u043e\u0434\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430.", "url": "https://t.me/true_secator/4999"}, {"timestamp": "2023-10-24T15:55:42Z", "date_only": false, "value": "2023-10-24T15:55:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oE3hWCiKh5wLcwBqXtReTyW_wZVOp6ZWWNV5yZkxf5aH", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "69d88d55-ff45-47d8-be1f-8d256dc7b8ac"}, {"timestamp": "2023-10-24T21:10:07Z", "date_only": false, "value": "2023-10-24T21:10:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/xIrHtmEFR71nA5dvRshdfYB2qr7aR7huOGVM9bnInazO4g", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f820adcb-1656-46bb-92bc-8e9ad3754fa9"}, {"timestamp": "2023-10-25T00:16:14Z", "date_only": false, "value": "2023-10-25T00:16:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/3328", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "93cfecf8-e4cb-46c3-81e2-111abd856f7b", "content": "#cisco #cve #webshell #scanner #blueteam\n\n[ Cisco IOS XE Device Scanner for CVE-2023-20198 & CVE-2023-20273 ]\n\nWebshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273. \n\nImportant! This is not a POC for exploitation. This is a OSINT/Blue Team/Research tool.\n\nAuthor: Shadow0ps\n\nhttps://github.com/Shadow0ps/CVE-2023-20198-Scanner", "url": "https://t.me/poxek/3328"}, {"timestamp": "2023-10-25T15:30:05Z", "date_only": false, "value": "2023-10-25T15:30:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5006", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bcaa762f-a1c0-4966-91f9-3b05b27be84e", "content": "\u0412\u043b\u0438\u044f\u043d\u0438\u0435 0-day Cisco IOS XE \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0435\u0449\u0435 \u0448\u0438\u0440\u0435, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c.\n\nRockwell Automation \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0430\u0441\u044c \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441 \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f 0-day \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b Stratix.\n\n\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0435 0-day \u0432 Cisco IOS XE (CVE-2023-20198 \u0438 CVE-2023-20273), \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 Lua, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u0418\u043d\u0444\u043e\u0441\u0435\u043a-\u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u043e\u00a0\u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u00a0\u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Cisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0435\u0440\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 0-day Cisco IOS XE.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Rockwell \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b Stratix 5800 \u0438 5200, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u041e\u0421 Cisco IOS XE, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-20198.\n\n\u041d\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u044b \u0432\u043b\u0438\u044f\u043d\u0438\u044e \u043b\u0438\u0448\u044c \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 IOS XE.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Rockwell\u00a0\u0432\u044b\u0448\u043b\u0438 \u0434\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e 0-day,\u00a0\u0432 \u043d\u0438\u0445 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u00a0CVE-2023-20273, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438 \u041f\u041e IOS XE \u043d\u0430 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Rockwell.\n\n\u0425\u043e\u0442\u044f Rockwell \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442, Cisco \u0432\u0441\u0435 \u0436\u0435 \u0441\u043c\u043e\u0433\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u0440\u0430\u0432\u0434\u0430 \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0435\u043c\u0443 \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u044f\u0441\u043d\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u00a0\u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 Cisco, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044f \u0441\u0432\u043e\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/5006"}, {"timestamp": "2023-10-25T18:01:48Z", "date_only": false, "value": "2023-10-25T18:01:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-10-25T22:55:51Z", "date_only": false, "value": "2023-10-25T22:55:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thebugbountyhunter/7930", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7c40abb6-9b09-4754-aa52-e48b70027489", "content": "Cisco IOS XE CVE-2023-20198 and CVE-2023-20273: WebUI Internals, Patch Diffs, and Theory Crafting\n\nhttps://www.horizon3.ai/cisco-ios-xe-cve-2023-20198-theory-crafting/", "url": "https://t.me/thebugbountyhunter/7930"}, {"timestamp": "2023-10-26T03:23:43Z", "date_only": false, "value": "2023-10-26T03:23:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/145489", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "15a17e1a-15d8-4882-b048-9a8216bbb0f4", "content": "https://ift.tt/1HWrPKL\nCisco IOS XE CVE-2023-20198 and CVE-2023-20273: WebUI Internals, Patch Diffs, and Theory Crafting", "url": "https://t.me/ctinow/145489"}, {"timestamp": "2023-10-26T16:32:40Z", "date_only": false, "value": "2023-10-26T16:32:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-10-27T02:08:48Z", "date_only": false, "value": "2023-10-27T02:08:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/19833", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6990f7e2-a845-47d8-8f67-56ef3ba65d38", "content": "\u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 37 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE \u0432\u0441\u0451 \u0435\u0449\u0451 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u043f\u0430\u0441\u043d\u0435\u0439\u0448\u0435\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n \n\u0415\u0449\u0451 \u0441 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c IOS XE \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u043e\u0434 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2023-20198 \u0438 CVE-2023-20273. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434 \u0434\u043b\u044f \u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438.\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u0438\u0445 \u0431\u0430\u0433\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u044d\u043a\u0434\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u2328\ufe0f\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 50 000, \u043d\u043e \u0437\u0430\u0442\u0435\u043c \u0440\u0435\u0437\u043a\u043e \u043f\u043e\u0448\u043b\u043e \u043d\u0430 \u0441\u043f\u0430\u0434. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u043c\u0430\u043b\u0432\u0430\u0440\u044c, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u0432\u043e\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435. \u0422\u0435\u043f\u0435\u0440\u044c \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u0435\u043d \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439.\n\n\ud83d\udc49 \u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438? \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c curl-\u043a\u043e\u043c\u0430\u043d\u0434\u0443:\ncurl -k -H \"Authorization: 0ff4fbf0ecffa77ce8d3852a29263e263838e9bb\" -X POST https://systemip/webui/logoutconfirm.html?logon_hash=1.\n\n\u0415\u0441\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 0123456789abcdef01, \u0437\u043d\u0430\u0447\u0438\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442.\n\n\u0425\u043e\u0442\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/19833"}, {"timestamp": "2023-10-27T13:57:46Z", "date_only": false, "value": "2023-10-27T13:57:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2023-10-30T00:00:00Z", "date_only": false, "value": "2023-10-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "revisions.1.revision_date"}, {"timestamp": "2023-10-30T00:00:00Z", "date_only": false, "value": "2023-10-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0878", "record": "CERTFR-2023-AVI-0878", "field": "revisions.1.revision_date"}, {"timestamp": "2023-10-30T13:14:35Z", "date_only": false, "value": "2023-10-30T13:14:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2023-10-30T13:53:31Z", "date_only": false, "value": "2023-10-30T13:53:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5613", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9a1941e9-429d-4206-9174-46b4f4e1a1e2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)\nURL\uff1ahttps://github.com/fox-it/cisco-ios-xe-implant-detection\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5613"}, {"timestamp": "2023-10-31T00:00:00Z", "date_only": false, "value": "2023-10-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "revisions.2.revision_date"}, {"timestamp": "2023-10-31T09:05:13Z", "date_only": false, "value": "2023-10-31T09:05:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18780", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "98e1043c-1eca-45d3-9556-6f26657cb3fa", "content": "\u200aExploit released for critical Cisco IOS XE flaw, many hosts still hacked\n\nPublic exploit code is now available for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198 that was leveraged as a zero-day to hack tens of thousands of devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/exploit-released-for-critical-cisco-ios-xe-flaw-many-hosts-still-hacked/", "url": "https://t.me/BleepingComputer/18780"}, {"timestamp": "2023-10-31T10:46:09Z", "date_only": false, "value": "2023-10-31T10:46:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/146390", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "81530f02-059f-45ec-8b3e-c945c004dd11", "content": "https://ift.tt/yFDx4z5\nCisco IOS XE CVE-2023-20198: Deep Dive and POC", "url": "https://t.me/ctinow/146390"}, {"timestamp": "2023-10-31T12:20:06Z", "date_only": false, "value": "2023-10-31T12:20:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5027", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "54c58134-d55b-46da-b85a-d3103e62fcff", "content": "\u0411\u0443\u0434\u043e\u0440\u0430\u0436\u0430\u0449\u0430\u044f \u0443\u043c\u044b \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco IOS XE (CVE-2023-20198) \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c.\n\n\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441\u0442\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0432\u0443\u0448\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 SECUINFRA.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3.ai \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f CVE-2023-20198.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u0441\u043b\u0443\u0436\u0431\u0435 WMSA \u0432\u00a0iosd \u2014\u00a0\u043c\u043e\u0449\u043d\u043e\u043c \u0434\u0432\u043e\u0438\u0447\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0432 Cisco IOS XE, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f OpenResty (\u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 \u0431\u0430\u0437\u0435 Nginx \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 Lua), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439\u00a0webui, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0434\u043b\u044f CVE-2023-20198.\n\nWSMA \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0440\u043e\u0441\u044b SOAP, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u043d\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 15-\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0421 \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u044b \u043d\u0430 \u0434\u0438\u0441\u043a \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LeakIX\u00a0\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0443\u0436\u0435 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u0445 Cisco IOS XE \u043e\u0442\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u044b: show ip interface brief, show ip dns view \u0438 show ip name-servers.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Cisco \u0432\u0447\u0435\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0439\u00a0\u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0434\u043b\u044f CVE-2023-20198, \u043e\u0431\u044a\u044f\u0432\u0438\u0432 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f IOS XE \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u0418 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u0432\u043e\u0435\u0433\u043e \u041f\u041e IOS XE, \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439  \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0440\u0438\u0441\u043a\u0443.\n\n\u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0442 Fox-IT, \u0438\u0437 \u0447\u0438\u0441\u043b\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u043e 38 000.", "url": "https://t.me/true_secator/5027"}, {"timestamp": "2023-10-31T13:18:17Z", "date_only": false, "value": "2023-10-31T13:18:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/146431", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9bb7d616-ceb2-4346-9783-31f13fb4c860", "content": "https://ift.tt/8hR2aVb\nExperts released PoC exploit code for Cisco IOS XE flaw CVE-2023-20198", "url": "https://t.me/ctinow/146431"}, {"timestamp": "2023-10-31T13:50:32Z", "date_only": false, "value": "2023-10-31T13:50:32.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Phby6p-MNEwRZOQPsbZ4uDF1WSd94ClKWFbhQsb8w819Q2o", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "914b818d-3fd8-43dd-bc94-4bbf66f90311"}, {"timestamp": "2023-10-31T14:13:25Z", "date_only": false, "value": "2023-10-31T14:13:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1803", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1a3c8c17-2c70-493d-bf96-2fcd0bb9f598", "content": "Cisco IOS XE\nCVE-2023-20198\nPOC creates a user named baduser with privilege level 15", "url": "https://t.me/proxy_bar/1803"}, {"timestamp": "2023-10-31T18:39:09Z", "date_only": false, "value": "2023-10-31T18:39:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2023-10-31T19:53:19Z", "date_only": false, "value": "2023-10-31T19:53:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eyfDm4S1elWJIQ4DSp-o2rm6hm1NJW5x71vFYhWzgAj5mA", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c59faa56-34fd-4137-97d5-0496e668274e"}, {"timestamp": "2023-11-01T15:44:28Z", "date_only": false, "value": "2023-11-01T15:44:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2023-11-01T15:44:28Z", "date_only": false, "value": "2023-11-01T15:44:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-01T19:39:56Z", "date_only": false, "value": "2023-11-01T19:39:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14926", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a10bbe4f-5da5-4908-831c-e1545be538e4", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco IOS XE\n\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco IOS XE (CVE-2023-20198), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0436\u0438\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043d\u0435\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435.\n\nhttps://xakep.ru/2023/11/01/cisco-ios-xe-exploit/", "url": "https://t.me/xakep_ru/14926"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "revisions.3.revision_date"}, {"timestamp": "2023-11-02T03:30:58Z", "date_only": false, "value": "2023-11-02T03:30:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/19891", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fd5cc513-ef0e-4c3b-b8fc-93dd3fb6888e", "content": "\u0414\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco IOS XE \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\n\nCVE-2023-20198 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0436\u0438\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043d\u0435\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u044f 17.3 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043f\u0435\u0440\u0435\u0434 \u044d\u0442\u0438\u043c \u0431\u0430\u0433\u043e\u043c, \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Software Maintenance Updates.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/19891"}, {"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0878", "record": "CERTFR-2023-AVI-0878", "field": "last_revision_date"}, {"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0878", "record": "CERTFR-2023-AVI-0878", "field": "revisions.2.revision_date"}, {"timestamp": "2023-11-03T13:23:03Z", "date_only": false, "value": "2023-11-03T13:23:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5660", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c0bcdf2c-757b-4084-8b37-fcb33090d62b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAn Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers \nURL\uff1ahttps://github.com/sanjai-AK47/CVE-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5660"}, {"timestamp": "2023-11-06T15:32:11Z", "date_only": false, "value": "2023-11-06T15:32:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/181", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f48fbb7f-3def-4a7c-acd5-038d0fdc7c7e", "content": "\u2604\ufe0fCVE-2023-20198: Cisco IOS XE\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Cisco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434\ud83d\udd0a\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/Pushkarup/CVE-2023-20198\n\n#cve #poc #exploit", "url": "https://t.me/ap_security/181"}, {"timestamp": "2023-11-06T15:32:11Z", "date_only": false, "value": "2023-11-06T15:32:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/239", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9d384e16-7d9f-4336-aad0-1a6397f362b9", "content": "\u2604\ufe0fCVE-2023-20198: Cisco IOS XE\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Cisco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434\ud83d\udd0a\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/Pushkarup/CVE-2023-20198\n\n#cve #poc #exploit", "url": "https://t.me/ap_security/239"}, {"timestamp": "2023-11-07T14:37:30Z", "date_only": false, "value": "2023-11-07T14:37:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/147799", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e19cc9b1-66ed-48d0-b3e4-a1688d695cf1", "content": "https://ift.tt/9Eu10sF\nCISCO Vulnerability CVE-2023-20198 - Kroll", "url": "https://t.me/ctinow/147799"}, {"timestamp": "2023-11-07T19:10:06Z", "date_only": false, "value": "2023-11-07T19:10:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5057", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "42754471-d1af-4368-a36c-7040bcac5e77", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Cisco IOS XE 0-day.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u043e\u0442\u0447\u0435\u0442, \u0433\u0434\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 BadCandy, \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Lua, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e\u0433\u043e \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Cisco IOS XE \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 CVE-2023-20198 \u0438 CVE-2023-20273.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u043f\u0440\u0438\u0440\u043e\u0441\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 POC 30 \u0438 31 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u043e\u0447\u0438\u0449\u0430\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0443\u0434\u0430\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441\u0432\u043e\u0435\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0434\u0432\u0430 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u044b \u043e\u0434\u043d\u0438\u043c \u0438 \u0442\u0435\u043c \u0436\u0435 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u043c.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0431\u044b\u043b \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u043c\u0435\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 3, \u0447\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u043e\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u00abAuthorization\u00bb \u0438\u043b\u0438 \u00abX-Csrf-Token\u00bb, \u0447\u0442\u043e \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 v3, \u043f\u043e\u0445\u043e\u0436\u0435, \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Shadowserver Foundation \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c\u00a0\u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nIOC \u0434\u043b\u044f \u0443\u0433\u0440\u043e\u0437\u044b \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043d\u0430 GitHub (\u0437\u0434\u0435\u0441\u044c), \u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/5057"}, {"timestamp": "2023-11-08T15:22:03Z", "date_only": false, "value": "2023-11-08T15:22:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_20198.rb", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6a772732-8a44-46a8-b461-f1c405418483", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_20198.rb"}, {"timestamp": "2023-11-08T15:22:03Z", "date_only": false, "value": "2023-11-08T15:22:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_ios_xe_os_exec_cve_2023_20273.rb", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b805bd3e-2e2b-48d5-9165-103e88304ba8", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_ios_xe_os_exec_cve_2023_20273.rb"}, {"timestamp": "2023-11-08T15:22:03Z", "date_only": false, "value": "2023-11-08T15:22:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cisco_ios_xe_rce.rb", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "19f7762f-e085-4f60-abbe-f71add6b225f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cisco_ios_xe_rce.rb"}, {"timestamp": "2023-11-08T16:00:03Z", "date_only": false, "value": "2023-11-08T16:00:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6e13b405-023b-4678-9ac5-16ce0323258c", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5a3caf68-757e-4269-876d-e349f44176d2"}, {"timestamp": "2023-11-09T12:26:28Z", "date_only": false, "value": "2023-11-09T12:26:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/26", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fcceecc6-ab61-46f5-81b1-8b21b3b02dbe", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 153 entries related to CVE-2023-20198. Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature of Cisco IOS XE Software when exposed to the internet or to untrusted networks. This vulnerability allows a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access. The attacker can then use that account to gain control of the affected system.\n For steps to close the attack vector for this vulnerability, see the Recommendations section of this advisory\u00a0\n Cisco will provide updates on the status of this investigation and when a software patch is available.\n\nFIRST-EPSS: 0.916150000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/26"}, {"timestamp": "2023-11-10T10:57:44Z", "date_only": false, "value": "2023-11-10T10:57:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bh_cat/188", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c1a24ec4-b03c-4cde-bd49-fc9cc2a49df2", "content": "\ud83d\udcd5 \u041f\u043e\u0434\u0431\u043e\u0440\u043e\u0447\u043a\u0430 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u042d\u0442\u043e \u043f\u0440\u043e\u0431\u043d\u0438\u043a.\n\n\ud83d\udca1 F5 BIG-IP Unauth RCE via AJP Smuggling\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-46747\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\n\ud83d\udca1 ActiveMQ Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-46604\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435: \n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0440\u043e\u043a\u0435\u0440\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 OpenWire, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0440\u043e\u043a\u0435\u0440 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043a\u043b\u0430\u0441\u0441 \u0432 \u043f\u0443\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0430.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 UI Cisco IOS XE\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\n- CVE-2023-20198\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x: \n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 15.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 Microsoft Exchange Server Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-36745\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u043e\u0441\u0442\u043e\u044e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\n#poc", "url": "https://t.me/bh_cat/188"}, {"timestamp": "2023-11-10T21:12:46Z", "date_only": false, "value": "2023-11-10T21:12:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/55", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5115bf2a-4b9e-4eba-b4ba-dc7f50906e99", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 153 entries related to CVE-2023-20198. Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature of Cisco IOS XE Software when exposed to the internet or to untrusted networks. This vulnerability allows a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access. The attacker can then use that account to gain control of the affected system.\n For steps to close the attack vector for this vulnerability, see the Recommendations section of this advisory\u00a0\n Cisco will provide updates on the status of this investigation and when a software patch is available.\n\nFIRST-EPSS: 0.925950000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/55"}, {"timestamp": "2023-11-11T18:02:54Z", "date_only": false, "value": "2023-11-11T18:02:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvinclub1/1034", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "13b00bd5-6ecb-4ece-a29f-c46e3283a3ce", "content": "https://github.com/sohaibeb/CVE-2023-20198/blob/main/CVE_CISCO_20198_V2.py", "url": "https://t.me/arvinclub1/1034"}, {"timestamp": "2023-11-13T14:04:01Z", "date_only": false, "value": "2023-11-13T14:04:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1501", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a3304a61-ab5b-46f1-a2d1-823ca4f2bc93", "content": "https://paper.seebug.org/3072\n\nCisco IOS XE \u7cfb\u7edf WebUI \u672a\u6388\u6743\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u5206\u6790\n\nCVE-2023-20198\uff0cCVE-2023-20273\n\n#\u5206\u6790", "url": "https://t.me/CNArsenal/1501"}, {"timestamp": "2023-11-13T14:07:17Z", "date_only": false, "value": "2023-11-13T14:07:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3549", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b1057440-1094-47c5-a76c-bb9df7a777f4", "content": "https://paper.seebug.org/3072\n\nCisco IOS XE system WebUI unauthorized command execution vulnerability analysis\n\nCVE-2023-20198, CVE-2023-20273", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3549"}, {"timestamp": "2023-11-13T14:54:21Z", "date_only": false, "value": "2023-11-13T14:54:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ppcOiv6RtqIsp9O_R3AbX8SB1ZHSBDPbm6DWSuD3b8Rf", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "78683751-a01b-4c8c-931a-12214c8f759c"}, {"timestamp": "2023-11-13T19:39:33Z", "date_only": false, "value": "2023-11-13T19:39:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/163", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b4f0c58c-6de8-46d0-bac6-354c04fbca8b", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 153 entries related to CVE-2023-20198. Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature of Cisco IOS XE Software when exposed to the internet or to untrusted networks. This vulnerability allows a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access. The attacker can then use that account to gain control of the affected system.\n For steps to close the attack vector for this vulnerability, see the Recommendations section of this advisory\u00a0\n Cisco will provide updates on the status of this investigation and when a software patch is available.\n\nFIRST-EPSS: 0.925950000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/163"}, {"timestamp": "2023-11-16T16:49:49Z", "date_only": false, "value": "2023-11-16T16:49:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5834", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "59e67b84-3394-426d-83ff-8bdaedb53c1f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20198 Exploit PoC\nURL\uff1ahttps://github.com/smokeintheshell/CVE-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5834"}, {"timestamp": "2023-11-20T21:40:08Z", "date_only": false, "value": "2023-11-20T21:40:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvinclub1/1037", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a7d5fdcc-e6e2-49e2-abd3-1ffbcd43757f", "content": "https://github.com/sohaibeb/CVE-2023-20198/blob/main/CVE_CISCO_20198_V2.py", "url": "https://t.me/arvinclub1/1037"}, {"timestamp": "2023-11-21T07:00:00Z", "date_only": false, "value": "2023-11-21T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-297-01", "record": "ICSA-23-297-01", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-21T07:00:00Z", "date_only": false, "value": "2023-11-21T07:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-297-01", "record": "ICSA-23-297-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-05T11:39:37Z", "date_only": false, "value": "2023-12-05T11:39:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1467", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fb75abe6-e8db-42fc-98fe-c16bc6309e58", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 170 entries related to CVE-2023-20198. Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.\n\nFIRST-EPSS: 0.890740000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1467"}, {"timestamp": "2023-12-07T11:51:04Z", "date_only": false, "value": "2023-12-07T11:51:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5173", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "337d48f6-034e-4211-a889-e7fb4e955599", "content": "Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u00a0\u043e\u0448\u0438\u0431\u043a\u0443 Firepower VPN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-20275 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 AnyConnect SSL VPN \u0432 \u041f\u041e Adaptive Security Appliance (ASA) \u0438 Firepower Threat Defense (FTD).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f VPN. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\u00a0\u0412 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043d\u043e\u0432\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Cisco IOS XE - CVE-2023-20198 (CVSS 10) \u0438 CVE-2023-20273 (CVSS 7,2), \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044f \u0447\u0438\u0441\u043b\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043e \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 Shadowserver Foundation.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0431\u0430\u0433\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Lua \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0422\u043e\u0433\u0434\u0430 \u0447\u0438\u0441\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u043b\u043e 50 000, \u043f\u0440\u0438\u0447\u0435\u043c\u00a0\u043e\u043a\u043e\u043b\u043e 40 000 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442.\n\n\u0418, \u043f\u043e \u0441\u0432\u0435\u0436\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0431\u043e\u043b\u0435\u0435 23 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco IOS XE \u0432\u0441\u0435 \u0435\u0449\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c BadCandy.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0436\u0430\u043b\u043e\u0441\u044c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u043e\u044f\u0431\u0440\u044f \u0434\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u043d\u043e\u0432\u044b\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u041c\u0435\u043a\u0441\u0438\u043a\u0435 \u0438 \u0427\u0438\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 \u0430\u0442\u0430\u043a.", "url": "https://t.me/true_secator/5173"}, {"timestamp": "2023-12-08T21:17:27Z", "date_only": false, "value": "2023-12-08T21:17:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6119", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "569a0134-d799-472e-a023-7af243152f6e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCheck for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198\nURL\uff1ahttps://github.com/netbell/CVE-2023-20198-Fix\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6119"}, {"timestamp": "2023-12-10T01:04:13Z", "date_only": false, "value": "2023-12-10T01:04:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1588", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "895fa06d-4544-4eb7-a71d-8a2a0beadbed", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 170 entries related to CVE-2023-20198. Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.\n\nFIRST-EPSS: 0.890740000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1588"}, {"timestamp": "2023-12-10T12:53:22Z", "date_only": false, "value": "2023-12-10T12:53:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/darkcommunityofficial/187", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8ab9ccfc-03b4-4696-bd51-84a82dd63185", "content": "#CVE-2023-20198 & CVE-2023-20273 :\u00a0#Cisco IOS XE Software 'WebUI' - Authenticated / Unauthenticated Command Injection(Root)\n\nPOC N/A : https://github.com/smokeintheshell/CVE-2023-20198\n\nPOC\u00a0 N/A : https://github.com/smokeintheshell/CVE-2023-20273\n\nNVD POC : http://packetstormsecurity.com/files/175674/Cisco-IOX-XE-Unauthenticated-Remote-Code-Execution.html\n\n\ud83d\udc49 Follow: Kingsman", "url": "https://t.me/darkcommunityofficial/187"}, {"timestamp": "2023-12-11T05:40:52Z", "date_only": false, "value": "2023-12-11T05:40:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1705", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c3d0be98-c387-4368-ab98-d9a8c1f1fc74", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 170 entries related to CVE-2023-20198. Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.\n\nFIRST-EPSS: 0.890740000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1705"}, {"timestamp": "2023-12-11T10:45:23Z", "date_only": false, "value": "2023-12-11T10:45:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6137", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "59829484-b010-4a3c-ad04-c0d49442aad6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCisco CVE-2023-20198\nURL\uff1ahttps://github.com/Vulnmachines/Cisco_CVE-2023-20198\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6137"}, {"timestamp": "2023-12-12T01:30:08Z", "date_only": false, "value": "2023-12-12T01:30:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1786", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e9a450af-2ffa-473d-bebb-93715b27567b", "content": "#ExploitObserverAlert\n\nCVE-2023-20198\n\nDESCRIPTION: Exploit Observer has 170 entries related to CVE-2023-20198. Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.\n\nFIRST-EPSS: 0.890740000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1786"}, {"timestamp": "2023-12-13T01:20:27.737Z", "date_only": false, "value": "2023-12-13T01:20:27.737459Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20198", "record": "GSD-2023-20198", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-13T23:06:06Z", "date_only": false, "value": "2023-12-13T23:06:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6175", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e4407c45-bfa9-443a-8491-23baf65fe0c4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-20198 / 0day - Cisco - Authentication Bypass/RCE\nURL\uff1ahttps://github.com/codeb0ss/CVE-2023-20198-PoC\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/6175"}, {"timestamp": "2023-12-14T06:35:37Z", "date_only": false, "value": "2023-12-14T06:35:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1336", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b515448e-e103-4851-9acd-f6b11132b7e1", "url": "https://t.me/codeb0ss/1336"}, {"timestamp": "2023-12-14T06:35:37Z", "date_only": false, "value": "2023-12-14T06:35:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/codeb0ss/1335", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "36081f78-b95d-425a-973a-180932ebb70a", "content": "CVE-2023-20198 / 0day - Cisco - Authentication Bypass/RCE", "url": "https://t.me/codeb0ss/1335"}, {"timestamp": "2024-01-25T16:57:55.900Z", "date_only": false, "value": "2024-01-25T16:57:55.900Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2023-20198", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-25T17:15:34.820Z", "date_only": false, "value": "2024-01-25T17:15:34.820", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20198", "record": "GSD-2023-20198", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-16T00:00:00Z", "date_only": false, "value": "2024-02-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "last_revision_date"}, {"timestamp": "2024-02-16T00:00:00Z", "date_only": false, "value": "2024-02-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2023-ALE-011", "record": "CERTFR-2023-ALE-011", "field": "revisions.4.revision_date"}, {"timestamp": "2024-04-25T07:03:54Z", "date_only": false, "value": "2024-04-25T07:03:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7167", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "198e9988-14d7-429e-8a06-09f75d1e3006", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-20198-RCE, support adding/deleting users and executing cli commands/system commands.\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2023-20198-RCE\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7167"}, {"timestamp": "2024-04-25T16:45:36Z", "date_only": false, "value": "2024-04-25T16:45:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ueeqkJeOn-DsxKoWufUhL3Ea9SNGx5lCVxi3kE_v0Tj6rQ", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "14645ee0-8104-4cda-a383-35d4b0bcb4ae"}, {"timestamp": "2024-04-26T10:18:02Z", "date_only": false, "value": "2024-04-26T10:18:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2021", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "97419ab6-6900-4f17-af25-b03154f4a6bd", "content": "CVE-2023-20198   RCE  CISCO IOS XE\n*\n\u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434/\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 cisco cli.\n*\n\u0421\u043f\u0438\u0441\u043e\u043a \u0446\u0435\u043b\u0435\u0439 \u0442\u0443\u0442\n*\nexploit\n\n#cisco #rce", "url": "https://t.me/proxy_bar/2021"}, {"timestamp": "2024-04-28T01:24:41Z", "date_only": false, "value": "2024-04-28T01:24:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/109", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5867f059-c1c5-4fc1-ab78-f417a450337d", "content": "\ud83d\udea8EXPLOIT POC\ud83d\udea8PoC for CVE-2023-20198 Cisco IOS XE RCE and query released by @W01fh4cker.\n\n#Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Cisco #Infosec #CTI #CVE202320198 #Vulnerability\n\nGitHub: https://github.com/W01fh4cker/CVE-2023-20198-RCE\n\nX Link: https://twitter.com/DarkWebInformer/status/1784360877132525857", "url": "https://t.me/TheDarkWebInformer/109"}, {"timestamp": "2024-05-10T23:27:32Z", "date_only": false, "value": "2024-05-10T23:27:32+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "record": "CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-27T09:01:55Z", "date_only": false, "value": "2024-07-27T09:01:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2378", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a9025ee1-3a4c-44a6-b57f-dc0ae924c9be", "content": "https://github.com/W01fh4cker/CVE-2023-20198-RCE\n\nCVE-2023-20198-RCE, support adding/deleting users and executing cli commands/system commands\n#github #exploit", "url": "https://t.me/CNArsenal/2378"}, {"timestamp": "2024-08-02T09:05:35.915Z", "date_only": false, "value": "2024-08-02T09:05:35.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-20198", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:59:55.665Z", "date_only": false, "value": "2024-08-15T17:59:55.665+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2658", "record": "WID-SEC-W-2023-2658", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:34:05Z", "date_only": false, "value": "2024-08-16T08:34:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1407", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4cf79549-027e-4602-b959-116e8fe4208e", "content": "#exploit\n1. CVE-2023-20198:\nCisco ISO XE Software Web Management User Interface Vulnerability\nhttps://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software\n]-> Checkscript: https://github.com/Atea-Redteam/CVE-2023-20198\n\n2. CVE-2023-36728:\nWindows SQL Server Pre-Auth Overflow Read\nhttps://v-v.space/2023/10/16/sqlserver-dos-CVE-2023-36728\n\n3. CVE-2023-38545:\nSocks5 heap buffer overflow\nhttps://github.com/d0rb/CVE-2023-38545", "url": "https://t.me/Rootsec_2/1407"}, {"timestamp": "2024-10-14T15:50:35.983Z", "date_only": false, "value": "2024-10-14T15:50:35.983245Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "831af484-a0d8-4269-adae-e014057b3e09", "url": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef"}, {"timestamp": "2024-10-23T18:58:11.982Z", "date_only": false, "value": "2024-10-23T18:58:11.982740Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20198", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-23T18:58:11.982Z", "date_only": false, "value": "2024-10-23T18:58:11.982740Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20198", "record": "FKIE_CVE-2023-20198", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3dfa02d4-04e9-4fd9-8a26-9a4cd74c4afb"}, {"timestamp": "2024-10-25T00:00:00Z", "date_only": false, "value": "2024-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d0af6584-6557-43f1-9ab0-ee0607683e0b"}, {"timestamp": "2024-10-26T00:00:00Z", "date_only": false, "value": "2024-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "00d3ed07-ce31-43d4-bad1-24be582d1651"}, {"timestamp": "2024-10-27T00:00:00Z", "date_only": false, "value": "2024-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "348551cd-a5e0-4506-8854-4f4201bbbd5a"}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "210dfee3-cf6c-48ab-8155-56dd3b72f122"}, {"timestamp": "2024-10-29T00:00:00Z", "date_only": false, "value": "2024-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "75ccf751-0469-4690-b24d-afd28e7ecfdf"}, {"timestamp": "2024-10-30T00:00:00Z", "date_only": false, "value": "2024-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "44c5f001-c98e-4873-a62c-bcc09ca7232e"}, {"timestamp": "2024-10-31T00:00:00Z", "date_only": false, "value": "2024-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cfa5249d-2c33-436f-8e60-2fc95e7bd021"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c4b3b52e-074b-4726-8669-215416c81748"}, {"timestamp": "2024-11-02T00:00:00Z", "date_only": false, "value": "2024-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "71d6baa7-7a92-4338-a649-a848f510390f"}, {"timestamp": "2024-11-03T00:00:00Z", "date_only": false, "value": "2024-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3d86b6a8-98ac-4c20-8dd2-0fb5de4679b6"}, {"timestamp": "2024-11-04T00:00:00Z", "date_only": false, "value": "2024-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "090dd6d1-ae70-4c56-b469-59e651e0e854"}, {"timestamp": "2024-11-05T00:00:00Z", "date_only": false, "value": "2024-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d9cad2ae-fe33-4d63-b404-d35d5537e882"}, {"timestamp": "2024-11-06T00:00:00Z", "date_only": false, "value": "2024-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "45387dd2-9440-4cf0-a494-cf6b71502e75"}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "11aa7aa4-7221-41af-a035-f8b63c01c5ec"}, {"timestamp": "2024-11-08T00:00:00Z", "date_only": false, "value": "2024-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f389e309-cb0e-4625-99c6-6f80143b5cfa"}, {"timestamp": "2024-11-09T00:00:00Z", "date_only": false, "value": "2024-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "38227f3a-a6f3-4501-b1b3-0f9ec7840300"}, {"timestamp": "2024-11-10T00:00:00Z", "date_only": false, "value": "2024-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6c54f49e-a6d4-4f07-90c1-23ed9f280668"}, {"timestamp": "2024-11-11T00:00:00Z", "date_only": false, "value": "2024-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "501d7e23-b5ef-4543-82e6-d0a5a4811587"}, {"timestamp": "2024-11-12T00:00:00Z", "date_only": false, "value": "2024-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7d67b5e2-f46e-4e00-8513-df97427b43da"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4d336e7c-5aef-4cdf-bd23-e78b44dfe1e8"}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": false, "value": "2024-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "08f1a5e4-1b46-4040-9df6-501521b3633e"}, {"timestamp": "2024-11-15T00:00:00Z", "date_only": false, "value": "2024-11-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "133bbd5d-18d3-43b4-9a03-b982569555e4"}, {"timestamp": "2024-11-16T00:00:00Z", "date_only": false, "value": "2024-11-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1ca867dd-107d-4ec1-8a4b-2bfdb9ad02d7"}, {"timestamp": "2024-11-17T00:00:00Z", "date_only": false, "value": "2024-11-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0c796827-4e3e-485f-9182-e975432e3400"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9daba31c-1ea1-45f6-a207-f525a103c3c0"}, {"timestamp": "2024-11-18T14:12:27.162Z", "date_only": false, "value": "2024-11-18T14:12:27.162805Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113504363889721502", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dc6b6644-fa4b-4fb5-bf94-218399a67c1b", "url": "https://infosec.exchange/users/screaminggoat/statuses/113504363889721502"}, {"timestamp": "2024-11-19T00:00:00Z", "date_only": false, "value": "2024-11-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "39047979-8e85-4ea4-9287-b2e2ef255454"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9cb1ed59-1a7c-4df8-975e-995f16dc8e80"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "50a41ee6-fff5-4f0a-8d6b-04bfd927aa72"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "050d18c6-68ca-4dc4-baac-376fc411d9f9"}, {"timestamp": "2024-11-23T00:00:00Z", "date_only": false, "value": "2024-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e751962c-8b87-41e4-9ffb-74bbc63c20f0"}, {"timestamp": "2024-11-23T16:58:02Z", "date_only": false, "value": "2024-11-23T16:58:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haj3imad/20798", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "664a5909-f5bd-498a-a006-68aceb44ec81", "content": "https://github.com/XiaomingX/CVE-2023-20198-poc\n\nCVE-2023-20198\n#github #poc", "url": "https://t.me/haj3imad/20798"}, {"timestamp": "2024-11-23T20:28:02Z", "date_only": false, "value": "2024-11-23T20:28:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HVgibvw5P4g3D4JiZAMkThPPnait0rf0vWNmvpVmNDnz7R0", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9fe955c7-3a4f-409f-bf8b-958f15fbe63c"}, {"timestamp": "2024-11-24T00:00:00Z", "date_only": false, "value": "2024-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d1b9ed0c-5d01-47bb-bd1b-21b93bc8d1fd"}, {"timestamp": "2024-11-24T05:25:14Z", "date_only": false, "value": "2024-11-24T05:25:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Rootsec_2/5231", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "077f6c8a-850d-4143-b089-04c9f563a4a5", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/Rootsec_2/5231"}, {"timestamp": "2024-11-25T00:00:00Z", "date_only": false, "value": "2024-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "935cebd9-ec38-44c4-ab8d-1326453f3df3"}, {"timestamp": "2024-11-25T11:41:33Z", "date_only": false, "value": "2024-11-25T11:41:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11470", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bf8b094b-3d59-4f1b-a6c2-23418e2d93b5", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/CyberSecurityTechnologies/11470"}, {"timestamp": "2024-11-26T00:00:00Z", "date_only": false, "value": "2024-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "833d583b-4d46-4153-ba4d-9be98ab13139"}, {"timestamp": "2024-11-27T00:00:00Z", "date_only": false, "value": "2024-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "abc245a1-4658-4496-9df2-454e53237348"}, {"timestamp": "2024-11-28T00:00:00Z", "date_only": false, "value": "2024-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "20020fa5-7ed5-4c26-b4c8-8461a87fd422"}, {"timestamp": "2024-11-29T00:00:00Z", "date_only": false, "value": "2024-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "181d1b34-b549-4dd7-b2d1-d9111636b3b5"}, {"timestamp": "2024-11-30T00:00:00Z", "date_only": false, "value": "2024-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bb0b9b52-ba6e-44ed-b06f-a3febec5a1bc"}, {"timestamp": "2024-12-01T00:00:00Z", "date_only": false, "value": "2024-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "70f637d0-58d4-4268-96b3-a91cf137dd90"}, {"timestamp": "2024-12-02T00:00:00Z", "date_only": false, "value": "2024-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "aa4bfe33-9803-4edf-9d2e-854d7d578d09"}, {"timestamp": "2024-12-03T00:00:00Z", "date_only": false, "value": "2024-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e28b43f9-5247-4ff5-aeaf-a3d07037d260"}, {"timestamp": "2024-12-04T00:00:00Z", "date_only": false, "value": "2024-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3a94c268-73eb-4624-896d-f9d1f253070f"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "76b4f7a5-5c15-42ce-8492-2e6936d65da2"}, {"timestamp": "2024-12-06T00:00:00Z", "date_only": false, "value": "2024-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fbead42b-f102-4ac8-9257-954b74c9601e"}, {"timestamp": "2024-12-07T00:00:00Z", "date_only": false, "value": "2024-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c6a59d04-6cae-44e6-810d-725e1225acc6"}, {"timestamp": "2024-12-08T00:00:00Z", "date_only": false, "value": "2024-12-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "75a6df2b-499b-402c-93f4-1924eafd4838"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": false, "value": "2024-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "70d2ae82-ca48-465e-941b-731cf87295d9"}, {"timestamp": "2024-12-10T00:00:00Z", "date_only": false, "value": "2024-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5a921710-12b2-4bc3-bf1f-22901f0db6af"}, {"timestamp": "2024-12-11T00:00:00Z", "date_only": false, "value": "2024-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b51f0784-c7f1-4055-8014-8f1e1517ca1a"}, {"timestamp": "2024-12-12T00:00:00Z", "date_only": false, "value": "2024-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9e2cc5b9-428a-4fce-b879-afd7a478caf5"}, {"timestamp": "2024-12-13T00:00:00Z", "date_only": false, "value": "2024-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3f8b0f89-a4be-4de0-8771-3a332453ee9a"}, {"timestamp": "2024-12-14T00:00:00Z", "date_only": false, "value": "2024-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e86d3881-1f94-4e2a-afa1-a1ae4455c049"}, {"timestamp": "2024-12-14T21:15:02Z", "date_only": false, "value": "2024-12-14T21:15:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctftm/655", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "34a018c7-da51-49a3-bcaa-08bd79fd5012", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/ctftm/655"}, {"timestamp": "2024-12-15T00:00:00Z", "date_only": false, "value": "2024-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "da52c79f-ccd0-432d-862b-92b5a1c1418d"}, {"timestamp": "2024-12-16T00:00:00Z", "date_only": false, "value": "2024-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6e8dacef-778f-44d3-9a86-85bdf666e46c"}, {"timestamp": "2024-12-17T00:00:00Z", "date_only": false, "value": "2024-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cb75b211-838a-41f5-b3e6-16adc01a2dad"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a9e3a124-4cf6-4560-a238-18551ec59b9c"}, {"timestamp": "2024-12-19T00:00:00Z", "date_only": false, "value": "2024-12-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4c003a98-e8ed-4f66-b894-f8e182b653f7"}, {"timestamp": "2024-12-19T13:09:26Z", "date_only": false, "value": "2024-12-19T13:09:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/591f3235-7ebf-44cf-a316-d90d36580532", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9fa2028b-6bbb-40cb-8189-379067a81502"}, {"timestamp": "2024-12-20T00:00:00Z", "date_only": false, "value": "2024-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "eec706fd-b665-442b-abdb-67b07d52a19b"}, {"timestamp": "2024-12-21T00:00:00Z", "date_only": false, "value": "2024-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6b057ea0-897c-447a-bf92-25807c85edf9"}, {"timestamp": "2024-12-22T00:00:00Z", "date_only": false, "value": "2024-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dedc0d38-ecbb-430a-839d-8bf13fac6556"}, {"timestamp": "2024-12-23T00:00:00Z", "date_only": false, "value": "2024-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1f0d036d-06e3-4c19-9d42-7dbcae77f1cf"}, {"timestamp": "2024-12-24T00:00:00Z", "date_only": false, "value": "2024-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "281c75dd-ed33-4aa7-99d9-64dbeee68702"}, {"timestamp": "2024-12-24T20:35:28.731Z", "date_only": false, "value": "2024-12-24T20:35:28.731703Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971905", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "20a8295c-dafb-4c28-af5b-3157fca4e9cf", "url": "https://feedsin.space/feed/CISAKevBot/items/2971905"}, {"timestamp": "2024-12-24T20:35:30.055Z", "date_only": false, "value": "2024-12-24T20:35:30.055116Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971907", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a8aceabb-05fd-40e1-ad7e-dc8f45d8bc2f", "url": "https://feedsin.space/feed/CISAKevBot/items/2971907"}, {"timestamp": "2024-12-25T00:00:00Z", "date_only": false, "value": "2024-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1343678a-cc4c-4f8c-b1ba-e0a7bfd3dcf2"}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a525b2b1-cfe5-4229-9976-44a3d7797673"}, {"timestamp": "2024-12-27T00:00:00Z", "date_only": false, "value": "2024-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1e18da56-2eed-4305-a097-08731801c77b"}, {"timestamp": "2024-12-28T00:00:00Z", "date_only": false, "value": "2024-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dead5e1e-c914-4c4c-9ebd-25ddca4075d3"}, {"timestamp": "2024-12-29T00:00:00Z", "date_only": false, "value": "2024-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1d0c31b7-4b3d-479c-83fd-55abcc9c7445"}, {"timestamp": "2024-12-30T00:00:00Z", "date_only": false, "value": "2024-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a8b0b23c-2520-49c8-a7eb-f667f97bd326"}, {"timestamp": "2024-12-31T00:00:00Z", "date_only": false, "value": "2024-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "937e6a8b-05ab-4cf5-9044-c0fafadcecb7"}, {"timestamp": "2024-12-31T06:28:27Z", "date_only": false, "value": "2024-12-31T06:28:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/684", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "65cad2a0-c3ae-48bd-a8a6-71b2c757443e", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/AGENTZSECURITY/684"}, {"timestamp": "2025-01-01T00:00:00Z", "date_only": false, "value": "2025-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "94bf61fe-7e78-41f6-a3ad-df3990062551"}, {"timestamp": "2025-01-02T00:00:00Z", "date_only": false, "value": "2025-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "127dc1a5-31d3-4093-8cff-fd9a2b3ea2bc"}, {"timestamp": "2025-01-03T00:00:00Z", "date_only": false, "value": "2025-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f702e1f5-5088-450c-b569-3602853bd930"}, {"timestamp": "2025-01-04T00:00:00Z", "date_only": false, "value": "2025-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "65ac4874-41ef-4060-95ea-4c17ecb90ed8"}, {"timestamp": "2025-01-05T00:00:00Z", "date_only": false, "value": "2025-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "03fc45a1-1b24-4351-87b1-3b0a094a8756"}, {"timestamp": "2025-01-06T00:00:00Z", "date_only": false, "value": "2025-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bf8f5ed8-76c8-4737-b660-011afc5915e6"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b75e184b-1485-44c8-a88f-92245180ddfd"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "73429eb1-7b33-49a4-bac8-543f08913275"}, {"timestamp": "2025-01-09T00:00:00Z", "date_only": false, "value": "2025-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5d391d21-d0bc-4b14-9eb3-271fc1ab71f6"}, {"timestamp": "2025-01-10T00:00:00Z", "date_only": false, "value": "2025-01-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "37a5c359-26d6-426e-8bdb-f65b41370a58"}, {"timestamp": "2025-01-11T00:00:00Z", "date_only": false, "value": "2025-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bf0eb9b0-5002-438c-b7d1-feb0afe6e174"}, {"timestamp": "2025-01-12T00:00:00Z", "date_only": false, "value": "2025-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0508fccf-9b79-4ce6-a7b1-810bb3758669"}, {"timestamp": "2025-01-13T00:00:00Z", "date_only": false, "value": "2025-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "45a925a7-1760-4aca-a206-8853ac7f9422"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "47f2b6f5-4a1e-4594-8eb6-a39894ecf5f0"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "274f4c3b-2344-46ae-860c-e4aea64a1661"}, {"timestamp": "2025-01-16T00:00:00Z", "date_only": false, "value": "2025-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f4896101-26bd-4f20-bc6c-b75372d1ffc2"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "67782452-e750-437f-9e55-148b67b3ed30"}, {"timestamp": "2025-01-19T00:00:00Z", "date_only": false, "value": "2025-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2c562732-64bd-4602-9bab-0381bd4b7955"}, {"timestamp": "2025-01-20T00:00:00Z", "date_only": false, "value": "2025-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "55a2ca79-629d-4631-8aa2-0f8db8fa1220"}, {"timestamp": "2025-01-21T00:00:00Z", "date_only": false, "value": "2025-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "11519a4c-eb00-4176-bc35-e0388bf6f0b0"}, {"timestamp": "2025-01-22T00:00:00Z", "date_only": false, "value": "2025-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "45feb251-9ea0-4a28-ae5c-d26052691297"}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a09f377c-15ed-4cc9-86d7-bd59ca2a5c92"}, {"timestamp": "2025-01-24T00:00:00Z", "date_only": false, "value": "2025-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b64321aa-8ffd-4325-ac69-ade44b6b3fc4"}, {"timestamp": "2025-01-25T00:00:00Z", "date_only": false, "value": "2025-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "434eecd8-df0f-47db-86f0-15258e3eb67a"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "13a581c3-2c27-4747-981e-92276f5568d0"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4c6dfa1a-299b-4eca-8d08-300b23bbbcd8"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7e702a11-2850-497f-85e9-22e25d25b1ad"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8b3400a2-8881-44ad-847e-3b767b8207da"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "333d0064-7362-4dd1-a5af-3ef876fb70f2"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c824de0e-90f6-49e9-a700-06d6bea743b2"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "74bf44e9-d4e2-43bc-89a3-8c155793bd65"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "30a8f611-b52b-4192-99fa-ceb3d48c1315"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "499b20f2-a200-4b4b-aa92-2a90e565281a"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ba82c9a3-f5be-4098-a145-1d6d72469715"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "03da28b8-e1e5-4103-9ccc-79911d88bd35"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f2f72b91-8b90-472c-b469-6fa14657ce29"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d09ae21a-4561-47a2-b640-63fd17e470fa"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "534e626c-1fba-4fab-9c67-e0ecb61fe901"}, {"timestamp": "2025-02-05T00:00:00Z", "date_only": false, "value": "2025-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "79e17e4e-afdd-4191-ac42-59a05a3c8429"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f2b01375-7ce9-46fe-95c9-33cac3e16ff0"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9a538bbc-0e45-4893-973a-890e738bb667"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "86bd689d-86af-45be-b062-63b5948040cc"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "69d66061-1488-4f64-a6e1-c38e7980e00e"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "785a2aac-0487-437f-8706-42489af2584d"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "33a7b391-7d78-4c34-bfd0-d49e2d7e7dd0"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e7d7eca8-99a4-44f3-8e12-5579d989f81e"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "db881b2c-b81a-4427-925a-11736cbbc8d1"}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "144fe642-27e0-4680-aa8b-e91d18a73edf"}, {"timestamp": "2025-02-13T20:38:47.817Z", "date_only": false, "value": "2025-02-13T20:38:47.817575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3li3k7rchui2m", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7ede3560-2795-44b9-a276-870cc8984318", "url": "https://bsky.app/profile/hackingne.ws/post/3li3k7rchui2m"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "73e6850f-5e23-485a-b4bb-5d313aeee846"}, {"timestamp": "2025-02-14T08:33:45Z", "date_only": false, "value": "2025-02-14T08:33:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityIL/66310", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d8d2ffe8-cf45-4c77-8422-9b4bd3b2cf69", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05e1\u05d9\u05e0\u05d9\u05ea Salt Typhoon \u05de\u05de\u05e9\u05d9\u05db\u05d4 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05d7\u05d1\u05e8\u05d5\u05ea \u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd \u05d5\u05e2\u05d5\u05e9\u05d4 \u05d6\u05d0\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e0\u05d9\u05e6\u05d5\u05dc \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d9\u05d3\u05d5\u05e2\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea Cisco.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7 \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8  Recorded Future \u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05ea\u05e7\u05d9\u05e4\u05d4 \u05e4\u05e8\u05e6\u05d4 \u05dc\u05d9\u05d5\u05ea\u05e8 \u05de-1,000 \u05de\u05db\u05e9\u05d9\u05e8\u05d9\u05dd \u05e9\u05dc \u05e1\u05d9\u05e1\u05e7\u05d5 \u05d4\u05e9\u05d9\u05d9\u05db\u05d9\u05dd \u05dc\u05d7\u05d1\u05e8\u05d5\u05ea \u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1, \u05d1\u05e8\u05d9\u05d8\u05e0\u05d9\u05d4, \u05d3\u05e8\u05d5\u05dd \u05d0\u05e4\u05e8\u05d9\u05e7\u05d4 \u05d5\u05e2\u05d5\u05d3.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d4\u05df CVE-2023-20198 \u05d5-CVE-2023-20273.\n\n\u05d4\u05de\u05d7\u05e7\u05e8 \u05d4\u05de\u05dc\u05d0 \u05db\u05d0\u05df.\n\nhttps://t.me/CyberSecurityIL/6589\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea #\u05ea\u05e7\u05e9\u05d5\u05e8\u05ea", "url": "https://t.me/CyberSecurityIL/66310"}, {"timestamp": "2025-02-14T11:58:31.375Z", "date_only": false, "value": "2025-02-14T11:58:31.375884Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jamesatack.com/post/3li55me2osc2r", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f3c38336-093f-4d3e-8567-d91ae322f9a2", "url": "https://bsky.app/profile/jamesatack.com/post/3li55me2osc2r"}, {"timestamp": "2025-02-14T13:19:04.858Z", "date_only": false, "value": "2025-02-14T13:19:04.858822Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114002437177842915", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3a6339ca-edae-40a4-b260-6523fb45bdce", "url": "https://infosec.exchange/users/jbhall56/statuses/114002437177842915"}, {"timestamp": "2025-02-14T13:19:09.571Z", "date_only": false, "value": "2025-02-14T13:19:09.571973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3li5c4jytkk25", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "22544410-7389-479f-a39a-9b6bd55fc11d", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3li5c4jytkk25"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "32c8f68c-5c24-49fb-9f2d-e88d129b3e8f"}, {"timestamp": "2025-02-15T07:41:05.308Z", "date_only": false, "value": "2025-02-15T07:41:05.308509Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3li77oxasvo2o", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "00c9af9b-c287-4f23-a0a2-a929dd9fb6d1", "url": "https://bsky.app/profile/hackingne.ws/post/3li77oxasvo2o"}, {"timestamp": "2025-02-15T19:48:19.140Z", "date_only": false, "value": "2025-02-15T19:48:19.140542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ervinzubic.bsky.social/post/3liaidcwjvx2t", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "32854749-1f82-46a9-97d3-33e318a5ec84", "url": "https://bsky.app/profile/ervinzubic.bsky.social/post/3liaidcwjvx2t"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "53c3e0a5-c243-44dc-a447-a1823db8d487"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e0df8539-89df-4de9-9348-aefc35529691"}, {"timestamp": "2025-02-17T23:17:31Z", "date_only": false, "value": "2025-02-17T23:17:31.000862Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lifuxb6sgj2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0b8d67d5-aabe-4e02-ac5e-63de31b2506c", "url": "https://bsky.app/profile/hackingne.ws/post/3lifuxb6sgj2u"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7eb3605b-d3e2-4aa3-ad0b-c7ecb18a8749"}, {"timestamp": "2025-02-18T03:49:53.811Z", "date_only": false, "value": "2025-02-18T03:49:53.811343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lige6aldc22g", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8077e99a-891b-46e3-9cc6-e97eb08dfa5f", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lige6aldc22g"}, {"timestamp": "2025-02-18T07:59:54.900Z", "date_only": false, "value": "2025-02-18T07:59:54.900698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ligs5dkk2s2h", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "363f20e0-3267-4368-a958-716f0fe37986", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3ligs5dkk2s2h"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ee1402c0-3e0c-4b36-af89-e6606a95c8e1"}, {"timestamp": "2025-02-19T07:11:32.520Z", "date_only": false, "value": "2025-02-19T07:11:32.520066Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lij7vsn4y227", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "473543b5-fb99-426e-9e83-f179e373bea4", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lij7vsn4y227"}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8c6011d7-a2fc-47e6-96e1-0bf4c91a6119"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "87c46b16-33ef-4081-9d27-092d53bd1928"}, {"timestamp": "2025-02-21T16:31:59Z", "date_only": false, "value": "2025-02-21T16:31:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/21/chinese-apt-exploits-cisco-ios.html", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a5e41d26-d4cd-4d89-8cbd-d3aacee94643", "url": "https://threatintel.cc/2025/02/21/chinese-apt-exploits-cisco-ios.html"}, {"timestamp": "2025-02-21T16:32:01Z", "date_only": false, "value": "2025-02-21T16:32:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/21/123201.html", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "395c21d3-168a-44f3-acae-8e7dacce8ce3", "url": "https://threatintel.cc/2025/02/21/123201.html"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "52f8b655-b69b-401e-8013-b8213436c451"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5c9c8d7c-6e91-45af-ac5c-ad41526454f3"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "26fdc2a9-71da-48c5-9a93-0e48d331157b"}, {"timestamp": "2025-02-23T02:10:48Z", "date_only": false, "value": "2025-02-23T02:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b230725d-2823-4271-b869-4277f8cb66b4"}, {"timestamp": "2025-02-23T04:10:50Z", "date_only": false, "value": "2025-02-23T04:10:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2a4c001f-66cd-4bc3-a851-2d62f581f5a7"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bfa35cf1-fb25-4f58-a24b-162edbbd70e5"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7b05e955-4a52-4f23-9f2c-48bb2ff4af0e"}, {"timestamp": "2025-02-24T17:30:05Z", "date_only": false, "value": "2025-02-24T17:30:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6773", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ef63df04-feca-479b-9872-7cc4a29cea8b", "content": "Cisco \u043e\u0442\u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 Salt Typhoon \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0432 \u0421\u0428\u0410 CVE-2018-0171 \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 CVE-2023-20198 \u0438 CVE-2023-20273, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0432 Recorded Future\u2019s Insikt Group.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c \u043a\u0441\u0442\u0430\u0442\u0438, \u0447\u0442\u043e \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0438 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0430\u0433\u0438\u0442\u0433\u0430\u0437\u0435\u0442\u0443 \u0412\u0430\u0448\u0438\u043d\u0433\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043a\u043e\u043c\u0430 The Record.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0435\u0440\u0438\u043e\u0434\u043e\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0445 \u043b\u0435\u0442.\n\n\u0412\u0430\u0436\u043d\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u0440\u0430\u0432\u0434\u0430 \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d.\n\n\u0411\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u0430\u0431\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\u0412 Cisco \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u0444\u0438\u043a SNMP, TACACS \u0438 RADIUS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 TACACS/RADIUS \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c Salt Typhoon \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 LOTL \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u043f\u043e\u0440\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u0438 \u0438\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u043d\u043a\u0442\u0430 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Salt Typhoon \u043c\u0435\u043d\u044f\u043b\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Guest Shell \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0447\u0435\u0440\u0435\u0437 SSH.\n\n\u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u0442\u0438\u043b\u0438\u0442\u0430 JumbledPath, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0437\u0430\u0445\u0432\u0430\u0442 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 Cisco \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u043a\u0442\u0435\u0440\u043e\u043c jump-host.\n\n\u0414\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b ELF \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Go \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043e\u0447\u0438\u0449\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u043f\u0443\u043d\u043a\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0443 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 (\u0438\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u043c\u044b\u0435) \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u044d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 SSH-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0435\u043c\u0443 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u043f\u0438\u0441\u043a\u0438 ACL, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCisco \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0443\u0436\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 Smart Install (SMI), \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2018-0171. \u041f\u0440\u0438\u0447\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044f\u043a\u043e\u0431\u044b \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 Salt Typhoon \u0438 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442 \u0441 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.", "url": "https://t.me/true_secator/6773"}, {"timestamp": "2025-02-24T17:30:56Z", "date_only": false, "value": "2025-02-24T17:30:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5450", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "67c1980f-e5ab-4505-901e-05bb36880d63", "content": "Cisco \u043e\u0442\u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 Salt Typhoon \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0432 \u0421\u0428\u0410 CVE-2018-0171 \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 CVE-2023-20198 \u0438 CVE-2023-20273, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0432 Recorded Future\u2019s Insikt Group.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c \u043a\u0441\u0442\u0430\u0442\u0438, \u0447\u0442\u043e \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0438 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0430\u0433\u0438\u0442\u0433\u0430\u0437\u0435\u0442\u0443 \u0412\u0430\u0448\u0438\u043d\u0433\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043a\u043e\u043c\u0430 The Record.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0435\u0440\u0438\u043e\u0434\u043e\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0445 \u043b\u0435\u0442.\n\n\u0412\u0430\u0436\u043d\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u0440\u0430\u0432\u0434\u0430 \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d.\n\n\u0411\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u0430\u0431\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\u0412 Cisco \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u0444\u0438\u043a SNMP, TACACS \u0438 RADIUS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 TACACS/RADIUS \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c Salt Typhoon \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 LOTL \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u043f\u043e\u0440\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u0438 \u0438\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u043d\u043a\u0442\u0430 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Salt Typhoon \u043c\u0435\u043d\u044f\u043b\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Guest Shell \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0447\u0435\u0440\u0435\u0437 SSH.\n\n\u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u0442\u0438\u043b\u0438\u0442\u0430 JumbledPath, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0437\u0430\u0445\u0432\u0430\u0442 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 Cisco \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u043a\u0442\u0435\u0440\u043e\u043c jump-host.\n\n\u0414\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b ELF \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Go \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043e\u0447\u0438\u0449\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u043f\u0443\u043d\u043a\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0443 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 (\u0438\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u043c\u044b\u0435) \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u044d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 SSH-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0435\u043c\u0443 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u043f\u0438\u0441\u043a\u0438 ACL, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCisco \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0443\u0436\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 Smart Install (SMI), \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2018-0171. \u041f\u0440\u0438\u0447\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044f\u043a\u043e\u0431\u044b \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 Salt Typhoon \u0438 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442 \u0441 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.", "url": "https://t.me/S_E_Reborn/5450"}, {"timestamp": "2025-02-24T20:44:35.121Z", "date_only": false, "value": "2025-02-24T20:44:35.121647Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/greynoise/statuses/114060812256739665", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "93d58300-6dbc-431d-b116-a501a94b0b98", "url": "https://infosec.exchange/users/greynoise/statuses/114060812256739665"}, {"timestamp": "2025-02-24T20:44:49.434Z", "date_only": false, "value": "2025-02-24T20:44:49.434910Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lix7offntm72", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a43fb852-83eb-4221-853d-be7e09bad1ea", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lix7offntm72"}, {"timestamp": "2025-02-24T20:56:57.229Z", "date_only": false, "value": "2025-02-24T20:56:57.229994Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.io/post/3lixaec3qkk27", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9c1bafd5-d90c-40fb-9be8-94585e59d1fc", "url": "https://bsky.app/profile/greynoise.io/post/3lixaec3qkk27"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "427542f2-bdb8-470c-8b88-7d22b1d576a9"}, {"timestamp": "2025-02-25T05:02:54.357Z", "date_only": false, "value": "2025-02-25T05:02:54.357390Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3liy3jcrzd724", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "52fa74f4-b746-4191-8723-b5b6c2e0ff35", "url": "https://bsky.app/profile/hackingne.ws/post/3liy3jcrzd724"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0bc4ba0a-a5fc-49d9-a9de-cec18987a89c"}, {"timestamp": "2025-02-27T00:00:00Z", "date_only": false, "value": "2025-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2d4e7820-6092-48fd-ba15-2b01ac4eca37"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a2e2f69b-682b-4f03-bce2-736c130364c9"}, {"timestamp": "2025-02-28T04:00:06Z", "date_only": false, "value": "2025-02-28T04:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UIIil_OEKPCpY2SMStXdCBJaH7xM-W5ZaJi2JXSjxGtvPOo", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d83890c9-4abf-427d-95ba-17e7b983a904"}, {"timestamp": "2025-02-28T23:49:13.272Z", "date_only": false, "value": "2025-02-28T23:49:13.272798Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "338fb1ac-29c9-4202-953e-7efcdff2095e", "url": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca"}, {"timestamp": "2025-03-01T00:00:00Z", "date_only": false, "value": "2025-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cdf20dfd-2098-4f24-961e-8ed6e16c462f"}, {"timestamp": "2025-03-01T00:54:37.608Z", "date_only": false, "value": "2025-03-01T00:54:37.608738Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-1940605c-07471aeb152b8787", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "442179ee-4698-4410-8275-137c1e710f13", "url": "https://poliverso.org/objects/0477a01e-1940605c-07471aeb152b8787"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "483ced2d-9140-4502-9a32-e4e06a02eedc"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d38d8ed6-0ea5-424b-bd4c-fbd9c52cf859"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ae452763-1df3-4288-ae4f-7791d5a14454"}, {"timestamp": "2025-03-05T00:00:00Z", "date_only": false, "value": "2025-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4f142c3c-bb8b-47cd-a895-bac9174f8af2"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "99a6c84a-0f7c-4b8d-b3d7-5ef637f702bd"}, {"timestamp": "2025-03-06T10:36:01Z", "date_only": false, "value": "2025-03-06T10:36:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/18c55588-626c-4e78-8840-45f9014d195c", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "64688b86-ff00-4cec-97d8-aa665fba2d64"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8edb2c1c-62d5-4aae-b206-44960760e1e9"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f76153f5-010e-4682-b3ca-e3c72188632a"}, {"timestamp": "2025-03-09T00:00:00Z", "date_only": false, "value": "2025-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "03a76ec4-4a9e-4f78-b2c4-31865b83a63b"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2e927731-3a84-46c4-9c38-70de2e6b1924"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "01863ebc-3a80-4518-ad20-1c29a74adcbd"}, {"timestamp": "2025-03-12T00:00:00Z", "date_only": false, "value": "2025-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7184ad0d-b28c-4514-b58c-6acc59d8336f"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1e86a363-2934-49b1-b506-e819c7745678"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "18a79a3e-43eb-4161-9148-6744e30e19bc"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1383954c-7a64-4215-a7c8-92618b8e1b24"}, {"timestamp": "2025-03-16T00:00:00Z", "date_only": false, "value": "2025-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "adda0f8b-f003-409e-b8cf-732777a82df1"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a90cafe0-2d40-4961-a3bf-b8fbcad24328"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a04dd92e-aa47-4ba4-ae79-e5fc72917fbf"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d496032c-8377-48c1-b45a-97bdf78bcd97"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bac20e86-64ab-4c2d-b583-8fed63f4897e"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "01202e8e-1a1b-4802-9885-f84a62a78dc4"}, {"timestamp": "2025-03-22T00:00:00Z", "date_only": false, "value": "2025-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "52957764-df83-445c-8750-32ad7baabc7a"}, {"timestamp": "2025-03-23T00:00:00Z", "date_only": false, "value": "2025-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8d6fd09c-470c-4733-aaab-b8d6cb595fb4"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": false, "value": "2025-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cab487fe-82bb-497e-bbc6-5d694a20aadc"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a4d7b634-d53e-4d49-80da-9b62c3bc744b"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bb3eb6fa-3f4d-4df4-9f36-991ecf158bae"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b9498e7c-5097-4398-9c3c-16ccc6c10525"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": false, "value": "2025-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "32f7d934-d2b4-416b-bf20-6c74e6087867"}, {"timestamp": "2025-03-29T00:00:00Z", "date_only": false, "value": "2025-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cdd999f9-4113-46ea-bee2-b00d27b4e7bc"}, {"timestamp": "2025-03-30T00:00:00Z", "date_only": false, "value": "2025-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ab29e1ee-f73c-4ba6-9889-512e7e3d3a81"}, {"timestamp": "2025-03-31T00:00:00Z", "date_only": false, "value": "2025-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e2be8c2a-c42c-46ae-9bf1-f486a7ee87ad"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c82413b2-2650-4bd4-ad75-180566abfa8b"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": false, "value": "2025-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "88fad52d-2e0c-4b48-9283-23f20958ec51"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "13b32586-ad72-4031-ada0-2076fd0f35fb"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ca8fa053-2eb5-46d8-9d7f-2f7250e159a9"}, {"timestamp": "2025-04-05T00:00:00Z", "date_only": false, "value": "2025-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d914eeb4-0b55-4660-baf9-9e6b38ebcde4"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a25d98e9-7334-498c-8d18-3c0aca8cb948"}, {"timestamp": "2025-04-07T00:00:00Z", "date_only": false, "value": "2025-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5abd2f1c-8919-410c-9bfb-9832ece603ab"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e1c22a1a-a4c9-4136-ace3-5e10ecdabbd3"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2e91d5ee-d8e9-4bcc-b053-69a642a80be2"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9196b59b-7778-494a-a9fe-b2d033d2d717"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d81da954-7b60-49c5-a96e-f5f5e5ea0bd1"}, {"timestamp": "2025-04-11T23:00:05Z", "date_only": false, "value": "2025-04-11T23:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/P5LDm3S4VTfGYBgu3ytMcEur8FEGyy2Co8KdeMUu5EMrSc8", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ee5d180f-3577-46fc-8294-9863e700615a"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7ff5828e-86ce-4630-a3a1-ad6c93bc1f15"}, {"timestamp": "2025-04-13T00:00:00Z", "date_only": false, "value": "2025-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5647d683-5976-4546-bda9-128669757304"}, {"timestamp": "2025-04-14T00:00:00Z", "date_only": false, "value": "2025-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6dedbf7c-0fa4-42f4-a5c2-dc6dfebb5737"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "998d161a-c608-460d-ba3e-3d624f6fd1f2"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4313e013-00fd-41ad-9163-04b60a6af65a"}, {"timestamp": "2025-04-17T00:00:00Z", "date_only": false, "value": "2025-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "de2c99f2-3954-45c7-be5f-b75bf8123121"}, {"timestamp": "2025-04-18T00:00:00Z", "date_only": false, "value": "2025-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "268fe4b4-623f-4db9-8b86-20cf5b60af13"}, {"timestamp": "2025-04-19T00:00:00Z", "date_only": false, "value": "2025-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "44d5c3d4-2299-40a6-aca8-06999824512c"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e617432d-cf44-4420-8469-e465cdb86c9d"}, {"timestamp": "2025-04-21T00:00:00Z", "date_only": false, "value": "2025-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e8fc8766-a02e-4c60-b9bb-68970c16176b"}, {"timestamp": "2025-04-22T00:00:00Z", "date_only": false, "value": "2025-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "61f8240c-8f1e-4f7e-8851-c14d0696b70e"}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5291eb83-0b56-41cb-b28e-395d015a4e61"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "11d9c0c2-86d0-4013-9db4-07a8d2931090"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "639f7436-13a4-466a-8786-b6341d6ad1f4"}, {"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6ca12450-38ce-4483-8407-75831771363e"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "10335ad8-c779-4464-a11f-c89fec6fbc2e"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6745364f-a429-4afd-ae82-07a9185f2d78"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "db78013e-c31f-429f-80e1-7775944de6bb"}, {"timestamp": "2025-04-30T00:00:00Z", "date_only": false, "value": "2025-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "425d6c26-499e-4643-b8f7-444a2ed8777d"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "39b75f67-fe38-4e7d-b25a-2605aed28d77"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bd529b0c-7231-42ce-a148-8951a45343a9"}, {"timestamp": "2025-05-03T00:00:00Z", "date_only": false, "value": "2025-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6b04d5d5-8fa2-4588-80d3-8d0d607c661c"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d85bd88d-bc35-4c44-b6fc-5703f3ac1e9e"}, {"timestamp": "2025-05-04T06:54:42.186Z", "date_only": false, "value": "2025-05-04T06:54:42.186345Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-63bf87e2-c9a94cd991e03d23", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f4ba2094-9501-482c-aff1-43ddd16dc58e", "url": "https://poliverso.org/objects/0477a01e-63bf87e2-c9a94cd991e03d23"}, {"timestamp": "2025-05-05T00:00:00Z", "date_only": false, "value": "2025-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7c905b87-fb18-4624-b2d6-6c0d68ef7e5c"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5479b7d9-28fb-436b-b159-70879c7b4e08"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ce1a1364-47d7-4ea1-b8c6-590e21a42364"}, {"timestamp": "2025-05-06T20:06:36Z", "date_only": false, "value": "2025-05-06T20:06:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/16899", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0f449263-6721-40c1-9cea-b14bf104d209", "content": "\ud83d\udea8CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC\n\nCredit: youtube.com/@ExploitsSimplified", "url": "https://t.me/TheDarkWebInformer/16899"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6dde00fa-8a6f-4e25-9d19-620e4db8b48f"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fe71e4a9-19fc-4f10-ad9e-bff3aa1b6010"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8d6f7ada-9f16-45f0-b814-5b07334b3b6a"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a1287f8d-cdd1-4285-994b-40c0eee07b2d"}, {"timestamp": "2025-05-08T17:00:09Z", "date_only": false, "value": "2025-05-08T17:00:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/uKv8shv3okWAklgPj_bfDKQgXuFsx43ivhs8KNTxdUkHotM", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "603398c4-d341-42f4-90b9-14e15c441171"}, {"timestamp": "2025-05-09T00:00:00Z", "date_only": false, "value": "2025-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "957a8610-6f3d-449b-a8ac-14915af094b0"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fd794b58-6932-4741-86c8-51353cd5e6a9"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "445d7d06-5dbb-453b-8067-b7d7cef9741e"}, {"timestamp": "2025-05-12T00:00:00Z", "date_only": false, "value": "2025-05-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fd1e47c0-826d-489a-9148-af099802bb24"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "62b4bad2-00a6-4ffa-9d34-e4449609d502"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7d01c6e3-7157-4067-95c7-1f39402ffc62"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f3fbbf8f-cb42-47d3-a55c-f8767224251d"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": false, "value": "2025-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3f889d88-adc4-4d99-841c-4dfca0f438fd"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2febd74c-b987-4227-9ad9-664129160724"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cb2e16d5-17be-40d0-8fc9-c655d46c7445"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8149e06c-8ef1-4bcd-994e-450816dedd46"}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": false, "value": "2025-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "80d3273a-6308-41bf-aa21-b772ca34a091"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6c5b3066-5a5b-4df5-8c4c-104f73e33411"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "75f71acb-a14c-4249-9820-6310c2aaac23"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bb99d2d3-0e6e-4ac4-b490-a1f78042c99d"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "12ff8b20-8419-4941-be5b-acd99cb9ec5e"}, {"timestamp": "2025-05-25T00:00:00Z", "date_only": false, "value": "2025-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d15daf86-ce8d-46d9-b1b6-334003df2b4f"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "af378d8a-de8c-42e1-b870-0372a158406d"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fbc53614-52a2-48f8-a44a-a502a1471252"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "de887a2d-4073-43d2-8af8-eca490f39aec"}, {"timestamp": "2025-05-29T00:00:00Z", "date_only": false, "value": "2025-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e372b422-a9d9-4bb0-8563-a459b189524d"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "218c64df-a947-495e-8760-204abb4b59fd"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "16a4adc6-3bb4-4149-bb9c-32846c05c4e2"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8ce68a2f-10f8-4b93-8b05-0c285f37b1f2"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "33155617-c9f3-4cbf-8cc4-ef925440fafa"}, {"timestamp": "2025-06-03T00:00:00Z", "date_only": false, "value": "2025-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "eef2cc12-14ed-4e9e-a7e7-74593c30304b"}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": false, "value": "2025-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "adcda9d4-8e91-4a5d-9fac-83107d3a0476"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1336b912-be4b-49c0-b80a-48d78dfabf80"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": false, "value": "2025-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "142bb04a-8645-4124-81df-d66d1ae81e73"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3e70423f-9b0d-432e-8d0f-67a86b0fd83b"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "762d58f6-9342-49e2-bf24-2f9a79474066"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4ca6fc66-960d-4718-aa07-14e55b84c428"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "334ee200-54e7-411a-b024-12c9c4e48bc7"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "46caea46-3889-4c69-a6da-2b5aa826b50d"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9f35117d-cc81-4468-a9a8-263caa241c90"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ec3eea56-9bb1-4a12-a299-64b4e46b6456"}, {"timestamp": "2025-06-14T00:00:00Z", "date_only": false, "value": "2025-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a0a5b43b-e3ec-4fbe-a7d2-93ee036a77dd"}, {"timestamp": "2025-06-15T00:00:00Z", "date_only": false, "value": "2025-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ad0d8e76-fa75-4654-8e40-a9d125274eb1"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1537d95b-711f-4824-9f51-68576fb7a812"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fda645c1-d920-41c0-9a9d-52d8e2530e60"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fb6a5f1c-2442-41fd-a405-37caa942f190"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9ffda603-a5e1-4fef-85cc-b209ac1da162"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6f7d2048-b926-47d1-8531-05a4f71953bb"}, {"timestamp": "2025-06-20T00:00:00Z", "date_only": false, "value": "2025-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9e66926e-74d6-440f-84bc-dbf275f11037"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cd3e3f24-412f-4e9b-93c9-11718b92ca91"}, {"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3c2fe42c-06ea-4ab5-9e87-fe8e97876fb8"}, {"timestamp": "2025-06-23T15:38:44.038Z", "date_only": false, "value": "2025-06-23T15:38:44.038626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lsbw2uv5aw2r", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "17444a14-4a4b-4e33-a451-db55c36a8dc1", "url": "https://bsky.app/profile/nimblenerd.social/post/3lsbw2uv5aw2r"}, {"timestamp": "2025-06-23T22:02:44.318Z", "date_only": false, "value": "2025-06-23T22:02:44.318829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lscljju5vn22", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b276f17f-2aaf-4cb1-b2c3-c8d9abe72711", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lscljju5vn22"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fa444e73-c014-48ed-b148-404dce872a3b"}, {"timestamp": "2025-06-24T01:00:00Z", "date_only": false, "value": "2025-06-24T01:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/06/china-linked-salt-typhoon-exploits.html", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ddfe86b4-159b-4676-ab26-b01df09db936", "url": "https://thehackernews.com/2025/06/china-linked-salt-typhoon-exploits.html"}, {"timestamp": "2025-06-24T03:51:12.089Z", "date_only": false, "value": "2025-06-24T03:51:12.089285Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lsd6ynah6x24", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3227100c-b6b0-4277-9f89-06b1383e9086", "url": "https://bsky.app/profile/nimblenerd.social/post/3lsd6ynah6x24"}, {"timestamp": "2025-06-24T04:02:53.773Z", "date_only": false, "value": "2025-06-24T04:02:53.773706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lsd7nks36w2k", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1b65caa5-fb1b-4f12-9cde-f087f0d4b08a", "url": "https://bsky.app/profile/hackingne.ws/post/3lsd7nks36w2k"}, {"timestamp": "2025-06-24T06:53:09Z", "date_only": false, "value": "2025-06-24T06:53:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/RvKVQ5-qSa38BwXRpWbMuaRgV7-02YjhnLAoH8O4CLELGg", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "536d39c0-2a2f-4059-9125-2f4e78daf809"}, {"timestamp": "2025-06-24T08:06:18.363Z", "date_only": false, "value": "2025-06-24T08:06:18.363764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lsdnaqapcc2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fa228496-536a-4c61-989c-d461bfb8907e", "url": "https://bsky.app/profile/shiojiri.com/post/3lsdnaqapcc2u"}, {"timestamp": "2025-06-24T10:17:45.536Z", "date_only": false, "value": "2025-06-24T10:17:45.536142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lsduleyqac2w", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d25a9f47-4ec5-45cd-8068-6754d153c55f", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lsduleyqac2w"}, {"timestamp": "2025-06-24T11:05:33.960Z", "date_only": false, "value": "2025-06-24T11:05:33.960345Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114738012629827666", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bc5a6d18-09fb-4b44-973e-9837f2746857", "url": "https://infosec.exchange/users/dragonjar/statuses/114738012629827666"}, {"timestamp": "2025-06-24T11:15:52.666Z", "date_only": false, "value": "2025-06-24T11:15:52.666153Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pileofgarbage.net/post/3lsdxtna23k25", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6d23b7ce-1844-40e7-843c-7f28563529ea", "url": "https://bsky.app/profile/pileofgarbage.net/post/3lsdxtna23k25"}, {"timestamp": "2025-06-24T11:48:20Z", "date_only": false, "value": "2025-06-24T11:48:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7156", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "848dc29a-d0bb-4834-bd9c-612e953cbdfd", "content": "\u041d\u0430\u0447\u043d\u0435\u043c \u0441 \u0442\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u00ab\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432\u00bb: \u0432 \u041a\u0430\u043d\u0430\u0434\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0446\u0435\u043d\u0442\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 \u0424\u0411\u0420 \u0421\u0428\u0410 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e Salt Typhoon \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043c\u0435\u0441\u0442\u043d\u0443\u044e \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0447\u0435\u0440\u0435\u0437 CVE-2023-20198.\n\nCVE-2023-20198\u00a0- \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco IOS XE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430\u00a0\u0431\u043e\u043b\u0435\u0435 10 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0448\u043b\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043e\u0434\u0438\u043d \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u0443\u0441\u043b\u0443\u0433 \u0432 \u041a\u0430\u043d\u0430\u0434\u0435 \u043d\u0435 \u0441\u043c\u043e\u0433 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 Salt Typhoon \u043b\u0435\u0433\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0442\u0440\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 CVE-2023-20198 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u043e \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u044f GRE, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0438\u0437 \u0441\u0435\u0442\u0438.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0435\u0449\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435\u00a0\u0440\u044f\u0434\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0443 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0428\u041f\u0414, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 Salt Typhoon, \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438\u00a0\u0442\u0430\u043a\u0436\u0435 \u043e\u0437\u0430\u0434\u0430\u0447\u0438\u043b\u0438\u0441\u044c \u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0441\u0442\u0440\u0430\u043d\u0435.\n\n\u041d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u043d\u0435 \u0431\u044b\u043b\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e, \u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u0438\u0437\u044b\u0432\u044b \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0442\u0430\u043a \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u043c\u0435\u0440.\n\n\u041a\u0438\u0431\u0435\u0440\u0446\u0435\u043d\u0442\u0440 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e, \u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445 \u0438 \u043a\u0440\u0430\u0443\u0434\u0441\u043e\u0440\u0441\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 Salt Typhoon, \u0432\u044b\u0445\u043e\u0434\u0438\u0442 \u0437\u0430 \u0440\u0430\u043c\u043a\u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0442\u0440\u0430\u0441\u043b\u0438.\n\n\u0412\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u043e\u0439, \u0445\u043e\u0442\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u0438\u0431\u0435\u0440\u0446\u0435\u043d\u0442\u0440 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u00ab\u043f\u043e\u0447\u0442\u0438 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u0441\u044f\u00bb \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442, \u043f\u0440\u0438\u0437\u0432\u0430\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0442\u0438, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c \u0441\u0432\u044f\u0437\u0438.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b, \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0441\u0435\u0442\u0438, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 MSP \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0441\u0447\u0435\u0442\u0443 Salt Typhoon \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432\u00a0\u0434\u0435\u0441\u044f\u0442\u043a\u0430\u0445 \u0441\u0442\u0440\u0430\u043d, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AT&T, Verizon, Lumen, Charter Communications, Consolidated Communications \u0438 Windstream, \u0430 \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 - Viasat.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0442\u043e\u043b\u044c \u00ab\u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\u00bb \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0439, \u043a\u0430\u043a \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u041a\u0430\u043d\u0430\u0434\u043e\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c \u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043a\u0438\u0431\u0435\u0440\u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0435\u0449\u0435 \u043d\u0435 \u0440\u0430\u0437 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0438, \u043e\u0441\u0432\u0435\u0449\u0430\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u00ab\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432\u00bb.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/7156"}, {"timestamp": "2025-06-24T12:00:27.030Z", "date_only": false, "value": "2025-06-24T12:00:27.030539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/walknews.bsky.social/post/3lse2dhxzxv2y", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d371e79d-4ff2-471c-9f1e-d534b366d066", "url": "https://bsky.app/profile/walknews.bsky.social/post/3lse2dhxzxv2y"}, {"timestamp": "2025-06-24T13:04:45.171Z", "date_only": false, "value": "2025-06-24T13:04:45.171991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lse5we2dg22k", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c91139b8-21d2-4d52-ab26-877296e02b5a", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lse5we2dg22k"}, {"timestamp": "2025-06-24T14:29:29.882Z", "date_only": false, "value": "2025-06-24T14:29:29.882698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cocanews.bsky.social/post/3lsecnytn3h2i", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3e4e8032-e515-4c4e-a82b-d96105890141", "url": "https://bsky.app/profile/cocanews.bsky.social/post/3lsecnytn3h2i"}, {"timestamp": "2025-06-25T00:00:00Z", "date_only": false, "value": "2025-06-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "247a27be-3fb4-4f39-bfaa-4a792c73934f"}, {"timestamp": "2025-06-25T02:22:07.386Z", "date_only": false, "value": "2025-06-25T02:22:07.386767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsfki7pkmg2p", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "625dd4ab-1e7b-45d0-a3e8-589b721123d5", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lsfki7pkmg2p"}, {"timestamp": "2025-06-25T17:03:08Z", "date_only": false, "value": "2025-06-25T17:03:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/AfroHax/2903", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6adaa6d8-1d39-41e0-a29b-3dfb0770db88", "content": "https://thehackernews.com/2025/06/china-linked-salt-typhoon-exploits.html\n\nChinese state-sponsored group Salt Typhoon exploited a critical Cisco IOS XE vulnerability (CVE-2023-20198) to breach a Canadian telecom. The flaw, rated CVSS 10.0, allowed remote access and persistence via a GRE tunnel. The attackers remained undetected and may have siphoned global traffic. Canadian and US agencies have issued alerts, urging immediate patching and enhanced monitoring.", "url": "https://t.me/AfroHax/2903"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fa53ac73-3b41-4d14-9e8e-fb42c17f2b00"}, {"timestamp": "2025-06-26T02:21:39.358Z", "date_only": false, "value": "2025-06-26T02:21:39.358363Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsi2wes7qn2y", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e897dc1d-e28d-4e33-9d42-8ed90e5bab18", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lsi2wes7qn2y"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8066f000-e6e9-433b-a515-8985ab473688"}, {"timestamp": "2025-06-27T02:21:52.084Z", "date_only": false, "value": "2025-06-27T02:21:52.084279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsklfo5fhc2k", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6087fbf6-6bdd-4f27-9d24-7b8e09cff70d", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lsklfo5fhc2k"}, {"timestamp": "2025-06-28T00:00:00Z", "date_only": false, "value": "2025-06-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3c45514b-1059-4a0b-bd4b-d3bbf323b3df"}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "14443009-2dbb-444c-b5f1-b1b7008f3fe7"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cbaa2e46-ef4f-4835-8f07-f6e85dd86c22"}, {"timestamp": "2025-06-30T06:46:28Z", "date_only": false, "value": "2025-06-30T06:46:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1797", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "17e67651-1ddd-43c4-ab9b-97cf634fbcc4", "content": "\ud83e\udd16 \u0412\u0437\u043b\u043e\u043c \u043f\u043b\u043e\u0442\u0438\u043d\u044b, \u0418\u0418-\u0445\u0430\u043a\u0435\u0440 \u0432 \u0442\u043e\u043f\u0435 \u0438 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83c\udf0e \u041e\u0431\u0437\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0418\u0411 \u0437\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b. \u0412\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0442\u0430\u043a\u0438\u0435 \u0445\u0438\u0442\u044b, \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 Tata \u0438 \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442 \u041a\u0443\u0430\u043b\u0430-\u041b\u0443\u043c\u043f\u0443\u0440\u0430. \u0412 \u0446\u0435\u043b\u043e\u043c, 52% \u0430\u0442\u0430\u043a \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u044c\u0435\u0434\u0435\u0441\u0442\u0430\u043b\u0435 \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043f\u0438\u0449\u0435\u0432\u0430\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c.\n\n\ud83d\udd25 \u0412 \u043e\u0431\u0437\u043e\u0440 \u043d\u0435 \u0443\u0441\u043f\u0435\u043b \u0432\u043e\u0439\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u043a\u0435\u0439\u0441 \u0438\u0437 \u041d\u043e\u0440\u0432\u0435\u0433\u0438\u0438 \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0432\u043e\u0434\u044f\u043d\u043e\u0439 \u043f\u043b\u043e\u0442\u0438\u043d\u044b \u0438 \u043e\u0442\u043a\u0440\u044b\u043b\u0438 \u0432\u0435\u043d\u0442\u0438\u043b\u0438 \u0446\u0435\u043b\u0438\u043a\u043e\u043c. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0432\u043f\u0440\u043e\u0447\u0435\u043c, \u043d\u0435 \u043f\u0440\u0438\u043d\u0451\u0441 \u0443\u0449\u0435\u0440\u0431\u0430.\n\n\ud83d\udfe3\u041a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0439 \u0418\u0411-\u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Salt Typhoon \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0421\u0428\u0410 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0438 \u043e\u0431\u0449\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 CVE-2023-20198 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35\u041d\u043e\u0432\u044b\u0439 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u0435\u0442 \u0434\u043e\u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0435 \u043f\u0440\u0435\u0442\u0435\u043d\u0437\u0438\u0438 \u043a \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c, \u0418\u0422- \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c. \u0420\u0430\u0441\u0441\u044b\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Werewolves, \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a Lockbit, Cobalt Strike, Meterpreter \u0438 Anydesk.\n\n\ud83d\udfe3\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0447\u0430\u0449\u0435 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 Exchange Direct Send, \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043e\u0442\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u041c\u0424\u0423. \u0412 Microsoft 365 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u0442\u0430\u043a\u0438\u0445 \u043f\u0438\u0441\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430 \u0434\u043b\u044f \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 \u0441\u043f\u0430\u043c\u0430 \u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0434\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0443\u0436\u043d\u043e \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Exchange \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043e\u043f\u0446\u0438\u044e Reject Direct Send.\n\n\ud83d\udfe1\u041d\u043e\u0432\u0430\u044f, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f, \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 OneClick, \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438 \u043d\u0435\u0444\u0442\u0435\u0433\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0435\u0439 ClickOnce, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f .NET-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0421 \u0435\u0451 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a OneClikNet, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u043b\u0435\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 \u043d\u0430 Go. \n\n\u26aa\ufe0f\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442, \u043e\u043d \u0436\u0435 \u0441\u0435\u0442\u044c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438, \u043e\u043d \u0436\u0435 ORB network, LapDogs. \u041d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 SOHO-\u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0412\u041f\u041e ShortLeash, \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0432 \u0421\u0428\u0410 \u0438 \u042e\u0412\u0410.\n\n\ud83d\udd34\u0418\u0418-\u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Xbow \u0437\u0430\u043d\u044f\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u0448\u0442\u0430\u0442\u043e\u0432\u0441\u043a\u043e\u043c \u0442\u043e\u043f\u0435 HackerOne. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0441\u0441\u043a\u0430\u0437 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442 \u043d\u0430 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u0431\u043e\u0440, \u043a\u0430\u043a\u0438\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043a\u0430\u0442\u044c, \u0438 \u0443 \u043a\u043e\u0433\u043e. \u041d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e \u0441\u0447\u0435\u0442\u043e\u0432 \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u043b\u044c\u0437\u044f. \n\n\ud83d\udd35\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0432\u044b\u0448\u0435\u043b \u0430\u043d\u0433\u043b\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 H1, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Butian.\n\n\ud83d\udfe3\u0413\u0440\u0443\u043f\u043f\u0430 Kimsuky \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0412\u041f\u041e \u043d\u0430 GitHub. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0430 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0437\u0430\u0448\u0438\u0442 \u043b\u0438\u0447\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d Github (PAT).\n\n\ud83d\udfe3\u0421\u043b\u043e\u0436\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 APT-Q-14, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0447\u0430\u0441\u0442\u044c\u044e DarkHotel. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f ClickOnce, XSS \u0432 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0431-\u043f\u043e\u0447\u0442\u0435, \u0434\u0430 \u0435\u0449\u0451 \u0437\u0438\u0440\u043e\u0434\u0435\u0438 \u0432 Android, \u0442\u043e\u0436\u0435 \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 CL-CRI-1014 (\u0443\u0441\u043f\u0435\u0448\u043d\u043e) \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0410\u0444\u0440\u0438\u043a\u0435 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0434\u0430\u0451\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0438\u043c \u0434\u0440\u0443\u0433\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c.\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 Odyssey Stealer \u0434\u043b\u044f MacOS.\n\n\ud83d\udd25\u041d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 FileFix \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c\u044e ClickFix \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u043e \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u043a\u043d\u043e \u041f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 (\u00ab\u0412\u044b\u0431\u0440\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u00bb), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u0435\u0451 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u044f\u0432\u043d\u043e \u043f\u0440\u043e\u0439\u0434\u0451\u0442 \u043e\u0447\u0435\u043d\u044c \u0431\u044b\u0441\u0442\u0440\u043e. \n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1797"}, {"timestamp": "2025-06-30T14:22:34Z", "date_only": false, "value": "2025-06-30T14:22:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1208", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "135f6283-2d85-4dbf-a88a-44135939e918", "content": "\ud83e\udd16 \u0647\u06a9 \u0633\u062f\u060c \u0647\u06a9\u0631 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u062f\u0631 \u0635\u062f\u0631 \u0648 \u0627\u062e\u0628\u0627\u0631 \u0641\u0631\u0627\u0648\u0627\u0646 APT \u0628\u0631\u0627\u06cc \u0647\u0641\u062a\u0647\n\n\ud83c\udf0e \u0628\u0631\u0631\u0633\u06cc \u062d\u0648\u0627\u062f\u062b \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0635\u0646\u0639\u062a\u06cc \u062f\u0631 \u0633\u0647 \u0645\u0627\u0647\u0647 \u0627\u0648\u0644. \u0634\u0627\u0645\u0644 \u062d\u0645\u0644\u0627\u062a\u06cc \u0645\u0627\u0646\u0646\u062f \u062d\u0645\u0644\u0647 \u0628\u0647 \u0641\u0631\u0648\u062f\u06af\u0627\u0647 \u062a\u0627\u062a\u0627 \u0648 \u06a9\u0648\u0627\u0644\u0627\u0644\u0627\u0645\u067e\u0648\u0631. \u062f\u0631 \u0645\u062c\u0645\u0648\u0639\u060c \u06f5\u06f2\u066a \u0627\u0632 \u062d\u0645\u0644\u0627\u062a\u060c \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f\u06cc \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0628\u0648\u062f \u0648 \u0635\u0646\u0627\u06cc\u0639 \u0633\u0627\u062e\u062a\u0645\u0627\u0646\u06cc \u0648 \u063a\u0630\u0627\u06cc\u06cc \u0646\u06cc\u0632 \u062f\u0631 \u0635\u062f\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a\u0646\u062f.\n\n\ud83d\udd25 \u06cc\u06a9 \u0645\u0648\u0631\u062f \u062c\u0627\u0644\u0628 \u0627\u0632 \u0646\u0631\u0648\u0698 \u062f\u0631 \u0627\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc \u06af\u0646\u062c\u0627\u0646\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a - \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0633\u062f \u0622\u0628 \u0631\u0627 \u0628\u0647 \u0635\u0648\u0631\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633 (brute-force) \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646\u062f \u0648 \u0634\u06cc\u0631\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0627\u06cc\u0646 \u062d\u0627\u062f\u062b\u0647 \u0647\u06cc\u0686 \u062e\u0633\u0627\u0631\u062a\u06cc \u0628\u0647 \u0628\u0627\u0631 \u0646\u06cc\u0627\u0648\u0631\u062f.\n\n\ud83d\udfe3\u0633\u0627\u0632\u0645\u0627\u0646 \u062a\u0646\u0638\u06cc\u0645 \u0645\u0642\u0631\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0646\u0627\u062f\u0627 \u0647\u0634\u062f\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062d\u0645\u0644\u0627\u062a \u06af\u0631\u0648\u0647 Salt Typhoon \u0645\u062d\u062f\u0648\u062f \u0628\u0647 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0646\u06cc\u0633\u062a \u0648 \u0641\u0642\u0637 \u0627\u0631\u0627\u0626\u0647 \u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062e\u0627\u0628\u0631\u0627\u062a\u06cc \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0647 \u062c\u0627\u0633\u0648\u0633\u06cc \u0648 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u0639\u0645\u0648\u0645\u06cc \u062f\u0631 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0631\u0627\u062a\u0698\u06cc\u06a9 \u0627\u062f\u0627\u0645\u0647 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f. \u0622\u0646\u0647\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 CVE-2023-20198 \u0648 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0644\u0628\u0647\u200c\u0627\u06cc \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0646\u0641\u0648\u0630 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\n\ud83d\udd35\u06cc\u06a9 \u06a9\u0644\u0627\u0647\u0628\u0631\u062f\u0627\u0631\u06cc \u062c\u062f\u06cc\u062f \u0641\u06cc\u0634\u06cc\u0646\u06af \u0646\u06cc\u0632\u0647\u200c\u0627\u06cc\u060c \u0627\u062f\u0639\u0627\u0647\u0627\u06cc \u067e\u06cc\u0634 \u0627\u0632 \u0645\u062d\u0627\u06a9\u0645\u0647 \u0639\u0644\u06cc\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc\u060c \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0645\u0627\u0644\u06cc \u0631\u0648\u0633\u06cc\u0647 \u0631\u0627 \u062a\u0642\u0644\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u06a9\u0644\u0627\u0647\u0628\u0631\u062f\u0627\u0631\u06cc \u062a\u0648\u0633\u0637 \u06af\u0631\u0648\u0647 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Werewolves \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0632\u0631\u0627\u062f\u062e\u0627\u0646\u0647 \u0622\u0646\u0647\u0627 \u0634\u0627\u0645\u0644 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Lockbit\u060c Cobalt Strike\u060c Meterpreter \u0648 Anydesk \u0627\u0633\u062a.\n\n\n\ud83d\udfe3\u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u06cc\u0634\u062a\u0631 \u0634\u0631\u0648\u0639 \u0628\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0639\u0645\u0644\u06a9\u0631\u062f Exchange Direct Send \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0631\u0627\u06cc \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u0633\u0646\u062f \u0627\u0633\u06a9\u0646 \u0634\u062f\u0647 \u0627\u0632 \u06cc\u06a9 MFP \u0634\u0628\u06a9\u0647 \u0628\u0647 \u062e\u0648\u062f\u0634\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 Microsoft 365\u060c \u0627\u0631\u0633\u0627\u0644 \u0686\u0646\u06cc\u0646 \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc\u06cc \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u062f\u0627\u0631\u062f\u060c \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0627\u06cc\u0646 \u0639\u0645\u0644\u06a9\u0631\u062f \u0628\u0631\u0627\u06cc \u0627\u0631\u0633\u0627\u0644 \u0647\u0631\u0632\u0646\u0627\u0645\u0647 \u0648 \u0641\u06cc\u0634\u06cc\u0646\u06af \u062f\u0631 \u06cc\u06a9 \u0633\u0627\u0632\u0645\u0627\u0646 \u0648\u0627\u062d\u062f \u0627\u06cc\u062f\u0647\u200c\u0622\u0644 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062e\u0648\u062f\u060c \u0628\u0627\u06cc\u062f \u06af\u0632\u06cc\u0646\u0647 Reject Direct Send \u0631\u0627 \u062f\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a Exchange \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f.\n\n\n\ud83d\udfe1\u06cc\u06a9 \u06af\u0631\u0648\u0647 \u062c\u062f\u06cc\u062f OneClick\u060c \u0627\u062d\u062a\u0645\u0627\u0644\u0627\u064b \u0686\u06cc\u0646\u06cc\u060c \u0628\u0647 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u0628\u062e\u0634\u200c\u0647\u0627\u06cc \u0627\u0646\u0631\u0698\u06cc \u0648 \u0646\u0641\u062a \u0648 \u06af\u0627\u0632 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0627\u0632 \u0641\u0646\u0627\u0648\u0631\u06cc ClickOnce \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0648 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc .NET \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0627 \u06a9\u0645\u06a9 \u0622\u0646\u060c \u0644\u0648\u062f\u0631 OneClikNet \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0633\u067e\u0633 \u06cc\u06a9 \u062f\u0631\u0628 \u067e\u0634\u062a\u06cc \u062f\u0631 Go \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\n\u26aa\ufe0f\u06cc\u06a9 \u0628\u0627\u062a\u200c\u0646\u062a \u062c\u062f\u06cc\u062f \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0634\u0628\u06a9\u0647 \u067e\u0631\u0648\u06a9\u0633\u06cc \u062e\u0627\u0646\u06af\u06cc\u060c \u0634\u0628\u06a9\u0647 ORB \u0648 LapDogs \u0646\u06cc\u0632 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u062f\u0627\u0641\u0632\u0627\u0631 ShortLeash \u0628\u0631 \u0631\u0648\u06cc \u0631\u0648\u062a\u0631\u0647\u0627\u06cc SOHO \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0646\u0635\u0628 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0639\u0645\u062f\u062a\u0627\u064b \u062f\u0631 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0648 \u0622\u0633\u06cc\u0627\u06cc \u062c\u0646\u0648\u0628 \u0634\u0631\u0642\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\n\ud83d\udd34\u0633\u06cc\u0633\u062a\u0645 \u062c\u0633\u062a\u062c\u0648\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc Xbow \u062f\u0631 \u0635\u062f\u0631 \u0641\u0647\u0631\u0633\u062a HackerOne \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a. \u062f\u0627\u0633\u062a\u0627\u0646 \u0645\u0641\u0635\u0644 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646\u060c \u0628\u0647 \u0627\u0646\u062a\u062e\u0627\u0628 \u062f\u0642\u06cc\u0642 \u06a9\u0644\u0627\u0633\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u0627\u06cc\u0646\u06a9\u0647 \u0627\u0632 \u0686\u0647 \u06a9\u0633\u06cc \u062c\u0633\u062a\u062c\u0648 \u0634\u0648\u062f\u060c \u0627\u0634\u0627\u0631\u0647 \u062f\u0627\u0631\u062f. \u0627\u0645\u0627 \u0646\u062a\u0627\u06cc\u062c \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0646\u0627\u062f\u06cc\u062f\u0647 \u06af\u0631\u0641\u062a.\n\n\n\ud83d\udfe3\u06af\u0631\u0648\u0647 Kimsuky \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0647 \u0628\u0647\u0628\u0648\u062f \u062a\u06a9\u0646\u06cc\u06a9\u200c\u0647\u0627\u06cc \u0630\u062e\u06cc\u0631\u0647\u200c\u0633\u0627\u0632\u06cc \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 GitHub \u0627\u062f\u0627\u0645\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f. \u067e\u06cc\u0644\u0648\u062f\u0647\u0627 \u0648 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0631\u0642\u062a \u0634\u062f\u0647 \u062a\u0627 \u062d\u062f\u06cc \u062f\u0631 \u0645\u062e\u0627\u0632\u0646 \u062e\u0635\u0648\u0635\u06cc \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u0628\u0648\u062a\u200c\u0644\u0648\u062f\u0631 \u062f\u0627\u0631\u0627\u06cc \u06cc\u06a9 \u062a\u0648\u06a9\u0646 \u0634\u062e\u0635\u06cc Github (PAT) \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u062a\u0639\u0628\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\n\ud83d\udfe3\u06cc\u06a9 \u062d\u0645\u0644\u0647 \u067e\u06cc\u0686\u06cc\u062f\u0647 APT-Q-14 \u06a9\u0647 \u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u062e\u0634\u06cc \u0627\u0632 DarkHotel \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u062a\u0631\u06a9\u06cc\u0628\u06cc \u0627\u0632 ClickOnce\u060c XSS \u062f\u0631 \u06cc\u06a9 \u0648\u0628\u200c\u0645\u06cc\u0644 \u0628\u062f\u0648\u0646 \u0646\u0627\u0645 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 Android zerodei \u0628\u062f\u0648\u0646 \u0646\u0627\u0645 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\n\ud83d\udfe2\u06af\u0631\u0648\u0647 CL-CRI-1014 (\u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a) \u0628\u0647 \u0645\u0624\u0633\u0633\u0627\u062a \u0645\u0627\u0644\u06cc \u062f\u0631 \u0622\u0641\u0631\u06cc\u0642\u0627 \u0646\u0641\u0648\u0630 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0633\u067e\u0633 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0633\u0627\u06cc\u0631 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u0641\u0631\u0648\u0634\u062f.\n\n\n\n\ud83d\udd25\u062a\u06a9\u0646\u06cc\u06a9 \u062c\u062f\u06cc\u062f FileFix \u0646\u0648\u0639\u06cc \u0627\u0632 ClickFix \u0627\u0633\u062a \u0648 \u0628\u0647 \u0634\u0645\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a\u06cc \u0631\u0627 \u0628\u0647 \u067e\u0646\u062c\u0631\u0647 \u067e\u0627\u067e\u200c\u0622\u067e Explorer (\"Choose file\") \u062a\u0632\u0631\u06cc\u0642 \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u0628\u0627\u0632 \u0634\u0648\u062f. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0633\u0627\u062f\u06af\u06cc \u0627\u06cc\u0646 \u062a\u06a9\u0646\u06cc\u06a9\u060c \u0648\u0627\u0636\u062d \u0627\u0633\u062a \u06a9\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0622\u0646 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0633\u06cc\u0627\u0631 \u0633\u0631\u06cc\u0639 \u0627\u062a\u0641\u0627\u0642 \u062e\u0648\u0627\u0647\u062f \u0627\u0641\u062a\u0627\u062f\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "url": "https://t.me/ics_cert/1208"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "773dafe7-d350-45df-ad2f-7e95a3d22a34"}, {"timestamp": "2025-07-02T00:00:00Z", "date_only": false, "value": "2025-07-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8637bb90-b43e-4c67-ad04-459f25d84ed2"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e0c667e3-67cd-451e-b3f1-ba6a2044ce58"}, {"timestamp": "2025-07-04T00:00:00Z", "date_only": false, "value": "2025-07-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4a04fe3f-4b5a-48c3-a7c4-cf0629c9c258"}, {"timestamp": "2025-07-05T00:00:00Z", "date_only": false, "value": "2025-07-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fd83918b-5d34-415e-8c13-019789369f73"}, {"timestamp": "2025-07-05T19:42:13.286Z", "date_only": false, "value": "2025-07-05T19:42:13.286305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ltajbdklnd23", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f474448a-7d2c-4fd8-82ba-779fbb3faade", "url": "https://bsky.app/profile/cyberhub.blog/post/3ltajbdklnd23"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8b5744eb-1ff9-45ed-8be2-92e19349d7cb"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bbaffc3a-12f2-4a93-98d4-0998fc953d15"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2323cd70-c8e3-422a-8a6b-22ad35c1a8a2"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "12e43733-f2aa-4d8d-8ac0-07aa8e2f703c"}, {"timestamp": "2025-07-10T00:00:00Z", "date_only": false, "value": "2025-07-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f1668291-6bf7-427a-a7db-3abe4a5c9e5b"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d0d54694-1790-49f4-accb-56ba0c4b569e"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0352ec7a-cba2-45ed-97fc-1c7ec168d898"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6636b232-eebf-4fd5-b61e-01e9fbd132c5"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bff3f4d6-ab52-494a-af6b-46f76550b50e"}, {"timestamp": "2025-07-15T00:00:00Z", "date_only": false, "value": "2025-07-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "68502c49-a1d2-460f-8678-ebdeb72f9067"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "78bce886-53b6-468c-9929-d13dc3a32d10"}, {"timestamp": "2025-07-17T00:00:00Z", "date_only": false, "value": "2025-07-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8d43adae-30de-4760-9847-1b929fb7fe6f"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "448307ec-cc2a-42fb-85ff-8388db405d27"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0d0f66d8-7bbd-4856-96e9-ee9ad7356288"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "aa18c1d3-f25e-447f-b29e-e309292a76bc"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0e4d2ff3-7031-45e6-b599-ad477d97a7e0"}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": false, "value": "2025-07-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b4e57a60-4174-406c-a8a6-3aaaf6f20a00"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8543bd11-3755-4f08-8c89-157b5a20766d"}, {"timestamp": "2025-07-26T00:00:00Z", "date_only": false, "value": "2025-07-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "780ed1a4-4125-492a-96a2-0566ab17c521"}, {"timestamp": "2025-07-27T00:00:00Z", "date_only": false, "value": "2025-07-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bef4be4c-13fb-46f0-a53c-d9c3e7b29310"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "35ef8ee1-df6a-41b7-b09f-16948b64e6ca"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9241b245-f55d-4a40-ac75-9e4f86b5aa9b"}, {"timestamp": "2025-07-30T00:00:00Z", "date_only": false, "value": "2025-07-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "19432000-013b-4859-839d-af5ae27d2799"}, {"timestamp": "2025-07-31T00:00:00Z", "date_only": false, "value": "2025-07-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7384e34e-1b14-45e4-9ef7-6b313766e740"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3cf79ef3-6d8d-4aab-9b21-d9de3578262b"}, {"timestamp": "2025-08-02T00:00:00Z", "date_only": false, "value": "2025-08-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9f21acfa-20c8-4e6a-add1-9e1e4d9ab396"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "078e587d-351e-4088-9d87-0e39b5876084"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ce3f35db-e138-461b-b6be-768e2a87e668"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "343e8952-d9ef-40f4-80df-35f75ab20b6d"}, {"timestamp": "2025-08-06T00:00:00Z", "date_only": false, "value": "2025-08-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "170e5819-c00d-47b8-9676-9e9c821bf8bd"}, {"timestamp": "2025-08-07T00:00:00Z", "date_only": false, "value": "2025-08-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "97704d34-4d23-40e7-9520-2822d21b02fb"}, {"timestamp": "2025-08-08T00:00:00Z", "date_only": false, "value": "2025-08-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "334ba786-d737-4301-a9ed-8118c674edf4"}, {"timestamp": "2025-08-09T00:00:00Z", "date_only": false, "value": "2025-08-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6028c3e0-4fca-462b-85fb-dab77154961d"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": false, "value": "2025-08-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e394519f-efe0-4563-8647-b41584a5836f"}, {"timestamp": "2025-08-11T00:00:00Z", "date_only": false, "value": "2025-08-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "35417cee-a8b1-438d-abb3-fd5c5c5a3f12"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2c466f2d-1576-4b5f-b004-48d21d7189e3"}, {"timestamp": "2025-08-13T00:00:00Z", "date_only": false, "value": "2025-08-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7dae9f0c-fe44-46db-8598-701d2fd68bac"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "436bdd89-c8aa-4af8-abbf-96ea6ca49a27"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "88dde67f-5021-46ad-9aab-d81017d0411b"}, {"timestamp": "2025-08-16T00:00:00Z", "date_only": false, "value": "2025-08-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6cb27e65-03b8-43c7-bf3f-4cb376ddd48a"}, {"timestamp": "2025-08-17T00:00:00Z", "date_only": false, "value": "2025-08-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "423a4e9c-59af-4f9e-bb28-540badd4911f"}, {"timestamp": "2025-08-18T00:00:00Z", "date_only": false, "value": "2025-08-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9b9c1e71-f5c4-428f-a56b-cac2f5649c3a"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "df812482-5e42-4e7a-a7fc-961c1d39b4b8"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b032b2b9-4f57-424b-9d80-1af3f84fba27"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cb8fd0fd-cd14-4571-a6d8-82f4bfc8bb0a"}, {"timestamp": "2025-08-22T00:00:00Z", "date_only": false, "value": "2025-08-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "93f5159a-f383-406a-bf99-673920601bf7"}, {"timestamp": "2025-08-23T14:32:27.753Z", "date_only": false, "value": "2025-08-23T14:32:27.753373Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hunterstrategy.bsky.social/post/3lx36skhooq2e", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e13e05be-2d82-443f-999a-e354f3de4ffb", "url": "https://bsky.app/profile/hunterstrategy.bsky.social/post/3lx36skhooq2e"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f9eaf1e6-f076-4998-891a-a00545def6c9"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9db14d4c-6e94-4b1b-870f-eaec7da0c526"}, {"timestamp": "2025-08-27T00:00:00Z", "date_only": false, "value": "2025-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d48b71bc-0178-49dd-8d82-a9cdc822acd7"}, {"timestamp": "2025-08-28T00:00:00Z", "date_only": false, "value": "2025-08-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7dd10901-3755-4f45-b2ed-550110f8fb9c"}, {"timestamp": "2025-08-28T15:41:50Z", "date_only": false, "value": "2025-08-28T15:41:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3057b723-5fae-476d-b162-b0a1a9a63ac2", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5da5653f-0973-4d2b-a7dc-e92b0f5dab98"}, {"timestamp": "2025-08-29T07:38:09.520Z", "date_only": false, "value": "2025-08-29T07:38:09.520485Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-0cc0a2cc-984ab59dd0761b42", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "916b7513-e4d6-4619-a413-6be5e63d9e81", "url": "https://poliverso.org/objects/0477a01e-0cc0a2cc-984ab59dd0761b42"}, {"timestamp": "2025-08-29T14:07:34.392Z", "date_only": false, "value": "2025-08-29T14:07:34.392990Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/e3ff8696-592c-4423-9a57-2cb2716b141e", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ee0636c3-040f-4511-8384-49cc96614ce2", "url": "https://vulnerability.circl.lu/bundle/e3ff8696-592c-4423-9a57-2cb2716b141e"}, {"timestamp": "2025-08-29T17:27:13Z", "date_only": false, "value": "2025-08-29T17:27:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/3cba1d61c2336cd96b3fc8eeb1ae8f56", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1b9c11ef-bdf5-477c-ba78-019860964cab", "url": "https://gist.github.com/Darkcrai86/3cba1d61c2336cd96b3fc8eeb1ae8f56"}, {"timestamp": "2025-08-31T03:13:00Z", "date_only": false, "value": "2025-08-31T03:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5bbc27d3-eb84-4857-9aa0-314673759297"}, {"timestamp": "2025-09-01T00:00:00Z", "date_only": false, "value": "2025-09-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bad783dd-b987-45d8-a514-c15b70e389a2"}, {"timestamp": "2025-09-01T03:42:37Z", "date_only": false, "value": "2025-09-01T03:42:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3057b723-5fae-476d-b162-b0a1a9a63ac2", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9beb0c9d-cb78-4e96-95a2-a6dbf96b4b5c"}, {"timestamp": "2025-09-02T00:00:00Z", "date_only": false, "value": "2025-09-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e3df93af-9d52-4b03-a5d9-d1e7e9ef18b4"}, {"timestamp": "2025-09-03T00:00:00Z", "date_only": false, "value": "2025-09-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d209791f-c908-4091-9e8c-d94030d1320a"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": false, "value": "2025-09-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f0eca69b-177b-488d-b2ba-416ed22b91c6"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "eb6e8df2-c5d1-40c6-aff2-36ae967f417d"}, {"timestamp": "2025-09-06T00:00:00Z", "date_only": false, "value": "2025-09-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f1965075-19e3-442b-9aa6-a36e0791329a"}, {"timestamp": "2025-09-07T00:00:00Z", "date_only": false, "value": "2025-09-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c95ba1e1-9d0f-4142-8642-c3bb387252de"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9308ab26-fca9-4a33-9ccf-16e57c4311ba"}, {"timestamp": "2025-09-09T00:00:00Z", "date_only": false, "value": "2025-09-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "107e7fbe-814c-4e75-b2c8-40683b9546d5"}, {"timestamp": "2025-09-10T00:00:00Z", "date_only": false, "value": "2025-09-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5b5a6e38-43da-4637-a3f1-ff90afffe887"}, {"timestamp": "2025-09-11T00:00:00Z", "date_only": false, "value": "2025-09-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c8147aa3-89f8-468f-a3ae-448bc32e49e4"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "39293aed-39e1-489e-99e5-a5f73671e53d"}, {"timestamp": "2025-09-12T00:16:19Z", "date_only": false, "value": "2025-09-12T00:16:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/94901317-a31d-44b5-a66c-8fe3dbace6b5", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "021af89e-283d-454d-8ae1-722bc242c85e"}, {"timestamp": "2025-09-12T15:42:01Z", "date_only": false, "value": "2025-09-12T15:42:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/codeby_sec/9384", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9555d9e4-e199-4e2a-b6fa-6b143e3718cc", "content": "\ud83c\udde8\ud83c\uddf3 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \n\n\ud83d\udc32 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Salt Typhon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b 600 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83c\udf0e \u0414\u0430\u043d\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0435\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430, \u0433\u043e\u0441\u0442\u0438\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83c\udfe2 \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 , \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u043b\u0430\u0441\u0442\u044f\u043c\u0438 13 \u0441\u0442\u0440\u0430\u043d, \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0440\u0435\u043c\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438: Sichuan Juxinhe Network Technology Co., Ltd., Beijing Huanyu Tianqiong Information Technology Co., Ltd. \u0438 Sichuan Zhixin Ruijie Network Technology Co., Ltd.\n\n\ud83d\udc69\u200d\ud83d\udcbb Salt Typhoon \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 Cisco ( CVE-2018-0171 , CVE-2023-20198 \u0438 CVE-2023-20273 ), Ivanti ( CVE-2023-46805 \u0438 CVE-2024-21887 ) \u0438 Palo Alto Networks ( CVE-2024-3400 ).", "url": "https://t.me/codeby_sec/9384"}, {"timestamp": "2025-09-13T00:00:00Z", "date_only": false, "value": "2025-09-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d4cd10dd-417d-4b81-9eec-508f042eaed2"}, {"timestamp": "2025-09-14T00:00:00Z", "date_only": false, "value": "2025-09-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b206cd2e-a665-4715-a873-64460d99dfa9"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fb5274b7-02d0-42fe-9ded-234ffff62365"}, {"timestamp": "2025-09-15T14:14:34.234Z", "date_only": false, "value": "2025-09-15T14:14:34.234883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hunterstrategy.bsky.social/post/3lyuyjq2j2t2h", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "781c0e78-418f-45a3-97bd-7ac076abf228", "url": "https://bsky.app/profile/hunterstrategy.bsky.social/post/3lyuyjq2j2t2h"}, {"timestamp": "2025-09-16T00:00:00Z", "date_only": false, "value": "2025-09-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fcb311ba-e27c-42d5-8a8f-ee93c02b98ef"}, {"timestamp": "2025-09-17T00:00:00Z", "date_only": false, "value": "2025-09-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a6f508f0-19cf-4c9d-9980-fbfc6867b1cb"}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c245467b-f44b-4610-8ef7-b030b2639a56"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b6c5e8ff-64c4-4486-b01e-d9061a3989ee"}, {"timestamp": "2025-09-20T00:00:00Z", "date_only": false, "value": "2025-09-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f1c6ce27-5adc-4425-b7e1-fe7b258a922b"}, {"timestamp": "2025-09-21T00:00:00Z", "date_only": false, "value": "2025-09-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1ab7db07-e6a1-4977-8772-dee305183e4f"}, {"timestamp": "2025-09-22T00:00:00Z", "date_only": false, "value": "2025-09-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1519e2f4-7ec9-4845-9b37-a0c282447a58"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f7982914-91b9-4fcd-8d52-14eb33bea67d"}, {"timestamp": "2025-09-25T00:00:00Z", "date_only": false, "value": "2025-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "65990be6-1ecb-46a0-9e98-275f5412e26b"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9617a716-cedf-43a4-a80c-b0b24edaf036"}, {"timestamp": "2025-09-27T00:00:00Z", "date_only": false, "value": "2025-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "47e075ec-8009-4be5-b5a8-cb895b040cc5"}, {"timestamp": "2025-09-28T00:00:00Z", "date_only": false, "value": "2025-09-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2203eb3a-9ec8-4428-a38b-6009c7297e6b"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a0dae932-277b-4d3d-9c9d-9336283a09ab"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "025c4471-6159-46e0-a9a9-3a80cd5b3d3a"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "36993bd0-1a8b-4c08-b7a5-0787814273e7"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "df920aca-42b3-4083-9e7c-0b6f38628190"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1c8db4f0-08a9-404c-94a7-d15978f91c39"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5d8dfddb-35d9-49e3-a984-08342aed3783"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d78d2b22-b3b8-4058-b22b-4729df4d02ae"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e09360bc-eb21-4143-b51e-c22a3e762125"}, {"timestamp": "2025-10-08T00:00:00Z", "date_only": false, "value": "2025-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "68a0a255-fbdf-420b-bfa2-3a8f53170514"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ab9781d1-1caf-463c-af33-9a631011504d"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b71a5f8b-5f2c-433e-a47a-bbc673f90022"}, {"timestamp": "2025-10-11T00:00:00Z", "date_only": false, "value": "2025-10-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bf0b00ef-2a22-4ae1-a1dc-4b1f17947d6b"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6861b35a-b054-480d-9347-b5d07350ae1c"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "07b40a7d-6065-4d15-8923-3e17cef0306a"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6a16d8e5-0b2e-4068-953a-76ea7af93022"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2c6abf19-a741-4b7d-a4a0-d7c42f66d801"}, {"timestamp": "2025-10-16T00:00:00Z", "date_only": false, "value": "2025-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c493b5d3-2c38-4367-a6f7-1b500c80d8d2"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": false, "value": "2025-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9f54861a-88e3-440d-9c22-8e51388f864f"}, {"timestamp": "2025-10-18T00:00:00Z", "date_only": false, "value": "2025-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "32441304-5e45-4e72-8378-6693586682c0"}, {"timestamp": "2025-10-19T00:00:00Z", "date_only": false, "value": "2025-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "99fcb1a9-05a4-40c1-ada4-3df564c54960"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c9380217-e57f-4eac-aac8-6429621d1b3f"}, {"timestamp": "2025-10-21T00:00:00Z", "date_only": false, "value": "2025-10-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "36cdac4f-6f21-4a7e-9ea4-34c9882d5315"}, {"timestamp": "2025-10-21T23:05:34.401Z", "date_only": false, "value": "2025-10-21T23:05:34.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-20198", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:34.401Z", "date_only": false, "value": "2025-10-21T23:05:34.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20198", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "87ae1760-339c-442f-bc7d-2a00a3c4e84f"}, {"timestamp": "2025-10-22T00:32:51Z", "date_only": false, "value": "2025-10-22T00:32:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4XRF-PCXR-RF3C", "record": "GHSA-4XRF-PCXR-RF3C", "field": "modified"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": false, "value": "2025-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "04c62e97-e28b-4633-82a4-a7ba2dfa4ca8"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2483fe95-65a3-4b3b-91e7-e0fb64ca51ba"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a5c2bedf-5393-43ff-8419-d5a14b15c614"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "19a58c06-a924-46c8-8476-2a1f14bba593"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "86c597dc-d7a2-4a73-a787-fd1ac1593a88"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8684c6b6-f5a8-4e1b-ae03-07b6fe92d6c0"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f9b36aed-289c-46d4-884e-c2390e6f29b5"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b58bb3fc-f0aa-43ce-92d9-1a40f9a1dd3c"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "13b81b3a-5ceb-4ff2-91ba-dea974badb6a"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b92fdc55-d217-45be-9cad-a8447303b0b9"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "665cdca7-af04-44e8-9cef-9ee70e5b718c"}, {"timestamp": "2025-11-01T12:43:00Z", "date_only": false, "value": "2025-11-01T12:43:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/11/asd-warns-of-ongoing-badcandy-attacks.html", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c917d0b5-379e-46cc-b0a7-1643029b998a", "url": "https://thehackernews.com/2025/11/asd-warns-of-ongoing-badcandy-attacks.html"}, {"timestamp": "2025-11-01T13:47:46Z", "date_only": false, "value": "2025-11-01T13:47:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7827", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d1d0e111-4cd9-41f4-ace3-a4b01bd21a9f", "content": "\ud83d\udea8 400+ Cisco routers hacked across Australia!\n\nA new implant called BADCANDY is exploiting CVE-2023-20198 \u2014 even after patches.\n\nRebooting won\u2019t help. Hackers just come back.\n\nWatch for fake cisco_sys_manager accounts \u2193 https://thehackernews.com/2025/11/asd-warns-of-ongoing-badcandy-attacks.html", "url": "https://t.me/thehackernews/7827"}, {"timestamp": "2025-11-01T16:49:29.141Z", "date_only": false, "value": "2025-11-01T16:49:29.141036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3m4lh3um2oc2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1fbc0aae-f6ab-4814-b7d2-6196a9f72a9d", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3m4lh3um2oc2u"}, {"timestamp": "2025-11-01T18:01:38.159Z", "date_only": false, "value": "2025-11-01T18:01:38.159233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m4ll4za5hi2y", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1f46bfda-8a90-4188-a660-2c59a77f14be", "url": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m4ll4za5hi2y"}, {"timestamp": "2025-11-01T21:04:16.091Z", "date_only": false, "value": "2025-11-01T21:04:16.091803Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115476467251480767", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c846cfde-7313-41b4-94b6-02afbfb69cee", "url": "https://infosec.exchange/users/edwardk/statuses/115476467251480767"}, {"timestamp": "2025-11-01T22:19:00Z", "date_only": false, "value": "2025-11-01T22:19:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/DOHhY8oGnQ3-QsG7MsUSJuqZP1H_33mg2Y4a6TPHfbIcuw", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5f09b74e-00db-48c1-92b4-5e20e76a0fbe"}, {"timestamp": "2025-11-02T00:00:00Z", "date_only": false, "value": "2025-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d6df8d8a-345a-4d79-9cc1-083973ba3c17"}, {"timestamp": "2025-11-02T02:08:13.054Z", "date_only": false, "value": "2025-11-02T02:08:13.054945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/coldblacksun.bsky.social/post/3m4mgd2dagc2l", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8529bebd-177f-4fed-8e43-c2015fcc4e75", "url": "https://bsky.app/profile/coldblacksun.bsky.social/post/3m4mgd2dagc2l"}, {"timestamp": "2025-11-02T03:17:14.637Z", "date_only": false, "value": "2025-11-02T03:17:14.637561Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/maochan928.bsky.social/post/3m4mk6gencc23", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bd9bb215-6a87-478b-b75e-88e1398cbdc8", "url": "https://bsky.app/profile/maochan928.bsky.social/post/3m4mk6gencc23"}, {"timestamp": "2025-11-02T11:03:44.068Z", "date_only": false, "value": "2025-11-02T11:03:44.068170Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115479768081251864", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "efd77e89-2404-487c-b68d-e040fb830663", "url": "https://infosec.exchange/users/dragonjar/statuses/115479768081251864"}, {"timestamp": "2025-11-02T11:26:52.676Z", "date_only": false, "value": "2025-11-02T11:26:52.676514Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/115479859185283446", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bc1ccf1e-1c96-46e2-827f-7e5acd1f368f", "url": "https://infosec.exchange/users/tomcat/statuses/115479859185283446"}, {"timestamp": "2025-11-02T12:07:24Z", "date_only": false, "value": "2025-11-02T12:07:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/11/02/badcandy-webshell-threatens-unpatched-cisco.html", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "24297f4b-44ea-41a3-a078-ad6b994200b5", "url": "https://threatintel.cc/2025/11/02/badcandy-webshell-threatens-unpatched-cisco.html"}, {"timestamp": "2025-11-02T13:07:18.173Z", "date_only": false, "value": "2025-11-02T13:07:18.173233Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115480254078390091", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "577ae337-30ca-4ceb-99c6-68d3db3cf3a8", "url": "https://infosec.exchange/users/edwardk/statuses/115480254078390091"}, {"timestamp": "2025-11-02T17:00:31.518Z", "date_only": false, "value": "2025-11-02T17:00:31.518079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3m4ny6nxsdg2d", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "72a41baf-aff4-4734-9022-5e732a0ec9a0", "url": "https://bsky.app/profile/calimegai.bsky.social/post/3m4ny6nxsdg2d"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bf184407-9ff4-4345-94d9-b7b706e88d40"}, {"timestamp": "2025-11-03T07:06:37.235Z", "date_only": false, "value": "2025-11-03T07:06:37.235129Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4phhll2xk25", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5e79f825-261c-4707-9427-fadab4f6e5a7", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4phhll2xk25"}, {"timestamp": "2025-11-03T18:47:04.576Z", "date_only": false, "value": "2025-11-03T18:47:04.576677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4qom3eqlw2g", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7574a4a3-caf9-4eae-808b-9ec96cc9b0a5", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4qom3eqlw2g"}, {"timestamp": "2025-11-03T20:30:56.119Z", "date_only": false, "value": "2025-11-03T20:30:56.119577Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m4quez3qus2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4c2e4334-31da-49d9-819b-9dcaa5eb2c72", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m4quez3qus2u"}, {"timestamp": "2025-11-03T20:30:56.711Z", "date_only": false, "value": "2025-11-03T20:30:56.711892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m4quf4t3ac2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e0bd9dcc-6a32-455b-8cbf-be05ae696375", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m4quf4t3ac2u"}, {"timestamp": "2025-11-03T20:30:57.307Z", "date_only": false, "value": "2025-11-03T20:30:57.307686Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m4quf4t47k2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "33b1909b-b546-4d5f-84ef-e679388fd5e3", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m4quf4t47k2u"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": false, "value": "2025-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4ad4f457-72f0-4b78-8ec3-65178a1dc736"}, {"timestamp": "2025-11-04T02:16:16.445Z", "date_only": false, "value": "2025-11-04T02:16:16.445984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4rhpdyiej2h", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "69747ca8-ade4-460d-81fa-8b0e1cc007f8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4rhpdyiej2h"}, {"timestamp": "2025-11-04T08:00:25.900Z", "date_only": false, "value": "2025-11-04T08:00:25.900983Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4s2wqrtoc27", "record": "cve-2023-20198", "field": "creation_timestamp", "uuid": "351b0927-8848-4cb9-9d3f-729ecb6372e2", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4s2wqrtoc27"}, {"timestamp": "2025-11-04T11:31:55Z", "date_only": false, "value": "2025-11-04T11:31:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/11/04/badcandy-implant-hits-cisco-devices.html", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5f22031b-e719-4174-bb37-26fd56cdab2e", "url": "https://threatintel.cc/2025/11/04/badcandy-implant-hits-cisco-devices.html"}, {"timestamp": "2025-11-04T12:31:43.257Z", "date_only": false, "value": "2025-11-04T12:31:43.257270Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115491438782198273", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a0457eac-253a-4bb8-ae55-5f4519e9b4ad", "url": "https://infosec.exchange/users/edwardk/statuses/115491438782198273"}, {"timestamp": "2025-11-04T16:47:16.803Z", "date_only": false, "value": "2025-11-04T16:47:16.803460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m4syetgh452i", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "14571d3a-b76d-4cdf-83d2-21ac90db6548", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3m4syetgh452i"}, {"timestamp": "2025-11-04T17:49:15.252Z", "date_only": false, "value": "2025-11-04T17:49:15.252993Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115492687347688766", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "392a1bf6-5f3c-43c8-b745-411e0028aac5", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/115492687347688766"}, {"timestamp": "2025-11-04T17:50:54.860Z", "date_only": false, "value": "2025-11-04T17:50:54.860754Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m4t3wmmjff2a", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0b64596c-c52f-43c5-af4b-849dbeeeb264", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3m4t3wmmjff2a"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "26635d38-f689-4737-b762-e46a7744de6d"}, {"timestamp": "2025-11-05T05:25:55.167Z", "date_only": false, "value": "2025-11-05T05:25:55.167080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmork24", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "eb2aa5bd-1745-41ad-837f-5588ff9f5e2e", "url": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmork24"}, {"timestamp": "2025-11-05T05:25:55.683Z", "date_only": false, "value": "2025-11-05T05:25:55.683502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmsok24", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5060a9bd-fbbb-4167-b797-db1e05e39aaa", "url": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmsok24"}, {"timestamp": "2025-11-05T05:25:56.198Z", "date_only": false, "value": "2025-11-05T05:25:56.198772Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmtns24", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f0d7d8dd-a74c-4d0d-bd19-3f6ae8ff39e2", "url": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmtns24"}, {"timestamp": "2025-11-05T05:25:56.669Z", "date_only": false, "value": "2025-11-05T05:25:56.669829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmun224", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ab12ce3b-47d1-4141-9054-929cdf5fb8fb", "url": "https://bsky.app/profile/ravirockks.bsky.social/post/3m4ucqwmun224"}, {"timestamp": "2025-11-05T11:14:06.664Z", "date_only": false, "value": "2025-11-05T11:14:06.664650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/heisec.bsky.social/post/3m4uw7wedov2w", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4e3a94a3-4311-46d1-a0b6-239152907c8d", "url": "https://bsky.app/profile/heisec.bsky.social/post/3m4uw7wedov2w"}, {"timestamp": "2025-11-05T15:07:11Z", "date_only": false, "value": "2025-11-05T15:07:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/badcandy-rilevato-sfruttamento-in-rete-della-cve-2023-20198-relativa-a-cisco-ios-xe", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fcb01921-ff9c-41a2-8721-83009a899f54", "url": "https://www.acn.gov.it/portale/w/badcandy-rilevato-sfruttamento-in-rete-della-cve-2023-20198-relativa-a-cisco-ios-xe"}, {"timestamp": "2025-11-05T17:14:47.700Z", "date_only": false, "value": "2025-11-05T17:14:47.700299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m4vkepyoss2k", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "36e0c293-eead-4665-826c-de3bbd396774", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3m4vkepyoss2k"}, {"timestamp": "2025-11-05T17:14:48.797Z", "date_only": false, "value": "2025-11-05T17:14:48.797603Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m4vkeuir622k", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c8d44450-7d50-47e4-9747-fde02f3917d9", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3m4vkeuir622k"}, {"timestamp": "2025-11-05T17:14:49.830Z", "date_only": false, "value": "2025-11-05T17:14:49.830552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m4vkeuis5c2k", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "06a60360-8598-4da1-8ed8-70cfa7121243", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3m4vkeuis5c2k"}, {"timestamp": "2025-11-05T20:56:07.545Z", "date_only": false, "value": "2025-11-05T20:56:07.545668Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4vwqm5vzs2e", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "abf23652-ba0c-46a8-a03b-e47d2a9f44f1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4vwqm5vzs2e"}, {"timestamp": "2025-11-05T21:03:31.459Z", "date_only": false, "value": "2025-11-05T21:03:31.459291Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4vx5thh2s2e", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6efa9b77-747e-4722-9940-202928b2597e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4vx5thh2s2e"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e3213f3f-1efa-4043-a8f2-c3ac10297843"}, {"timestamp": "2025-11-06T02:17:55.046Z", "date_only": false, "value": "2025-11-06T02:17:55.046691Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4wiq4xazw2o", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "532bbfb0-8d58-412d-89cf-74e9a5b4ac2a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4wiq4xazw2o"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "92278ad2-adcb-426a-a029-d251b0722f40"}, {"timestamp": "2025-11-07T02:16:25.371Z", "date_only": false, "value": "2025-11-07T02:16:25.371002Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4yz4eudqb2g", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f316828c-9a1a-48e4-9df5-1187d19b2f78", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4yz4eudqb2g"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "de05fe5f-95a0-4b24-a4d1-16ef230d1b51"}, {"timestamp": "2025-11-08T02:12:32.801Z", "date_only": false, "value": "2025-11-08T02:12:32.801699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m53jee6jro2m", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "940e6b6a-ec12-41e7-be6f-e5d3cff99dd1", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m53jee6jro2m"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "be8f2843-7c29-413c-a764-6d7cc51d16b5"}, {"timestamp": "2025-11-09T02:19:33.557Z", "date_only": false, "value": "2025-11-09T02:19:33.557044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m5627ti7q62s", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9818cfb8-c9d5-4f51-877d-6433a5601543", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m5627ti7q62s"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "70ea0118-f528-4d88-a13e-14038e72626c"}, {"timestamp": "2025-11-10T02:20:45.461Z", "date_only": false, "value": "2025-11-10T02:20:45.461468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m5akqvnh3k2o", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "245c214b-30b5-4659-9dc4-2bedaf35ea27", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m5akqvnh3k2o"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ff5d6702-7b0a-4bd6-bd95-2462336c878e"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "808e11ef-797e-4933-a6b1-b0a335ebbbbb"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": false, "value": "2025-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "72c24c07-0f59-4b24-8233-c248b5d6336f"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3516a50e-ca8b-4a14-b7e6-a32c65cbbaa0"}, {"timestamp": "2025-11-15T00:00:00Z", "date_only": false, "value": "2025-11-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "83051f65-fac9-4b92-9005-525488009560"}, {"timestamp": "2025-11-16T00:00:00Z", "date_only": false, "value": "2025-11-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8f2ae3d5-8fec-4ed5-86d0-827435f15729"}, {"timestamp": "2025-11-17T00:00:00Z", "date_only": false, "value": "2025-11-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f07fd774-a6ea-4fb0-8592-3f990271cc01"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6ae8f1ce-c454-4bc0-8593-0e82afb3eb3d"}, {"timestamp": "2025-11-19T00:00:00Z", "date_only": false, "value": "2025-11-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8948adce-6fa9-45b2-a96a-c30fb9fa61e0"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "17e630a3-f077-4500-b12c-0541cf2cfa93"}, {"timestamp": "2025-11-21T00:00:00Z", "date_only": false, "value": "2025-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ead6b6b8-1670-4b5a-b3c8-b8dedb1d3376"}, {"timestamp": "2025-11-22T00:00:00Z", "date_only": false, "value": "2025-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b91a9049-7291-45a3-80bb-7893f943ff74"}, {"timestamp": "2025-11-23T00:00:00Z", "date_only": false, "value": "2025-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "025c4557-7199-466e-a5de-fe2d22bd6c87"}, {"timestamp": "2025-11-23T00:00:00Z", "date_only": false, "value": "2025-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "db4d4bef-9855-4025-9194-690948bdd579"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "154afc36-bd20-4b44-bccf-5fec9b72f019"}, {"timestamp": "2025-11-25T00:00:00Z", "date_only": false, "value": "2025-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bd74e4b0-e546-4510-8737-8425924f721b"}, {"timestamp": "2025-11-26T00:00:00Z", "date_only": false, "value": "2025-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1220a54e-4508-4d32-8491-b70b5cf7423b"}, {"timestamp": "2025-11-27T00:00:00Z", "date_only": false, "value": "2025-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "426b58fc-e094-4a77-b0ac-2f1b7cf30783"}, {"timestamp": "2025-11-27T13:03:49.931Z", "date_only": false, "value": "2025-11-27T13:03:49.931413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6mgme6a322z", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1302a2d2-5867-4c48-9d0c-30d34fa97f4e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6mgme6a322z"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "73e26b0e-e89a-40ae-a876-04ab967aa49d"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "93c127a8-03ed-4903-9cbc-dce629014034"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0c28e80a-a62e-459b-83bf-1bd74a7a074f"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bcbdb2a9-ea6c-4703-8bce-40e75e0704e0"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b06104ff-b79a-402f-90d7-e72a7716aa2a"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "20476926-9161-497f-b2e4-65d005d4e2ad"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d063ea30-e679-4d1b-9328-0a381da12c82"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "775b707d-6822-4c7a-aece-e1b02d95cf1f"}, {"timestamp": "2025-12-06T00:00:00Z", "date_only": false, "value": "2025-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a5ff6096-e20c-4807-a95a-ae5c8b013c81"}, {"timestamp": "2025-12-07T00:00:00Z", "date_only": false, "value": "2025-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1e89fb38-ce12-4542-bc97-4eccad2dea49"}, {"timestamp": "2025-12-08T00:00:00Z", "date_only": false, "value": "2025-12-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3135a740-2f7b-4bc2-8e4d-063448f17d73"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2711d307-0647-4a6d-868a-6b516e9149f3"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "aec8a808-a493-4d12-9ad5-035198f29d7d"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3182738d-b404-443a-9e71-48e8833ebdf1"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7725a2e1-8ef1-443c-8079-63ead86cb3ed"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "52b4dbb1-a116-42e7-bbcb-3531e0106a2c"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9e479b77-4bcc-43f2-b89b-c937371b380f"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "46fb16f5-3752-4784-9ba1-c1b59f11067f"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": false, "value": "2025-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "929625e2-777b-405d-97cb-f29535b253d7"}, {"timestamp": "2025-12-15T15:00:08Z", "date_only": false, "value": "2025-12-15T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QO1KmRgDX0Cd0TYulR6Zn7vHW4rG9Owp6vDA2JbGSI7kC3s", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "41098122-33da-4442-81db-5cfc8e543627"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5bf9486c-33f8-4d19-bfe2-ec3b7744746d"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a93ff870-dae3-4103-8fa7-01e5f87221b0"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d9f8e47a-53f4-4765-8128-696fd12cf756"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "819de538-612e-4147-bdd8-a3defe616a3e"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0abfceba-e976-4925-8fb1-1aa92df29ee6"}, {"timestamp": "2025-12-21T00:00:00Z", "date_only": false, "value": "2025-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "aa303955-46b2-4b04-88a5-192cabeec34b"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e1243c21-25b3-445f-ab03-02741b13e5b3"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "73186658-399d-4f51-bc2c-f08c98fa477f"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "55e1a733-ab97-44db-b0b7-a7efa854368e"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "217e74cf-1510-46f1-a434-52d9132c35b9"}, {"timestamp": "2025-12-26T00:00:00Z", "date_only": false, "value": "2025-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1ec8ca75-f94e-4818-8897-fe0443933582"}, {"timestamp": "2025-12-27T00:00:00Z", "date_only": false, "value": "2025-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "50f9e272-140d-4cbc-8503-c1161db2723e"}, {"timestamp": "2025-12-28T00:00:00Z", "date_only": false, "value": "2025-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "79026066-9219-4d69-9455-1d10fa77fb82"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f99411cc-4995-4b48-8579-077a72e6269b"}, {"timestamp": "2025-12-29T16:00:57Z", "date_only": false, "value": "2025-12-29T16:00:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ics_cert/1379", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a93905aa-4d36-4d89-83f8-f6ce8d884c68", "content": "\u0645\u0642\u0627\u0645\u0627\u062a \u0627\u0633\u062a\u0631\u0627\u0644\u06cc\u0627\u06cc\u06cc \u0646\u0633\u0628\u062a \u0628\u0647 \u06cc\u06a9 \u06a9\u0645\u067e\u06cc\u0646 APT \u0641\u0639\u0627\u0644 \u06a9\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc Cisco IOS XE \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0647\u0634\u062f\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0648 \u0647\u062f\u0641 \u0622\u0646 \u0622\u0644\u0648\u062f\u0647 \u06a9\u0631\u062f\u0646 \u0631\u0648\u062a\u0631\u0647\u0627 \u0628\u0627 \u067e\u0648\u0633\u062a\u0647 \u0648\u0628 BadCandy \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Lua \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u060c CVE-2023-20198\u060c \u0627\u0632 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0634\u062f\u062a \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u0645\u062f\u06cc\u0631 \u0645\u062d\u0644\u06cc \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\u0633\u06cc\u0633\u06a9\u0648 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0627\u06a9\u062a\u0628\u0631 2023 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f \u0648 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0639\u0644\u0627\u0645\u062a\u200c\u06af\u0630\u0627\u0631\u06cc \u0634\u062f.\n\n\u062f\u0648 \u0647\u0641\u062a\u0647 \u0628\u0639\u062f\u060c \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0639\u0645\u0648\u0645\u06cc \u0638\u0627\u0647\u0631 \u0634\u062f \u06a9\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0633\u062a\u0631\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u062f\u0631\u0647\u0627\u06cc \u067e\u0634\u062a\u06cc \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u062a\u0635\u0644 \u0628\u0647 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062a\u0633\u0647\u06cc\u0644 \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\n\u067e\u0633 \u0627\u0632 \u0646\u0635\u0628\u060c BadCandy \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0631\u06cc\u0634\u0647 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f\u060c \u0627\u0632 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u062d\u0630\u0641 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0648\u0635\u0644\u0647 \u062f\u0631 \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0648 \u0628\u0627 \u0641\u0631\u0636 \u0627\u06cc\u0646\u06a9\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628 \u0647\u0645\u0686\u0646\u0627\u0646 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u0622\u0646 \u0631\u0627 \u062f\u0648\u0628\u0627\u0631\u0647 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n\u0627\u062f\u0627\u0631\u0647 \u0633\u06cc\u06af\u0646\u0627\u0644\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0631\u0627\u0644\u06cc\u0627 \u062a\u062e\u0645\u06cc\u0646 \u0645\u06cc\u200c\u0632\u0646\u062f \u06a9\u0647 \u062a\u0627 \u0698\u0648\u0626\u06cc\u0647 \u06f2\u06f0\u06f2\u06f5\u060c \u0628\u06cc\u0634 \u0627\u0632 \u06f4\u06f0\u06f0 \u062f\u0633\u062a\u06af\u0627\u0647 \u062f\u0631 \u0627\u0633\u062a\u0631\u0627\u0644\u06cc\u0627 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0647 BadCandy \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0648\u062f\u0647\u200c\u0627\u0646\u062f \u0648 \u0628\u06cc\u0634 \u0627\u0632 \u06f1\u06f5\u06f0 \u062f\u0633\u062a\u06af\u0627\u0647 \u0628\u0627\u0642\u06cc \u0645\u0627\u0646\u062f\u0647 \u0627\u0633\u062a.\n\n\u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062a\u0639\u062f\u0627\u062f \u0622\u0644\u0648\u062f\u06af\u06cc\u200c\u0647\u0627 \u0628\u0647 \u0637\u0648\u0631 \u067e\u06cc\u0648\u0633\u062a\u0647 \u062f\u0631 \u062d\u0627\u0644 \u06a9\u0627\u0647\u0634 \u0628\u0648\u062f\u0647 \u0627\u0633\u062a\u060c ASD \u0646\u0634\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u062c\u062f\u062f \u0627\u0632 \u0647\u0645\u0627\u0646 \u0646\u0642\u0627\u0637 \u067e\u0627\u06cc\u0627\u0646\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u062d\u062a\u06cc \u0628\u0627 \u0648\u062c\u0648\u062f \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0647 \u0639\u0627\u0645\u0644\u0627\u0646 \u0645\u0633\u0626\u0648\u0644 \u0627\u06cc\u0646 \u0646\u0642\u0636 \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f.\n\n\u0628\u0647 \u06af\u0641\u062a\u0647 \u0627\u06cc\u0646 \u0622\u0698\u0627\u0646\u0633\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0633\u0631\u0639\u062a \u062d\u0630\u0641 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 BadCandy \u0631\u0627 \u0631\u062f\u06cc\u0627\u0628\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0647\u0645\u0627\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0645\u062c\u062f\u062f \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f.\n\n\u0628\u0647 \u06af\u0641\u062a\u0647 ASD\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0628\u0644\u0627\u064b \u062a\u0648\u0633\u0637 \u0639\u0627\u0645\u0644\u0627\u0646 APT\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 Salt Typhoon \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u0639\u062a\u0642\u0627\u062f \u0628\u0631 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u0633\u0626\u0648\u0644 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0639\u0644\u06cc\u0647 \u0627\u0631\u0627\u0626\u0647 \u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0628\u0632\u0631\u06af \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062f\u0631 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0648 \u06a9\u0627\u0646\u0627\u062f\u0627 \u0627\u0633\u062a.\n\n\u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u062a\u0647\u062f\u06cc\u062f \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0641\u0627\u0642\u062f \u06cc\u06a9 \u0646\u0633\u0628\u062a\u200c\u062f\u0647\u06cc \u0648\u0627\u0636\u062d \u0627\u0633\u062a\u060c ASD \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u062e\u06cc\u0631 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0645\u062c\u0631\u0645\u0627\u0646 \u0633\u0627\u06cc\u0628\u0631\u06cc \u062a\u062d\u062a \u062d\u0645\u0627\u06cc\u062a \u062f\u0648\u0644\u062a \u0646\u0633\u0628\u062a \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc Cisco IOS XE \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u062c\u0647\u0627\u0646 \u0628\u0627\u06cc\u062f \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631\u0627\u062a \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0641\u0631\u0648\u0634\u0646\u062f\u0647 \u06a9\u0647 \u062f\u0631 \u0645\u0634\u0627\u0648\u0631\u0647 \u0645\u0631\u0628\u0648\u0637\u0647 \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u0645\u0642\u0627\u0648\u0645\u200c\u0633\u0627\u0632\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 IOS XE \u0631\u0627 \u062f\u0646\u0628\u0627\u0644 \u06a9\u0646\u0646\u062f.\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec \u0628\u067e\u06cc\u0648\u0646\u062f\u06cc\u062f:\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t", "url": "https://t.me/ics_cert/1379"}, {"timestamp": "2025-12-30T00:00:00Z", "date_only": false, "value": "2025-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e8cb7cc2-42d6-463c-9e7c-4e68ba6d8604"}, {"timestamp": "2025-12-31T00:00:00Z", "date_only": false, "value": "2025-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "90b212ca-b1ae-469c-98e0-e6cac3da039c"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8ff78377-9fee-49a9-8607-35a70c964884"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c9413dfb-7aa7-4f7b-93da-476abf0e33dd"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "94f46461-e390-4fd2-ac04-02016ff5ca38"}, {"timestamp": "2026-01-03T00:00:00Z", "date_only": false, "value": "2026-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2cf3a993-9a54-45e5-89ca-b79d6c509a3f"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6559b7a1-a0f2-4868-8965-a10112d830a0"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "75822f3e-3dff-4df6-9ce9-8cfa3fedc767"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dd4c6eb7-dc1f-4fea-b8ed-326cfba3b1b8"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "15a272c1-1a9f-47ff-ba4e-b2f179d14b66"}, {"timestamp": "2026-01-08T00:00:00Z", "date_only": false, "value": "2026-01-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "efe7a5c5-22fa-450b-9fb5-2773fcd91de2"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a73ff26a-79a5-4376-9c7e-8e6f15fc24bb"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "72abf4d1-cba0-4029-9e00-7e111153c316"}, {"timestamp": "2026-01-10T00:00:00Z", "date_only": false, "value": "2026-01-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6328fd9b-c921-46f4-8228-46c74c7bb41e"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "56a9b905-ca7d-48f9-9110-61e1d0e5717b"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8d3a1787-e860-4406-84ec-4cdd778a7617"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c5bb1fb7-02e0-4d81-99b5-005ab47a2f6c"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "14e99153-0ae0-4a73-8f2a-fa20da42294b"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cb66a41e-3afa-4e82-a1bf-33ed0304e5b5"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8507c51e-93a9-48b1-83dc-036df0197ced"}, {"timestamp": "2026-01-17T00:00:00Z", "date_only": false, "value": "2026-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "059bf5f3-9682-4c2b-89b6-e5eade932db5"}, {"timestamp": "2026-01-18T00:00:00Z", "date_only": false, "value": "2026-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3cd02e7b-a786-411a-880c-252a2bac23f6"}, {"timestamp": "2026-01-19T00:00:00Z", "date_only": false, "value": "2026-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cf3deafd-2b8e-4da8-a296-022c069fd9fb"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": false, "value": "2026-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "282093c4-0626-4bef-bf79-b1be2856a761"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7117cb5a-a0c3-4a32-96a4-b30ed0b2ad92"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "79efbb64-0503-4f60-8a6a-fecd58b7bad8"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "35edd2ed-83e0-4211-93d7-201308873913"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d7f91a0b-6087-44aa-89c1-e7ffde53167a"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bb6dc615-7adf-4790-b911-29765cc6b3d9"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "586905b5-972f-4965-8c85-e22cb06fa121"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b4f83512-0223-4193-b0e2-79868b0f9f51"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "658ef10f-de5e-49db-b83f-781dda19881b"}, {"timestamp": "2026-01-29T00:00:00Z", "date_only": false, "value": "2026-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "778a3e45-1137-44d6-a59d-40d32b82983c"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "98f5bcfe-3b1a-4d7c-bde1-5fe8b6fe51df"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bc9df5a4-536d-44e6-a862-16aa45470ece"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0a14e60f-43a0-4d51-8e95-0578579fb2d3"}, {"timestamp": "2026-02-02T00:00:00Z", "date_only": false, "value": "2026-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "373683f2-5dc8-4526-8c94-403161060054"}, {"timestamp": "2026-02-02T12:26:48.324Z", "date_only": false, "value": "2026-02-02T12:26:48.324065Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2a36a238-3027-4949-ba46-84a2468a8683", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1479aa86-78bc-4e0d-a8e9-ce8157dd1d22", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2a36a238-3027-4949-ba46-84a2468a8683"}, {"timestamp": "2026-02-02T12:26:48.324Z", "date_only": false, "value": "2026-02-02T12:26:48.324065Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2a36a238-3027-4949-ba46-84a2468a8683", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cd361bd0-021e-4306-96c7-4e78b4bca9a9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2a36a238-3027-4949-ba46-84a2468a8683"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-20198", "field": "timestamps.recorded_at", "uuid": "e3f2e1f2-4e22-46b8-bdc7-2aad34b8b61f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "436255ad-8cda-41f3-8e48-90fee232b95b"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b403970e-c72a-4208-a881-a46e799bae94"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6a6d547c-b851-4971-b283-876d8bd7c357"}, {"timestamp": "2026-02-06T00:00:00Z", "date_only": false, "value": "2026-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e711642f-135b-4886-af7f-ed76506b3828"}, {"timestamp": "2026-02-07T00:00:00Z", "date_only": false, "value": "2026-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9f622b09-efe1-466d-8d47-3ae3a346c942"}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0a3abd1c-8fee-44c4-aebf-6fe7c552053a"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1de38575-467d-458c-9c47-ff2b7f623bf1"}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e5a6d19b-0c66-4511-883c-ea4f7de3f523"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a7a97f11-24cb-42d5-bc96-90d3f9494747"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "de6f08e3-6c48-4762-98ea-4a5041ec8158"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c881c57e-572b-42b0-835c-3cac8a94504d"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a6206c3d-7f6f-4dc1-a222-fea96a19b945"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b1846871-fdd1-4207-bf77-0569ae99c1bc"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8493950c-f42e-4e38-af86-b0a8d5a0b409"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8b5bb807-ce96-4062-a7b5-61e4127d389d"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2233ad63-d2ad-40ec-9360-81a1876fea84"}, {"timestamp": "2026-02-18T10:20:01.855Z", "date_only": false, "value": "2026-02-18T10:20:01.855622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mf4u5xoteg2u", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "16f19f03-0580-4d76-9e3a-654d568cef78", "url": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mf4u5xoteg2u"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f53c2b72-9437-4549-800f-ff0083b5851b"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a29d6291-dcdf-49fd-ac9e-0fd80d691c10"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1d5a0c0b-02bf-4765-bb33-58048a2208cd"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "010df65c-702f-48ea-8507-75d2c0019c1e"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2e927f46-0ad3-4637-af25-3f791a3c661e"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c5af2960-281a-407e-b9c0-449ef562334a"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3bf286b8-c90c-4663-b122-f23eaee69f71"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "91add6e8-dfc5-4931-bd83-f93f2a607e23"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b9813326-371e-40ba-bf33-2f81af65ca8b"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6cc43f66-8f5a-4fb9-8639-01914619f919"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "006a3c83-1e3d-4373-904f-6f73f1384448"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": false, "value": "2026-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c14d4b09-35ad-4698-a0d2-e4bb8bf2a523"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f6c870a1-d55f-4df0-aa0b-02458f15f197"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5c19627e-0eda-4eda-87d8-fabb79daef72"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7b7db0e3-39b3-4eb8-8953-e651cf8ea7fd"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c4118289-193d-4b5a-a4f4-429d5b64791c"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "58770598-d001-4856-af84-d8c3df2a354b"}, {"timestamp": "2026-03-08T00:00:00Z", "date_only": false, "value": "2026-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4be2f566-c21a-4602-b906-b8187c7a5543"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "88f9a191-52bd-45cf-ac5e-33aa94d8919d"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ac43b70a-577f-4482-ad86-49ea466a74be"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a0fc4ed2-5d4c-41c0-80e7-f229988b89db"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "af84ad5d-396c-4bf9-886c-5278dc17415b"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "be8007a3-625b-42c5-8508-356dc944fc3c"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8bb36ffb-6cf5-4982-bf2f-8620056c7f3b"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c5884af6-db6b-45db-920f-b01ec298877e"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8709465a-24aa-400f-a729-0b7887086cfe"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": false, "value": "2026-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e531b0e0-673b-4d71-a945-45a0753cb3b7"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": false, "value": "2026-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cbc903fe-4eaf-4f17-a5b1-30f16f335f7c"}, {"timestamp": "2026-03-19T00:00:00Z", "date_only": false, "value": "2026-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "953edf74-2be6-4b49-98bc-7b8c97ad7f9a"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e0969226-6ec4-46fa-9c11-9ae0a47af725"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "92131443-2123-4636-9981-9ce3dae56a78"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "934e6b60-97dd-41ba-b2da-1dfd50543562"}, {"timestamp": "2026-03-23T00:00:00Z", "date_only": false, "value": "2026-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5b92b23b-33ae-48f8-80bc-57aeacae6c38"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e8bbf058-f80a-4eea-9345-39e624767238"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "81d2c51a-7312-4699-994f-628eb3b85cc0"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "68dc4a45-e072-453b-8edd-95bc236b97b6"}, {"timestamp": "2026-03-26T21:52:56.077Z", "date_only": false, "value": "2026-03-26T21:52:56.077585Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/NNN.bettercities.top.ap.brid.gy/post/3mhylo3zajfc2", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d525aa74-8e85-44db-a523-7772c4ea86fd", "url": "https://bsky.app/profile/NNN.bettercities.top.ap.brid.gy/post/3mhylo3zajfc2"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f230f621-07a5-4f9d-8a84-788f69b95c66"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "313a2abf-716d-4363-8178-23e17db0e4c6"}, {"timestamp": "2026-03-30T00:00:00Z", "date_only": false, "value": "2026-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bfad2af8-902d-4624-9572-3872f668e84e"}, {"timestamp": "2026-03-31T00:00:00Z", "date_only": false, "value": "2026-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8a7a4925-c7ee-4dbc-abe0-2a5be710ed8b"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "801d8a93-6e45-43bf-9c63-7d8d64e5961c"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "08285162-fa59-4a3b-a3f8-0b98c43ae0d6"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "45ad8687-bc0a-4036-8b2b-9598ac5de927"}, {"timestamp": "2026-04-04T00:00:00Z", "date_only": false, "value": "2026-04-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c0548fef-a390-496d-be11-422893c68ef1"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cbfc80b6-d1b6-4575-b6c5-3db8cc1c3f43"}, {"timestamp": "2026-04-07T00:00:00Z", "date_only": false, "value": "2026-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b9d13a93-e5e3-4a89-89c5-6c8311719c96"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "54439d61-886f-452b-b8d4-dde45d3f8a15"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "af079e04-e90b-4183-b709-aedf4eabe8f8"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "97908a4c-9b97-415d-86b3-a959d4d2941b"}, {"timestamp": "2026-04-10T09:00:05Z", "date_only": false, "value": "2026-04-10T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NQOCep9JXuunt-IAyUJYpZHdpB1OmZjsgFCnwZQxWJWW2jY", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4f68c1ca-b2fe-4cf9-bd4b-f1a622b0eb54"}, {"timestamp": "2026-04-11T00:00:00Z", "date_only": false, "value": "2026-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "74cc9fb5-4b7d-4d01-acdf-51c49c545fd4"}, {"timestamp": "2026-04-12T00:00:00Z", "date_only": false, "value": "2026-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d4163022-1823-4f7b-9479-5aed96094833"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cc6f8a81-f003-44e5-b3f1-483f13de2ae4"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "13b2c70b-c60b-4bb3-9fab-520bba6a0565"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "19099ef0-2d78-4717-a420-31ba6693b0c9"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4ae9559f-c0a4-4509-94e7-89112c81cc75"}, {"timestamp": "2026-04-17T00:00:00Z", "date_only": false, "value": "2026-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8ea4f5be-5cee-4470-88db-118d67903675"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1dfe5b57-a418-45c0-829d-836a1c8a63a9"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "49f6cb90-e356-45b3-9311-c5d963ff6d6e"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d5d2fbb6-63c0-4eb3-90b2-608a36e4ad24"}, {"timestamp": "2026-04-20T15:00:07Z", "date_only": false, "value": "2026-04-20T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UHDH5Dy8dLbKDvrSUjbHqZq8jdYbFApOrWWgQ31t4VSl0Kk", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0607736d-07a1-43d7-b4c2-29ff5fefc7d0"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c20b9360-65d3-4e2a-9a3c-28abcd995614"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1fa904df-22de-4c6b-8a87-c0a814c2cf45"}, {"timestamp": "2026-04-22T12:37:07.153Z", "date_only": false, "value": "2026-04-22T12:37:07.153431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk3j742gxj23", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dd516c3c-83ee-4d3a-8b1c-2d84a13f257d", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk3j742gxj23"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5729d07f-e605-492d-9a05-c5db39e122ee"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5c508b98-cc35-4d91-8252-0da3dfb7e1da"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9fdd35b8-6d03-4406-bc32-aca3a8c6ff9d"}, {"timestamp": "2026-04-26T00:00:00Z", "date_only": false, "value": "2026-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "42ac14e3-8dd7-4bf6-bbb6-c0121659bacf"}, {"timestamp": "2026-04-27T00:00:00Z", "date_only": false, "value": "2026-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "98c9b3ce-32f7-43b4-82f1-b9278f8aa9b7"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e351aed9-e17e-4f50-a5db-388e9f585ec5"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e6eda8dd-97cc-415d-b83d-49c1a2142788"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9b8ef9ea-df26-41ec-9182-6cf1e94850dd"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ab7f8b12-f57d-43c9-b67a-58d48f511c33"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6a01345b-0e64-489a-ae70-3d411c372adf"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "82a47797-f124-4ea8-8f5a-2d175096b32c"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "34e19185-ced6-4580-a373-b82bdb7e462b"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2a18abf6-99ba-4454-9d7d-263c960503eb"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3446dca9-37c1-4010-a53b-71e289614240"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2954d03b-913e-4bf4-90da-b84d3b26e6ea"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1f814453-4427-45eb-86ac-defc5d6ac0db"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "acc98e0f-6c87-4969-95ec-469d3680d7f6"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "500d86ca-84b9-4b39-a73c-797eaa9e74e0"}, {"timestamp": "2026-05-10T00:00:00Z", "date_only": false, "value": "2026-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "97e49f56-3d7b-42fb-961b-bb53ee9403c1"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "17afb4be-a88e-4df5-b1af-39029a52356f"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "569288ff-ca6d-4b07-9b13-5d267c67b79f"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "76fa475f-4f08-4f10-acca-e07504a94da0"}, {"timestamp": "2026-05-16T00:00:00Z", "date_only": false, "value": "2026-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cc95ed38-15ab-4291-ab83-8c55f05ae5a4"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "26616d30-1c8a-4dc1-892a-6b7e86d6a357"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c73765df-29f3-4218-9812-fe645c360fa8"}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "99d49af2-b1cc-4ff6-86b9-9702573618e5"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a98bb489-d9bc-4a78-ad32-6f588e3f3289"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "24028f02-e2b6-43e2-ba80-9dffa120d866"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0db9e336-4ec0-4269-bcd3-252dffb7575d"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d4670611-a1b0-4cf3-b3ba-377c3a146a9c"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b760fefa-893b-4400-a5f9-8fb780e1a7b5"}, {"timestamp": "2026-05-23T00:00:00Z", "date_only": false, "value": "2026-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f9b090cc-79c0-4267-9e35-c3e6def4d062"}, {"timestamp": "2026-05-24T00:00:00Z", "date_only": false, "value": "2026-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "23f4f25b-9b60-4bf5-9a2c-de214a495a63"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e4f2e0f2-ee4b-4e13-ae18-4c696f16ef09"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3746bed4-8cf4-4512-b771-dd968e74acd0"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a8396fc3-a0c3-46e9-8a9d-9d1c6acbb74f"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7a5c5f4a-dd80-45e3-8961-76b808c5460a"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7bfccde0-904b-4523-8c6b-36ff04d3d013"}, {"timestamp": "2026-05-30T00:00:00Z", "date_only": false, "value": "2026-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "38003f4b-4eaa-420f-9b7d-46a88cf11c02"}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4a3a390c-873b-4835-9656-4817f22a1c90"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b4e4ceb6-78e7-443e-8a36-837da2e17440"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7a4c74a9-a2d7-4866-b691-4c9b34b98bc3"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0a338138-e429-439f-a9d0-f8494d820e51"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7df9859f-29cc-4ea6-82a3-1aac32cc7db4"}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": false, "value": "2026-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d3ece6c3-7ab4-4fc8-b313-73a68f60cb51"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cc617cd3-4d53-4854-9bbe-67c0bef20135"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4f18c33e-b14f-4307-98d0-3290c2ca83b4"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cc120cd6-6977-4fa6-ac6f-33c1dcd31cb6"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": false, "value": "2026-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "37765a82-fde0-4977-91e4-16c8c6c3b169"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0e904629-5418-47e0-8d3a-4f93d944040c"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "86c6c21b-609d-4fa5-b823-6bee053f1d33"}, {"timestamp": "2026-06-14T00:00:00Z", "date_only": false, "value": "2026-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9d92774f-d001-4804-adb3-cebc8b4e1672"}, {"timestamp": "2026-06-15T00:00:00Z", "date_only": false, "value": "2026-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3cc6e65c-c67e-44a9-9b14-16c618cd7c78"}, {"timestamp": "2026-06-16T00:00:00Z", "date_only": false, "value": "2026-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fd16a8ad-68be-40d7-bd7e-f0bd2df063d3"}, {"timestamp": "2026-06-17T00:00:00Z", "date_only": false, "value": "2026-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c31a71c1-80b5-4791-baa0-d0e9436d60e0"}, {"timestamp": "2026-06-17T05:29:47.117Z", "date_only": false, "value": "2026-06-17T05:29:47.117", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20198", "record": "FKIE_CVE-2023-20198", "field": "lastModified"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cb503de6-2add-461d-b3c0-81aadc2b5dcb"}, {"timestamp": "2026-06-19T00:00:00Z", "date_only": false, "value": "2026-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "65a7fa9c-7bbe-4800-992f-b463b4aee2f4"}, {"timestamp": "2026-06-19T12:46:47.071Z", "date_only": false, "value": "2026-06-19T12:46:47.071350Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c03145ab-5285-481b-a11c-1bd6fcd8661f", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "61c75b09-1308-43c5-b2f3-587419ead819", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c03145ab-5285-481b-a11c-1bd6fcd8661f"}, {"timestamp": "2026-06-20T00:00:00Z", "date_only": false, "value": "2026-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "24562d88-cd95-4cfb-82f0-a0cb021feb7b"}, {"timestamp": "2026-06-21T00:00:00Z", "date_only": false, "value": "2026-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7bb7a57e-47ff-4d38-b155-58e6c4990894"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4bc5c33f-e280-41bf-8a13-2212da283681"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-20198", "field": "timestamps.recorded_at", "uuid": "3108ec93-2edb-49a5-adf2-8e04b5a03cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:11.619Z", "date_only": false, "value": "2026-06-23T11:14:11.619401Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3108ec93-2edb-49a5-adf2-8e04b5a03cd8", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0d214c5f-fe3b-474c-9fe1-9a557d3171b7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3108ec93-2edb-49a5-adf2-8e04b5a03cd8"}, {"timestamp": "2026-06-23T14:05:46.919Z", "date_only": false, "value": "2026-06-23T14:05:46.919433Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67bd44b4-e691-4dc9-8c73-c6956168a1ec", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "832b38e5-9b0d-40f5-8635-58d1bddd7cb8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67bd44b4-e691-4dc9-8c73-c6956168a1ec"}, {"timestamp": "2026-06-25T06:34:32.162Z", "date_only": false, "value": "2026-06-25T06:34:32.162441Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "34be0737-8ef9-42aa-aa38-3e07fda3eed1", "url": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd"}, {"timestamp": "2026-06-25T10:15:06.610Z", "date_only": false, "value": "2026-06-25T10:15:06.610382Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d794d788-57eb-4e00-a95d-ed0a820bb545"}, {"timestamp": "2026-06-26T10:15:04.783Z", "date_only": false, "value": "2026-06-26T10:15:04.783540Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3bc6e5fb-2fd2-45ad-98c8-a77b01ae9d25"}, {"timestamp": "2026-06-27T10:15:04.493Z", "date_only": false, "value": "2026-06-27T10:15:04.493615Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dc66ea62-9861-43d5-92d4-55a89e907853"}, {"timestamp": "2026-06-28T10:15:04.700Z", "date_only": false, "value": "2026-06-28T10:15:04.700269Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9ccf1641-cff7-426a-87e5-3395a6050626"}, {"timestamp": "2026-06-29T10:15:03.808Z", "date_only": false, "value": "2026-06-29T10:15:03.808041Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "710f515a-2b5a-4f83-9f2b-7d1b5cc688ee"}, {"timestamp": "2026-06-30T09:22:34.705Z", "date_only": false, "value": "2026-06-30T09:22:34.705738Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c16292ec-c29b-45f2-aa69-f122737404dc", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4f348c29-ad0f-4d31-99f2-5a07ca322cae", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c16292ec-c29b-45f2-aa69-f122737404dc"}, {"timestamp": "2026-06-30T10:15:05.514Z", "date_only": false, "value": "2026-06-30T10:15:05.514269Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6e2632a7-84f2-47ad-8923-5bff9f9d42f4"}, {"timestamp": "2026-07-01T05:53:49.912Z", "date_only": false, "value": "2026-07-01T05:53:49.912571Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a55a1364-d5a6-4cd4-bf16-af5e10d3f02c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/41356e10-e0b0-4f03-b1e4-ce7db1f95cf1"}, {"timestamp": "2026-07-01T10:15:06.261Z", "date_only": false, "value": "2026-07-01T10:15:06.261625Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4f54e9ac-4cd4-4830-acc6-7c9641cf05c5"}, {"timestamp": "2026-07-02T10:15:03.831Z", "date_only": false, "value": "2026-07-02T10:15:03.831216Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0820c788-f7c5-4989-bc8c-8744104f7665"}, {"timestamp": "2026-07-03T09:17:40.342Z", "date_only": false, "value": "2026-07-03T09:17:40.342259Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/8f88c0f51148030c0928bdea1255fe5f", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4bcbce65-cba5-44f3-8034-ff44ea586f56", "url": "https://gist.github.com/tu-trinh-scale/8f88c0f51148030c0928bdea1255fe5f"}, {"timestamp": "2026-07-03T10:15:04.066Z", "date_only": false, "value": "2026-07-03T10:15:04.066449Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c2fc59f0-a42f-43ff-93c3-9324e6703c3c"}, {"timestamp": "2026-07-03T15:14:59.377Z", "date_only": false, "value": "2026-07-03T15:14:59.377057Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/ecaf0ce58b74cc35c9a683e5a19fb8c2", "record": "cve-2023-20198", "field": "creation_timestamp", "uuid": "1b9f38cf-fc12-4176-88e7-1736c69fd494", "url": "https://gist.github.com/tu-trinh-scale/ecaf0ce58b74cc35c9a683e5a19fb8c2"}, {"timestamp": "2026-07-03T18:57:42.898Z", "date_only": false, "value": "2026-07-03T18:57:42.898937Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/164a6efce719a9470ff16547904f7531", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4284e21e-3e1a-4d88-84b2-8872b71807cb", "url": "https://gist.github.com/tu-trinh-scale/164a6efce719a9470ff16547904f7531"}, {"timestamp": "2026-07-04T10:15:04.657Z", "date_only": false, "value": "2026-07-04T10:15:04.657323Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2c1e3009-af32-4282-911d-500f38bed01b"}, {"timestamp": "2026-07-05T10:15:06.901Z", "date_only": false, "value": "2026-07-05T10:15:06.901248Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f82ba38d-8848-4685-8fe9-c223c54a6532"}, {"timestamp": "2026-07-06T10:15:03.934Z", "date_only": false, "value": "2026-07-06T10:15:03.934435Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7196b487-130a-48f8-804b-c3479dfe9a10"}, {"timestamp": "2026-07-06T11:00:15.388Z", "date_only": false, "value": "2026-07-06T11:00:15.388464Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/73", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6ccacec9-342e-4c98-9139-c6ae2f41f1fb", "url": "https://t.me/ZerodayAlert/73"}, {"timestamp": "2026-07-06T11:00:15.415Z", "date_only": false, "value": "2026-07-06T11:00:15.415613Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/74", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9306cd1c-c2d1-44ea-a4cd-16a30bec3e86", "url": "https://t.me/ZerodayAlert/74"}, {"timestamp": "2026-07-07T00:00:23.782Z", "date_only": false, "value": "2026-07-07T00:00:23.782722Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/73", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "14d762f8-fffd-4222-bf6f-a764866b71fd", "url": "https://t.me/ZerodayAlert/73"}, {"timestamp": "2026-07-07T00:00:23.810Z", "date_only": false, "value": "2026-07-07T00:00:23.810541Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/74", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "95b2a2a1-c082-43ec-87dd-77bfbb95dfe0", "url": "https://t.me/ZerodayAlert/74"}, {"timestamp": "2026-07-07T10:15:05.876Z", "date_only": false, "value": "2026-07-07T10:15:05.876256Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "46b19c9d-3bca-4506-8e07-7e7ee040cd28"}, {"timestamp": "2026-07-08T10:15:03.830Z", "date_only": false, "value": "2026-07-08T10:15:03.830627Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7967899b-ff18-4669-8187-ab9eff17001e"}, {"timestamp": "2026-07-09T10:15:04.571Z", "date_only": false, "value": "2026-07-09T10:15:04.571902Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5e7094b0-f20d-4d1d-addf-73ce71529bfd"}, {"timestamp": "2026-07-10T10:15:04.162Z", "date_only": false, "value": "2026-07-10T10:15:04.162951Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "58cd8952-ede0-45f4-ac73-85cc9347faf4"}, {"timestamp": "2026-07-11T00:15:03.922Z", "date_only": false, "value": "2026-07-11T00:15:03.922891Z", "kind": "sighting", "label": "Seen", "source": "MISP/3057b723-5fae-476d-b162-b0a1a9a63ac2", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a4893bbd-e7f8-44b2-8731-a72111226b27"}, {"timestamp": "2026-07-11T10:15:05.347Z", "date_only": false, "value": "2026-07-11T10:15:05.347371Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "81fdcf7d-1e0f-4451-b2d0-f4d7878dd511"}, {"timestamp": "2026-07-12T05:00:04.722Z", "date_only": false, "value": "2026-07-12T05:00:04.722715Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/74", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "24229177-cb7a-49b6-84da-82f728869799", "url": "https://t.me/ZerodayAlert/74"}, {"timestamp": "2026-07-12T05:00:04.757Z", "date_only": false, "value": "2026-07-12T05:00:04.757097Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/73", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7387cad7-0436-45bc-9c64-b2e429d9680b", "url": "https://t.me/ZerodayAlert/73"}, {"timestamp": "2026-07-12T10:15:04.499Z", "date_only": false, "value": "2026-07-12T10:15:04.499883Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "773c7a2f-365e-48d9-b4ff-b910070f27d8"}, {"timestamp": "2026-07-13T00:00:52.228Z", "date_only": false, "value": "2026-07-13T00:00:52.228854Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/74", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1628c959-00ca-43ca-8b05-aca4a21cb886", "url": "https://t.me/ZerodayAlert/74"}, {"timestamp": "2026-07-13T00:00:52.265Z", "date_only": false, "value": "2026-07-13T00:00:52.265021Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/73", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a35fade9-3c05-4a01-aff5-606b574a6fe7", "url": "https://t.me/ZerodayAlert/73"}, {"timestamp": "2026-07-13T10:15:05.448Z", "date_only": false, "value": "2026-07-13T10:15:05.448626Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8523514c-b105-4d70-b8a7-a3697b1ef306"}, {"timestamp": "2026-07-14T10:15:09.866Z", "date_only": false, "value": "2026-07-14T10:15:09.866932Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "255d37e9-6649-4601-a536-2dfeb7885125"}, {"timestamp": "2026-07-15T10:15:03.851Z", "date_only": false, "value": "2026-07-15T10:15:03.851671Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f2945d56-d320-4e99-a65d-984324898d39"}, {"timestamp": "2026-07-16T10:15:04.669Z", "date_only": false, "value": "2026-07-16T10:15:04.669091Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9e49d607-f208-41af-a32e-a1422118b209"}, {"timestamp": "2026-07-17T10:15:04.894Z", "date_only": false, "value": "2026-07-17T10:15:04.894694Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "02c209e0-a906-4f72-92a6-dac0f6c3e096"}, {"timestamp": "2026-07-17T12:00:05.983Z", "date_only": false, "value": "2026-07-17T12:00:05.983501Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/safebdv/176", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2f7fb26e-9129-4f6e-82f1-83b73322dedd", "url": "https://t.me/safebdv/176"}, {"timestamp": "2026-07-18T00:00:32.338Z", "date_only": false, "value": "2026-07-18T00:00:32.338513Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/safebdv/176", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6971aabe-9ac7-4724-a6f3-7818a6972553", "url": "https://t.me/safebdv/176"}, {"timestamp": "2026-07-18T10:15:06.349Z", "date_only": false, "value": "2026-07-18T10:15:06.349267Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4351b712-4790-4905-91ad-a556fc23e251"}, {"timestamp": "2026-07-19T10:15:04.477Z", "date_only": false, "value": "2026-07-19T10:15:04.477801Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "caf44267-e99c-4cfe-81b0-3955d9ca227d"}, {"timestamp": "2026-07-20T10:15:04.219Z", "date_only": false, "value": "2026-07-20T10:15:04.219371Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "073e6032-62f7-47ab-93cc-85bd0ecc7d0e"}, {"timestamp": "2026-07-21T10:15:53.765Z", "date_only": false, "value": "2026-07-21T10:15:53.765014Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bd4674cc-1ba9-466f-8977-881375a491e2"}, {"timestamp": "2026-07-23T10:15:06.968Z", "date_only": false, "value": "2026-07-23T10:15:06.968453Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a89a66e4-84ad-47b5-a22b-84408d9e14ce"}, {"timestamp": "2026-07-23T21:15:03.821Z", "date_only": false, "value": "2026-07-23T21:15:03.821473Z", "kind": "sighting", "label": "Seen", "source": "MISP/6e13b405-023b-4678-9ac5-16ce0323258c", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "94f3ddb1-9561-4574-82fe-6a37ee65fdab"}, {"timestamp": "2026-07-24T00:15:03.935Z", "date_only": false, "value": "2026-07-24T00:15:03.935700Z", "kind": "sighting", "label": "Seen", "source": "MISP/6e13b405-023b-4678-9ac5-16ce0323258c", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c5cb7015-2d81-4b50-8d92-f9109b318f41"}, {"timestamp": "2026-07-24T10:15:03.312Z", "date_only": false, "value": "2026-07-24T10:15:03.312876Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "efb5217c-9f3c-4fb6-a1b1-b37096103d44"}, {"timestamp": "2026-07-25T10:15:07.229Z", "date_only": false, "value": "2026-07-25T10:15:07.229833Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "03af68b4-c424-4e10-be96-0fd078d8e6b5"}, {"timestamp": "2026-07-26T10:15:02.977Z", "date_only": false, "value": "2026-07-26T10:15:02.977472Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f0da52f3-b37f-43f4-a85f-945ab586d7f4"}, {"timestamp": "2026-07-27T10:15:04.205Z", "date_only": false, "value": "2026-07-27T10:15:04.205806Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9bafbc9d-af4c-4319-8af0-29e0b61f8d94"}, {"timestamp": "2026-07-28T10:15:04.452Z", "date_only": false, "value": "2026-07-28T10:15:04.452637Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "bef96649-8a68-40f7-a05b-81ee12512564"}, {"timestamp": "2026-07-29T10:15:04.629Z", "date_only": false, "value": "2026-07-29T10:15:04.629327Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "51711478-cfef-47a9-b5fa-964bcfb46f2a"}, {"timestamp": "2026-07-29T12:02:23.196Z", "date_only": false, "value": "2026-07-29T12:02:23.196668Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3954", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2a797c1a-6bfc-4d80-86dc-120a2d0e085c", "url": "https://t.me/reverseame/3954"}, {"timestamp": "2026-07-29T12:02:23.438Z", "date_only": false, "value": "2026-07-29T12:02:23.438534Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3914", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "70f5ffc2-0267-4157-b62b-be15364516db", "url": "https://t.me/reverseame/3914"}, {"timestamp": "2026-07-29T12:03:07.536Z", "date_only": false, "value": "2026-07-29T12:03:07.536625Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "18c3e26f-0224-42d6-ae24-9c6064d6edcd", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-07-29T12:03:09.057Z", "date_only": false, "value": "2026-07-29T12:03:09.057689Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2928", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "129e7964-f870-49f2-a28b-01545e58b06e", "url": "https://t.me/cisoclub/2928"}, {"timestamp": "2026-07-29T13:00:05.168Z", "date_only": false, "value": "2026-07-29T13:00:05.168781Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/657", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3a416cd3-e7c4-4e6f-be67-4a4dc31ccf4c", "url": "https://t.me/Intel_Encyclopedia/657"}, {"timestamp": "2026-07-29T20:11:56.776Z", "date_only": false, "value": "2026-07-29T20:11:56.776713Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "193bbbcf-64ff-4b82-8d98-8680f0bb22ae", "url": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e"}, {"timestamp": "2026-07-30T00:00:30.442Z", "date_only": false, "value": "2026-07-30T00:00:30.442984Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/657", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0c8aa146-8cc2-446d-bab6-4176e6e95056", "url": "https://t.me/Intel_Encyclopedia/657"}, {"timestamp": "2026-07-30T00:02:25.444Z", "date_only": false, "value": "2026-07-30T00:02:25.444831Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3954", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d18b249f-cb65-467a-a886-646eda3c82ac", "url": "https://t.me/reverseame/3954"}, {"timestamp": "2026-07-30T00:02:25.754Z", "date_only": false, "value": "2026-07-30T00:02:25.754678Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3914", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "39222f5b-081e-438e-b19f-2c0c24554a54", "url": "https://t.me/reverseame/3914"}, {"timestamp": "2026-07-30T00:02:55.637Z", "date_only": false, "value": "2026-07-30T00:02:55.637685Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6e5e7421-ed8a-456e-b96b-4cf8b344377a", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-07-30T00:02:55.764Z", "date_only": false, "value": "2026-07-30T00:02:55.764882Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2928", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "31867bdf-9edb-4dba-a9c1-e6fd1d9e6c05", "url": "https://t.me/cisoclub/2928"}, {"timestamp": "2026-07-30T10:15:03.403Z", "date_only": false, "value": "2026-07-30T10:15:03.403755Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dfa57c45-637b-40d7-a3d8-ecfb611d9ab1"}, {"timestamp": "2026-07-31T10:15:04.754Z", "date_only": false, "value": "2026-07-31T10:15:04.754850Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cb397ad5-f8cb-464a-bff5-2657cde31d6f"}, {"timestamp": "2026-08-01T10:15:04.736Z", "date_only": false, "value": "2026-08-01T10:15:04.736010Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3162065e-a024-4eda-976f-3d2db7f60536"}, {"timestamp": "2026-08-02T10:28:05.572Z", "date_only": false, "value": "2026-08-02T10:28:05.572446Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "66220423-e853-4c61-9f02-06c9bfe45353"}, {"timestamp": "2026-08-02T11:19:34.354Z", "date_only": false, "value": "2026-08-02T11:19:34.354745Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3954", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1321ea70-1c26-489d-8e63-197bc2d9eb17", "url": "https://t.me/reverseame/3954"}, {"timestamp": "2026-08-02T12:04:24.961Z", "date_only": false, "value": "2026-08-02T12:04:24.961066Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3914", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5c141557-cfca-4611-bb2e-6ad1a967c506", "url": "https://t.me/reverseame/3914"}, {"timestamp": "2026-08-03T02:07:12.076Z", "date_only": false, "value": "2026-08-03T02:07:12.076557Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3914", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7afa6a69-2aba-4949-b74e-5b47e2fade18", "url": "https://t.me/reverseame/3914"}, {"timestamp": "2026-08-03T02:07:12.423Z", "date_only": false, "value": "2026-08-03T02:07:12.423360Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3954", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "af151c11-9b93-4d1a-8ca0-e88954f94b21", "url": "https://t.me/reverseame/3954"}, {"timestamp": "2026-08-03T10:32:08.014Z", "date_only": false, "value": "2026-08-03T10:32:08.014424Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "af1be971-2521-4acd-ae07-64f110801084"}, {"timestamp": "2026-08-03T19:00:04.757Z", "date_only": false, "value": "2026-08-03T19:00:04.757497Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2928", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3f50f370-7297-4ec2-848d-bd40c9e3732e", "url": "https://t.me/cisoclub/2928"}, {"timestamp": "2026-08-03T19:00:04.899Z", "date_only": false, "value": "2026-08-03T19:00:04.899694Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7912393f-f8ac-42c7-8c13-7d4e36f7047e", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-08-04T00:00:29.021Z", "date_only": false, "value": "2026-08-04T00:00:29.021126Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2928", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c87f2a48-4323-4cb6-90bf-fa7234d7fc91", "url": "https://t.me/cisoclub/2928"}, {"timestamp": "2026-08-04T00:00:29.129Z", "date_only": false, "value": "2026-08-04T00:00:29.129368Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "74676a3e-fe1e-49fb-9ab0-92c34d214731", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-08-04T10:15:04.832Z", "date_only": false, "value": "2026-08-04T10:15:04.832666Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8464213a-61ca-49ca-b664-02b364abd311"}, {"timestamp": "2026-08-04T13:00:09.994Z", "date_only": false, "value": "2026-08-04T13:00:09.994733Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/309", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "48bad705-2df5-4eba-9875-18fbb6e2494a", "url": "https://t.me/purp_sec/309"}, {"timestamp": "2026-08-04T13:00:11.274Z", "date_only": false, "value": "2026-08-04T13:00:11.274816Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/285", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "55be019e-7274-4ec4-a1b9-5788afe7224c", "url": "https://t.me/purp_sec/285"}, {"timestamp": "2026-08-04T13:00:18.014Z", "date_only": false, "value": "2026-08-04T13:00:18.014271Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/18", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "d6b999a9-2b84-4bd6-b609-c11196ec9174", "url": "https://t.me/pentestnotes/18"}, {"timestamp": "2026-08-05T00:00:22.436Z", "date_only": false, "value": "2026-08-05T00:00:22.436356Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/285", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fb2a5324-e8eb-486f-adc5-fbd3e597bdf6", "url": "https://t.me/purp_sec/285"}, {"timestamp": "2026-08-05T00:00:23.959Z", "date_only": false, "value": "2026-08-05T00:00:23.959576Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/309", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "44fbdde6-9165-4cde-9891-d3ccfd14d0c9", "url": "https://t.me/purp_sec/309"}, {"timestamp": "2026-08-05T00:00:33.069Z", "date_only": false, "value": "2026-08-05T00:00:33.069775Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/18", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "74416876-2466-4996-8b2b-008382260dbc", "url": "https://t.me/pentestnotes/18"}, {"timestamp": "2026-08-05T10:15:09.027Z", "date_only": false, "value": "2026-08-05T10:15:09.027073Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2a741479-729a-4ffc-ac9f-111cea963824"}, {"timestamp": "2026-08-06T00:01:00.651Z", "date_only": false, "value": "2026-08-06T00:01:00.651710Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pentestnotes/18", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "744e363a-1177-42a1-811a-b457b6b63a25", "url": "https://t.me/pentestnotes/18"}, {"timestamp": "2026-08-06T10:15:05.715Z", "date_only": false, "value": "2026-08-06T10:15:05.715696Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c80dd87f-5554-499d-995c-1253e3655a08"}, {"timestamp": "2026-08-07T10:21:13.623Z", "date_only": false, "value": "2026-08-07T10:21:13.623303Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0f19c74a-446a-4393-955c-ca1625bc0628"}, {"timestamp": "2026-08-08T10:30:18.882Z", "date_only": false, "value": "2026-08-08T10:30:18.882829Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3b2708e6-06bc-4e32-8542-9011350e9981"}, {"timestamp": "2026-08-09T04:17:03.854Z", "date_only": false, "value": "2026-08-09T04:17:03.854531Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/729", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9dd2ce64-0602-434f-9dac-eba1c0f745aa", "url": "https://t.me/Intel_Encyclopedia/729"}, {"timestamp": "2026-08-10T00:00:31.057Z", "date_only": false, "value": "2026-08-10T00:00:31.057897Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/729", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b3d844bd-872f-4257-89ca-f69c8f5cd5f1", "url": "https://t.me/Intel_Encyclopedia/729"}, {"timestamp": "2026-08-10T10:15:05.626Z", "date_only": false, "value": "2026-08-10T10:15:05.626595Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5d6f5ad3-67e3-40b1-b162-e78517029451"}, {"timestamp": "2026-08-11T10:15:04.959Z", "date_only": false, "value": "2026-08-11T10:15:04.959284Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "cc4e3124-e219-41df-9e09-8e0dac46961c"}, {"timestamp": "2026-08-12T10:15:06.349Z", "date_only": false, "value": "2026-08-12T10:15:06.349127Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4746160f-392f-4d29-bd40-dcf5aa60b85e"}, {"timestamp": "2026-08-13T10:15:07.313Z", "date_only": false, "value": "2026-08-13T10:15:07.313542Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "69012409-b7d7-4d75-8a16-b865e97671cc"}, {"timestamp": "2026-08-14T10:15:04.502Z", "date_only": false, "value": "2026-08-14T10:15:04.502618Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7f9b85c2-977f-4202-9ea1-9c6114460e7c"}, {"timestamp": "2026-08-15T10:15:04.271Z", "date_only": false, "value": "2026-08-15T10:15:04.271250Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4a9d8589-cc1b-4cff-ba12-40b92473361d"}, {"timestamp": "2026-08-16T10:15:03.838Z", "date_only": false, "value": "2026-08-16T10:15:03.838891Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8364252f-2aab-4a13-bb5e-119b03101dba"}, {"timestamp": "2026-08-17T10:15:05.305Z", "date_only": false, "value": "2026-08-17T10:15:05.305640Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b32136da-34d4-4959-8b11-289452ad3095"}, {"timestamp": "2026-08-18T10:15:03.027Z", "date_only": false, "value": "2026-08-18T10:15:03.027899Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "378402e3-2529-4195-a801-5d17b5ebdce8"}, {"timestamp": "2026-08-19T10:15:03.903Z", "date_only": false, "value": "2026-08-19T10:15:03.903380Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "8b539ee1-2711-4900-90c0-7a38270b0bda"}, {"timestamp": "2026-08-20T10:15:09.831Z", "date_only": false, "value": "2026-08-20T10:15:09.831728Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "93f18f54-04bd-4a3b-9923-43b8874dcb26"}, {"timestamp": "2026-08-21T10:15:05.182Z", "date_only": false, "value": "2026-08-21T10:15:05.182646Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7bb322d3-c695-4b7c-8173-10092692396b"}, {"timestamp": "2026-08-22T09:29:03.316Z", "date_only": false, "value": "2026-08-22T09:29:03.316753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/timb.me.uk/post/3mtnxkw5sdtk2", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "87dfa0e6-e55d-4f0b-8257-dd0c4e1ca0b4", "url": "https://bsky.app/profile/timb.me.uk/post/3mtnxkw5sdtk2"}, {"timestamp": "2026-08-22T10:15:03.761Z", "date_only": false, "value": "2026-08-22T10:15:03.761168Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "434cd9f3-8f5e-49ea-9c8b-8bbfda866bb0"}, {"timestamp": "2026-08-23T10:15:03.959Z", "date_only": false, "value": "2026-08-23T10:15:03.959939Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e94bed9f-a78f-402f-ba8d-49d5a0facbf0"}, {"timestamp": "2026-08-24T10:15:13.022Z", "date_only": false, "value": "2026-08-24T10:15:13.022121Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "38f90d26-f598-4194-adc6-72fdec6cc9fc"}, {"timestamp": "2026-08-25T10:15:04.599Z", "date_only": false, "value": "2026-08-25T10:15:04.599322Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6b51fef4-7afd-4f30-b405-24238c91cfbd"}, {"timestamp": "2026-08-25T22:00:04.033Z", "date_only": false, "value": "2026-08-25T22:00:04.033454Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poheque/127", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0645b8a1-d8be-4a6c-8a3f-04906d6a1c2b", "url": "https://t.me/poheque/127"}, {"timestamp": "2026-08-26T10:15:07.290Z", "date_only": false, "value": "2026-08-26T10:15:07.290831Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9fc1e424-2f93-4b61-a840-1c9478cba371"}, {"timestamp": "2026-08-27T10:15:07.429Z", "date_only": false, "value": "2026-08-27T10:15:07.429347Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "eaf8dbfa-1053-4f4b-ad7a-4373579c8f43"}, {"timestamp": "2026-08-28T10:15:05.907Z", "date_only": false, "value": "2026-08-28T10:15:05.907716Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0f1b809c-cab8-405e-9b05-17c2b9120980"}, {"timestamp": "2026-08-29T10:15:05.619Z", "date_only": false, "value": "2026-08-29T10:15:05.619626Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e5c715bd-67b7-4104-9e92-fb8d7b53041c"}, {"timestamp": "2026-08-30T10:15:04.030Z", "date_only": false, "value": "2026-08-30T10:15:04.030775Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "442f83a8-7b02-4f45-8535-d29ff89607e9"}, {"timestamp": "2026-08-31T10:15:07.251Z", "date_only": false, "value": "2026-08-31T10:15:07.251495Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a0da5f48-8bad-4245-a09f-f70f8d51c46f"}, {"timestamp": "2026-09-01T10:15:04.860Z", "date_only": false, "value": "2026-09-01T10:15:04.860595Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "56c9fbdd-e57a-47fd-824b-6d9ed8edb2b0"}, {"timestamp": "2026-09-01T17:00:16.162Z", "date_only": false, "value": "2026-09-01T17:00:16.162371Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7309", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "6635de13-b2b3-4e1d-9eda-32af6f403f18", "url": "https://t.me/cissp/7309"}, {"timestamp": "2026-09-01T17:00:16.703Z", "date_only": false, "value": "2026-09-01T17:00:16.703261Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7273", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "98ac0ca7-f7b7-4d4c-b89f-e6cfa6a2441d", "url": "https://t.me/cissp/7273"}, {"timestamp": "2026-09-01T20:00:12.130Z", "date_only": false, "value": "2026-09-01T20:00:12.130052Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/181926", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "da638f20-dd65-4adb-bb67-8c8beb06963f", "url": "https://t.me/hacking_Attack/181926"}, {"timestamp": "2026-09-01T20:00:45.127Z", "date_only": false, "value": "2026-09-01T20:00:45.127529Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/124050", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "dfd4d7a5-9fd3-4371-813a-67474fd62049", "url": "https://t.me/hacking_Attack/124050"}, {"timestamp": "2026-09-01T20:00:45.364Z", "date_only": false, "value": "2026-09-01T20:00:45.364578Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/124049", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0a12b7c9-924a-4966-83ab-648dbb10a288", "url": "https://t.me/hacking_Attack/124049"}, {"timestamp": "2026-09-01T20:00:45.497Z", "date_only": false, "value": "2026-09-01T20:00:45.497807Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/123637", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ebe17e5b-25ab-460d-b8a9-ba2e120c573e", "url": "https://t.me/hacking_Attack/123637"}, {"timestamp": "2026-09-01T20:00:45.807Z", "date_only": false, "value": "2026-09-01T20:00:45.807991Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/123197", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1f652456-3e4f-47ea-9731-69fd87a25b06", "url": "https://t.me/hacking_Attack/123197"}, {"timestamp": "2026-09-01T20:00:45.975Z", "date_only": false, "value": "2026-09-01T20:00:45.975789Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/123125", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "54783188-ae4a-43c9-a50c-21571c84b414", "url": "https://t.me/hacking_Attack/123125"}, {"timestamp": "2026-09-02T01:00:19.212Z", "date_only": false, "value": "2026-09-02T01:00:19.212588Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5HCtE0WkFYUA89VnXRtHIs4spfdfWNAEpm6yt5BW1f2H9os", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "4a06269b-7553-4ecb-9f88-afdaca2ae51a"}, {"timestamp": "2026-09-02T10:15:05.986Z", "date_only": false, "value": "2026-09-02T10:15:05.986218Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e650f165-612d-43eb-bbf3-01e5e1361321"}, {"timestamp": "2026-09-03T00:00:36.983Z", "date_only": false, "value": "2026-09-03T00:00:36.983726Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5HCtE0WkFYUA89VnXRtHIs4spfdfWNAEpm6yt5BW1f2H9os", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1f6b075f-8cad-4506-b5d4-c1d44ba34176"}, {"timestamp": "2026-09-03T10:15:03.391Z", "date_only": false, "value": "2026-09-03T10:15:03.391123Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "1fb9f0eb-4f3d-4dd8-b643-e18e68eb5aff"}, {"timestamp": "2026-09-04T02:00:04.588Z", "date_only": false, "value": "2026-09-04T02:00:04.588467Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/123637", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9abd207c-b7f0-4200-8c06-b753fb4945f0", "url": "https://t.me/hacking_Attack/123637"}, {"timestamp": "2026-09-04T02:00:04.700Z", "date_only": false, "value": "2026-09-04T02:00:04.700601Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/124049", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c5296628-4ba1-4bc3-bbd1-244bb24a3cce", "url": "https://t.me/hacking_Attack/124049"}, {"timestamp": "2026-09-04T02:00:04.857Z", "date_only": false, "value": "2026-09-04T02:00:04.857121Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/124050", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5e85a6fd-7101-46ed-bc23-4277d6dc7272", "url": "https://t.me/hacking_Attack/124050"}, {"timestamp": "2026-09-04T03:00:04.823Z", "date_only": false, "value": "2026-09-04T03:00:04.823006Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/123125", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "575fa199-c876-4b54-80a7-c001464ac419", "url": "https://t.me/hacking_Attack/123125"}, {"timestamp": "2026-09-04T03:00:05.027Z", "date_only": false, "value": "2026-09-04T03:00:05.027526Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/123197", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "fa0bcbef-fa0b-4c4f-9043-aa9cf829321f", "url": "https://t.me/hacking_Attack/123197"}, {"timestamp": "2026-09-04T10:15:02.983Z", "date_only": false, "value": "2026-09-04T10:15:02.983893Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0526fadb-ff99-436e-902a-d83241b3b286"}, {"timestamp": "2026-09-05T10:15:03.913Z", "date_only": false, "value": "2026-09-05T10:15:03.913466Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e797a7bb-a2d4-4c9e-b6c4-f6d408520f9f"}, {"timestamp": "2026-09-06T10:15:03.773Z", "date_only": false, "value": "2026-09-06T10:15:03.773995Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3255e561-e2ae-4043-a9ae-41dc2c148a6d"}, {"timestamp": "2026-09-07T10:15:03.699Z", "date_only": false, "value": "2026-09-07T10:15:03.699757Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ef6281fa-f7f4-47c4-93cc-729cdc38b1d2"}, {"timestamp": "2026-09-08T10:15:04.362Z", "date_only": false, "value": "2026-09-08T10:15:04.362620Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-07)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e7ae82b9-60ab-4ccd-89ee-b7bc4d0c934f"}, {"timestamp": "2026-09-09T05:00:16.682Z", "date_only": false, "value": "2026-09-09T05:00:16.682242Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1586", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9627b877-750f-4488-8e8d-05a596c3192a", "url": "https://t.me/Intel_Encyclopedia/1586"}, {"timestamp": "2026-09-09T05:00:16.757Z", "date_only": false, "value": "2026-09-09T05:00:16.757968Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1608", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "82ae7751-250a-44d0-9a54-d339e9e14a9f", "url": "https://t.me/Intel_Encyclopedia/1608"}, {"timestamp": "2026-09-09T20:00:07.034Z", "date_only": false, "value": "2026-09-09T20:00:07.034190Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7273", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2a99bbc1-3ef3-46da-bad0-8966237da028", "url": "https://t.me/cissp/7273"}, {"timestamp": "2026-09-09T20:00:07.714Z", "date_only": false, "value": "2026-09-09T20:00:07.714201Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7309", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7f202652-f462-4933-91be-67569dc8d8f7", "url": "https://t.me/cissp/7309"}, {"timestamp": "2026-09-10T00:00:34.597Z", "date_only": false, "value": "2026-09-10T00:00:34.597051Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1608", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "c83c6dc9-7388-4736-907e-917404cb0b77", "url": "https://t.me/Intel_Encyclopedia/1608"}, {"timestamp": "2026-09-10T00:00:34.689Z", "date_only": false, "value": "2026-09-10T00:00:34.689141Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1586", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "35a14abd-9e86-4419-9dba-67daea802daf", "url": "https://t.me/Intel_Encyclopedia/1586"}, {"timestamp": "2026-09-10T10:15:02.850Z", "date_only": false, "value": "2026-09-10T10:15:02.850426Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "b5c01bfc-0cde-48b3-b800-aba354aca551"}, {"timestamp": "2026-09-11T10:15:04.101Z", "date_only": false, "value": "2026-09-11T10:15:04.101963Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e074b952-3511-495a-a5db-972ebd12da87"}, {"timestamp": "2026-09-12T10:15:04.002Z", "date_only": false, "value": "2026-09-12T10:15:04.002256Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "5fed9bed-e8f1-41a9-8ab7-6f3c85ac3317"}, {"timestamp": "2026-09-13T10:15:06.473Z", "date_only": false, "value": "2026-09-13T10:15:06.473906Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "0106f6c3-1482-4a1f-9f89-e54d08134625"}, {"timestamp": "2026-09-14T10:15:05.008Z", "date_only": false, "value": "2026-09-14T10:15:05.008675Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "04de4da2-d122-4199-9fee-6fe9e2c4400e"}, {"timestamp": "2026-09-15T10:15:05.590Z", "date_only": false, "value": "2026-09-15T10:15:05.590891Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "28b44a29-2e02-48c1-ac35-eac2db7932f4"}, {"timestamp": "2026-09-16T10:15:05.340Z", "date_only": false, "value": "2026-09-16T10:15:05.340267Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "f266a9a2-78c2-4649-92dd-1175245eea52"}, {"timestamp": "2026-09-17T10:15:05.396Z", "date_only": false, "value": "2026-09-17T10:15:05.396502Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "ad07de67-5fc5-4429-abb0-64423a4eb03e"}, {"timestamp": "2026-09-18T04:00:05.022Z", "date_only": false, "value": "2026-09-18T04:00:05.022803Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NayOVZjVJC06L-b7r9PCl1kQpZR0WXnoIQBtAMCRTFS6vQI", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "77899c48-9773-44ed-9ec9-ca0bef6d16a6"}, {"timestamp": "2026-09-18T10:15:03.532Z", "date_only": false, "value": "2026-09-18T10:15:03.532429Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e9ef50b2-a718-4281-a254-0e53506703e3"}, {"timestamp": "2026-09-19T10:15:06.175Z", "date_only": false, "value": "2026-09-19T10:15:06.175192Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-18)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "e0715df7-b49a-41b5-9bbf-dca715b9e62e"}, {"timestamp": "2026-09-20T10:15:03.853Z", "date_only": false, "value": "2026-09-20T10:15:03.853744Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "45c07078-d2be-4c70-ba81-da0738c8c6d6"}, {"timestamp": "2026-09-21T10:15:04.567Z", "date_only": false, "value": "2026-09-21T10:15:04.567644Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-20)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "2814eaff-52ce-425b-8df5-40f88441c3b0"}, {"timestamp": "2026-09-22T10:15:04.814Z", "date_only": false, "value": "2026-09-22T10:15:04.814670Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-21)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "7a11eae7-7d15-4ae1-9c09-761e88f0bc52"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-23)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "069b7585-9fe8-4755-86ae-0527042e2485"}, {"timestamp": "2026-09-23T10:15:04.993Z", "date_only": false, "value": "2026-09-23T10:15:04.993191Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-22)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a760a34a-e74e-47ff-a3d1-32034462fc2e"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-24)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "3b8286b0-60df-43f1-b9d0-d359395d53f9"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-25)", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "44adfb73-837a-434b-9504-483c5c6666f1"}, {"timestamp": "2026-10-02T11:00:17Z", "date_only": false, "value": "2026-10-02T11:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sCwM_G-UsAGZwbsPRUaRPD5HOm5OGI4kL8vm9Dutws1piOA", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "a059e5a1-c365-4404-a996-3f29a5699b51"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-20198", "field": "timestamps.last_seen_at", "uuid": "41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-20198", "field": "evidence.0.details.observation_date", "uuid": "41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-20198", "field": "status.status_updated_at", "uuid": "41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T01:00:01Z", "date_only": false, "value": "2026-10-29T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-20198", "field": "timestamps.recorded_at", "uuid": "41356e10-e0b0-4f03-b1e4-ce7db1f95cf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T16:27:36.251Z", "date_only": false, "value": "2026-10-29T16:27:36.251795Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3myzoo5ynua2y", "record": "CVE-2023-20198", "field": "creation_timestamp", "uuid": "9318d88a-955b-45c0-af57-6067494a9f99", "url": "https://bsky.app/profile/cyfar.ca/post/3myzoo5ynua2y"}]}