{"metadata": {"vulnerability": "CVE-2023-20867", "count": 217, "kinds": {"milestone": 29, "sighting": 39, "kev": 11, "other": 138}}, "data": [{"timestamp": "2022-11-01T15:41:50.390Z", "date_only": false, "value": "2022-11-01T15:41:50.390Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-20867", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-06-07T00:00:00Z", "date_only": false, "value": "2023-06-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-06-07T00:00:00Z", "date_only": false, "value": "2023-06-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-06-07T00:00:00Z", "date_only": false, "value": "2023-06-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-06-07T00:00:00Z", "date_only": false, "value": "2023-06-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-06-07T00:00:00Z", "date_only": false, "value": "2023-06-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-06-07T00:00:00Z", "date_only": false, "value": "2023-06-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-20867", "record": "UBUNTU-CVE-2023-20867", "field": "published"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T16:47:21.689Z", "date_only": false, "value": "2023-06-13T16:47:21.689Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-20867", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-06-13T17:15:00Z", "date_only": false, "value": "2023-06-13T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-20867", "record": "GSD-2023-20867", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-06-13T17:15:14Z", "date_only": false, "value": "2023-06-13T17:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QM59-F7VH-3M2P", "record": "GHSA-QM59-F7VH-3M2P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-06-13T17:15:14.070Z", "date_only": false, "value": "2023-06-13T17:15:14.070", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20867", "record": "FKIE_CVE-2023-20867", "field": "published"}, {"timestamp": "2023-06-13T18:30:39Z", "date_only": false, "value": "2023-06-13T18:30:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QM59-F7VH-3M2P", "record": "GHSA-QM59-F7VH-3M2P", "field": "published"}, {"timestamp": "2023-06-13T22:00:00Z", "date_only": false, "value": "2023-06-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T22:00:00Z", "date_only": false, "value": "2023-06-13T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T22:00:00Z", "date_only": false, "value": "2023-06-13T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0457", "record": "CERTFR-2023-AVI-0457", "field": "last_revision_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0457", "record": "CERTFR-2023-AVI-0457", "field": "initial_release_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0457", "record": "CERTFR-2023-AVI-0457", "field": "revisions.0.revision_date"}, {"timestamp": "2023-06-14T08:32:15Z", "date_only": false, "value": "2023-06-14T08:32:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/2728", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "785d4fb0-b3ca-4b10-8751-147d21e51971", "content": "\u200b\u26a1\ufe0f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VMware ESXi \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c UNC3886 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0451\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 ESXi, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Windows \u0438 Linux \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c UNC3886, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2023-20867 \u0432 VMware Tools, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043c\u0435\u0436\u0434\u0443 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u043c \u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u044b VirtualPita \u0438 VirtualPie \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u00ab\u041f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u043e\u0441\u0442 ESXi \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e VMware Tools \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043c\u0435\u0436\u0434\u0443 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u043e\u0439, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VMware.\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 vSphere Installation Bundles (VIBs), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 ESXi.\n\n\u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u0442\u0438\u043f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, VirtualGate, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Mandiant \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u043a\u0430\u043a \u0434\u0440\u043e\u043f\u043f\u0435\u0440, \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0439 DLL-\u0444\u0430\u0439\u043b\u044b \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u00ab\u042d\u0442\u043e\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u0430\u043d\u0430\u043b \u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0438 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438, \u0433\u0434\u0435 \u043b\u044e\u0431\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u0432 \u0440\u043e\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443 ESXi \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u043e\u0439 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Mandiant.\n\n\u00ab\u042d\u0442\u043e \u0435\u0449\u0451 \u0440\u0430\u0437 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0437\u043d\u0430\u043d\u0438\u044f ESXi, vCenter \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 VMware \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u043e\u0432 UNC3886. \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445\u00bb, \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 Mandiant \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u0442\u0435 \u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 UNC3886 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f ( CVE-2022-41328 ) \u0432 \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b 2022 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 FortiGate \u0438 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 Castletap \u0438 Thincrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiManager \u0438 FortiAnalyzer, \u0434\u043b\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Mandiant, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 UNC3886 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c, \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0447\u0451\u0442\u043a\u043e\u043c \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/2728"}, {"timestamp": "2023-06-14T18:49:28Z", "date_only": false, "value": "2023-06-14T18:49:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3480", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "dbb7b329-3252-4c09-a7e6-789f0417ef18", "content": "Chinese state-sponsored group UNC3886 exploits a zero-day VMware authentication bypass flaw (CVE-2023-20867) to backdoor Windows, Linux, and PhotonOS systems. \n \nLearn about the backdoor tactics: https://thehackernews.com/2023/06/chinese-hackers-exploit-vmware-zero-day.html", "url": "https://t.me/thehackernews/3480"}, {"timestamp": "2023-06-14T19:25:27Z", "date_only": false, "value": "2023-06-14T19:25:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4499", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "2e3621e8-93c8-45e2-9429-bd71db670cb1", "content": "\u034f\u041d\u043e\u0432\u044b\u0439 zero-day \u0434\u043b\u044f VMware ESXi \u0432 \u0440\u0443\u043a\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 Mandiant, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435, \u043f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0430\u043a\u0442\u043e\u0440\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Windows \u0438 Linux, \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0436\u0435\u0440\u0442\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 VMware \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ESXi \u0438\u043c\u0435\u0435\u0442 \u00ab\u043d\u0438\u0437\u043a\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u00bb, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mandiant \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0435 UNC3886.\n\n\u0421\u0430\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-20867 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u043e\u0441\u0442 ESXi \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c VMware Tools \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u0432\u043b\u0438\u044f\u044f \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043a \u0445\u043e\u0441\u0442\u0443 ESXi, \u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e VMware Tools.\n\n\u0418 \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u044d\u0442\u043e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435 ESXi \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418 \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 VMware \u0437\u0430\u043d\u0438\u0437\u0438\u0442\u044c \u043e\u0446\u0435\u043d\u043a\u0443 \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043d\u0444\u043e\u0441\u0435\u043a-\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043d\u043e\u0441\u0442\u044c \u0431\u043e\u043c\u0431\u0438\u0442 \u0441\u043e\u0432\u0441\u0435\u043c \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443.\n\n\u0412\u0441\u0435 \u0434\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e Mandiant \u0440\u0435\u0448\u0438\u043b\u0438 \u043d\u0435 \u0437\u0430\u043c\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u043d\u0435 \u0434\u0430\u0432\u0430\u0442\u044c IOC, \u0441\u0441\u044b\u043b\u0430\u044f\u0441\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u043e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u0435\u043d\u044f\u043b \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f\u0445, \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \ud83d\udc47", "url": "https://t.me/true_secator/4499"}, {"timestamp": "2023-06-14T19:54:06Z", "date_only": false, "value": "2023-06-14T19:54:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/356", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "80f58a5a-496e-44f2-9e8d-e1dc7b78a654", "content": "Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux Systems\nhttps://thehackernews.com/2023/06/chinese-hackers-exploit-vmware-zero-day.html\n\nThe Chinese state-sponsored group known as\u00a0UNC3886\u00a0has been found to exploit a zero-day flaw in VMware ESXi hosts to backdoor Windows and Linux systems.\nThe VMware Tools authentication bypass vulnerability, tracked as\u00a0CVE-2023-20867\u00a0(CVSS score: 3.9), \"enabled the execution of privileged commands across Windows, Linux, and PhotonOS (vCenter) guest VMs without authentication of guest credentials", "url": "https://t.me/KomunitiSiber/356"}, {"timestamp": "2023-06-14T21:04:15Z", "date_only": false, "value": "2023-06-14T21:04:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/D8fH-09UkbJkwCbbzZz_Ysc6jCFh3ARV8Yo4Bbh4C-0gFA", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "08f44753-4b95-4198-a92c-140077b02b91"}, {"timestamp": "2023-06-15T09:51:28Z", "date_only": false, "value": "2023-06-15T09:51:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/4obGGHxp8wajT_Yyw9jKN18UPVxJW7j5fHPRMTbF7hMToCo", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "28720a83-64eb-44d0-aa58-f00e3217c45b"}, {"timestamp": "2023-06-15T10:42:55Z", "date_only": false, "value": "2023-06-15T10:42:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/YE_0x/744", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "224ea641-a7fa-4608-8c7e-a012a9c93f26", "content": "\u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u0635\u064a\u0646\u064a\u0629 UNC3886 \u0627\u0644\u062a\u064a \u062a\u0631\u0639\u0627\u0647\u0627 \u0627\u0644\u062f\u0648\u0644\u0629 \u062e\u0637\u0623 \u062a\u062c\u0627\u0648\u0632 \u0645\u0635\u0627\u062f\u0642\u0629 VMware \u0644\u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 (CVE-2023-20867) \u0644\u0623\u0646\u0638\u0645\u0629 Windows \u0648 Linux \u0648 PhotonOS \u0627\u0644\u062e\u0644\u0641\u064a\u0629.\n\n\ud83d\udea8 ===============\n\ud83d\udd30 #0xYE\n\ud83d\udd30 #Cyber_Security\n\ud83d\udd30 #Yemeni_Hackers \n\ud83d\udd30 @YE_0x\n\ud83d\udea8===============", "url": "https://t.me/YE_0x/744"}, {"timestamp": "2023-06-16T19:47:05Z", "date_only": false, "value": "2023-06-16T19:47:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2530-1", "record": "SUSE-SU-2023:2530-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-16T19:47:05Z", "date_only": false, "value": "2023-06-16T19:47:05Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:2530-1", "record": "SUSE-SU-2023:2530-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-16T19:47:05Z", "date_only": false, "value": "2023-06-16T19:47:05Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2530-1", "record": "SUSE-SU-2023:2530-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-06-16T19:47:05Z", "date_only": false, "value": "2023-06-16T19:47:05Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2530-1", "record": "SUSE-SU-2023:2530-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-17T13:01:48Z", "date_only": false, "value": "2023-06-17T13:01:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YE_0x/756", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "975a9407-c297-4805-8b7d-e95a1f190d3b", "content": "\n\n\u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u0635\u064a\u0646\u064a\u0629 UNC3886 \u0627\u0644\u062a\u064a \u062a\u0631\u0639\u0627\u0647\u0627 \u0627\u0644\u062f\u0648\u0644\u0629 \u062e\u0637\u0623 \u062a\u062c\u0627\u0648\u0632 \u0645\u0635\u0627\u062f\u0642\u0629 VMware.\n\u0648\u0647\u064a \u062b\u063a\u0631\u0629 zero-day (CVE-2023-20867) \u0644\u0623\u0646\u0638\u0645\u0629 Windows \u0648 Linux \u0648 PhotonOS \u0627\u0644\u062e\u0644\u0641\u064a\u0629.\n\n\ud83d\udea8 ===============\n\ud83d\udd30 #0xYE\n\ud83d\udd30 #Cyber_Security\n\ud83d\udd30 #Yemeni_Hackers \n\ud83d\udd30 @YE_0x\n\ud83d\udea8===============", "url": "https://t.me/YE_0x/756"}, {"timestamp": "2023-06-18T22:00:00Z", "date_only": false, "value": "2023-06-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-06-22T07:49:02Z", "date_only": false, "value": "2023-06-22T07:49:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-1", "record": "SUSE-SU-2023:2604-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-22T07:49:02Z", "date_only": false, "value": "2023-06-22T07:49:02Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-1", "record": "SUSE-SU-2023:2604-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-22T07:49:02Z", "date_only": false, "value": "2023-06-22T07:49:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-1", "record": "SUSE-SU-2023:2604-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-06-22T07:49:02Z", "date_only": false, "value": "2023-06-22T07:49:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-1", "record": "SUSE-SU-2023:2604-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-22T07:49:02Z", "date_only": false, "value": "2023-06-22T07:49:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-1", "record": "SUSE-SU-2023:2604-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-20867", "field": "timestamps.asserted_at", "uuid": "15f47a66-9863-493d-8acc-e9eee11fe4ff", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-20867", "field": "timestamps.asserted_at", "uuid": "70598828-8514-4deb-a3c9-54d614d53be8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": true, "value": "2023-06-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20867", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-20867", "field": "evidence.0.details.added_date", "uuid": "70598828-8514-4deb-a3c9-54d614d53be8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": true, "value": "2023-06-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-20867", "field": "evidence.0.details.date_added", "uuid": "15f47a66-9863-493d-8acc-e9eee11fe4ff", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-20867", "field": "timestamps.first_seen_at", "uuid": "15f47a66-9863-493d-8acc-e9eee11fe4ff", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-20867", "field": "timestamps.first_seen_at", "uuid": "70598828-8514-4deb-a3c9-54d614d53be8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-20867", "field": "status.status_updated_at", "uuid": "15f47a66-9863-493d-8acc-e9eee11fe4ff", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-20867", "field": "status.status_updated_at", "uuid": "70598828-8514-4deb-a3c9-54d614d53be8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-23T00:00:00Z", "date_only": false, "value": "2023-06-23T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20867", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-06-23T18:10:02Z", "date_only": false, "value": "2023-06-23T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "32601a2e-e5bc-46d0-8bd3-2230969757f4"}, {"timestamp": "2023-06-24T19:03:28Z", "date_only": false, "value": "2023-06-24T19:03:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/404", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "ad3d56d6-2836-4e2b-b630-d09b4abdf1bd", "content": "U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog\nhttps://thehackernews.com/2023/06/us-cybersecurity-agency-adds-6-flaws-to.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency has\u00a0added\u00a0a batch of six flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThis comprises three vulnerabilities that Apple patched this week (CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439), two flaws in VMware (CVE-2023-20867\u00a0and\u00a0CVE-2023-20887), and one shortcoming impacting Zyxel", "url": "https://t.me/KomunitiSiber/404"}, {"timestamp": "2023-06-24T19:06:17Z", "date_only": false, "value": "2023-06-24T19:06:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/7dSlb-0czcdIF1tYEj56BREFSMbL2JYuk8jyNafYi4m26A", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "01a71d04-f1a4-4af2-9e90-2a7e628e0490"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:3944", "record": "RHSA-2023:3944", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2023:3944", "record": "RHSA-2023:3944", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2023:3944", "record": "RHSA-2023:3944", "field": "document.tracking.generator.date"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2023:3944", "record": "RHSA-2023:3944", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:3948", "record": "ALSA-2023:3948", "field": "published"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:3949", "record": "ALSA-2023:3949", "field": "published"}, {"timestamp": "2023-06-29T15:05:46Z", "date_only": false, "value": "2023-06-29T15:05:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T15:05:46Z", "date_only": false, "value": "2023-06-29T15:05:46+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-06-29T15:05:46Z", "date_only": false, "value": "2023-06-29T15:05:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T15:05:58Z", "date_only": false, "value": "2023-06-29T15:05:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T15:05:58Z", "date_only": false, "value": "2023-06-29T15:05:58+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-06-29T15:05:58Z", "date_only": false, "value": "2023-06-29T15:05:58+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T15:07:16Z", "date_only": false, "value": "2023-06-29T15:07:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T15:07:16Z", "date_only": false, "value": "2023-06-29T15:07:16+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-06-29T15:07:16Z", "date_only": false, "value": "2023-06-29T15:07:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T15:12:37Z", "date_only": false, "value": "2023-06-29T15:12:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T15:12:37Z", "date_only": false, "value": "2023-06-29T15:12:37+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-06-29T15:12:37Z", "date_only": false, "value": "2023-06-29T15:12:37+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T15:18:33Z", "date_only": false, "value": "2023-06-29T15:18:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T15:18:33Z", "date_only": false, "value": "2023-06-29T15:18:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-06-29T15:18:33Z", "date_only": false, "value": "2023-06-29T15:18:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T15:22:12Z", "date_only": false, "value": "2023-06-29T15:22:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-29T15:22:12Z", "date_only": false, "value": "2023-06-29T15:22:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-06-29T15:22:12Z", "date_only": false, "value": "2023-06-29T15:22:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-29T22:00:00Z", "date_only": false, "value": "2023-06-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-07-09T22:00:00Z", "date_only": false, "value": "2023-07-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-07-14T00:00:00Z", "date_only": true, "value": "2023-07-14", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-20867", "field": "evidence.0.details.due_date", "uuid": "15f47a66-9863-493d-8acc-e9eee11fe4ff", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-07-14T10:41:18Z", "date_only": false, "value": "2023-07-14T10:41:18Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:3948", "record": "ALSA-2023:3948", "field": "modified"}, {"timestamp": "2023-07-14T10:46:16Z", "date_only": false, "value": "2023-07-14T10:46:16Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:3949", "record": "ALSA-2023:3949", "field": "modified"}, {"timestamp": "2023-07-19T22:00:00Z", "date_only": false, "value": "2023-07-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-07-21T20:40:05Z", "date_only": false, "value": "2023-07-21T20:40:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4646", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "73d0aab6-dfc5-4271-abd1-c5143ffba212", "content": "Mandiant Intelligence \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u0438\u043c\u0438 \u0440\u0430\u0437\u043c\u044b\u0448\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0410\u0420\u0422 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442 \u0442\u0430\u043a\u0442\u0438\u043a\u0443 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0441\u0442\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438.\n\n\u0420\u0435\u0441\u0435\u0447\u0435\u0440\u044b, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 0-day \u0432 \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0447\u0442\u043e \u043e\u0431\u0443\u0441\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c  \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f EDR, \u0447\u0442\u043e \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u044e.\n\n\u0422\u0430\u043a, \u0432 2022 \u0433\u043e\u0434\u0443 Mandiant \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430, \u043a\u0430\u043a \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0441\u0443\u0431\u044a\u0435\u043a\u0442 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 UNC3886 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0443\u0442\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0434\u0432\u0435 0-day, \u0430\u0442\u0430\u043a\u0443\u044f \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e-\u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0443\u044e \u0431\u0430\u0437\u0443 (DIB), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u0410\u0437\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u043b\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortinet \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 VMware.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0433\u0440\u0443\u043f\u043f\u044b \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0441 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b (\u0441\u043e\u043a\u0435\u0442\u044b VMCI), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\u043c\u0438 \u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438.\u00a0UNC3886 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u00a0\u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Fortinet, \u0432\u043a\u043b\u044e\u0447\u0430\u044f THINCRUST, CASTLETAP, TABLEFLIP \u0438 REPTILE.\u00a0UNC3886 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2022-41328, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c Fortinet \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 VMware vCenter \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435\u00a0VIB \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 VIRTUALPITA \u0438 VIRTUALPIE \u043d\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u044b ESXi. UNC3886 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2023-20867 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 ESXi, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u0445 \u0412\u041c \u0431\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432.\n\n\u0414\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f 0-day (CVE-2023-2868) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Barracuda Email Security Gateway (ESG) \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c UNC4841 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0432 \u043f\u043e\u0438\u0441\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043b\u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441.\n\nUNC4841 \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0441\u043a\u0440\u044b\u0442\u044c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438.\u00a0\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0441\u0445\u0435\u043c\u0435 \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 UNC4841 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0432\u0438\u0434\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 TAR, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2023-2868 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\nUNC4841 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e (\u0432\u043a\u043b\u044e\u0447\u0430\u044f SALTWATER, SEASIDE,\u00a0SEASPY), \u0432\u0441\u0442\u0440\u043e\u0438\u043b \u043a\u043e\u0434 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u043c\u043e\u0434\u0443\u043b\u0438 Barracuda (\u0432\u043a\u043b\u044e\u0447\u0430\u044f SEASPRAY \u0438 SKIPJACK), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0441\u0430\u043c\u043e\u0437\u0430\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b SSL \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 C2.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Mandiant \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c IoT-\u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u0443\u043c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 C2 \u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 \u0436\u0435\u0440\u0442\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0448\u0442\u0430\u043c\u043c\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\u00a0\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u043a\u0442\u043e\u0440\u043e\u0432 - APT41, APT31, APT15, TEMP.Hex \u0438 Volt Typhoon.\n\n\u041c\u044b \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u043b\u0438\u0448\u044c \u0434\u0432\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u0438\u0437 \u0434\u043b\u0438\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u0434\u0435\u0442\u0430\u043b\u0435\u0439.", "url": "https://t.me/true_secator/4646"}, {"timestamp": "2023-07-22T08:37:01Z", "date_only": false, "value": "2023-07-22T08:37:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasraone_com/393", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "f2394ad3-8b2f-4ab8-89bd-0ec2ce39de2b", "content": "\u06af\u0631\u0648\u0647 UNC3886 \u06a9\u0647 \u062a\u0648\u0633\u0637 \u062f\u0648\u0644\u062a \u0686\u06cc\u0646 \u062d\u0645\u0627\u06cc\u062a \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0632 \u06cc\u06a9 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc zero-day \u062f\u0631 VMware (CVE-2023-20867) \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632\u060c \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648 PhotonOS \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631\u0628\u0627\u0631\u0647 \u0631\u0627\u0647\u0628\u0631\u062f\u0647\u0627\u06cc \u0646\u0641\u0648\u0630 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062f\u0631\u0628 \u0647\u0627\u06cc \u067e\u0634\u062a\u06cc\u060c \u0628\u06cc\u0634\u062a\u0631 \u0628\u062f\u0627\u0646\u06cc\u062f:\n\n\n https://thehackernews.com/2023/06/chinese-hackers-exploit-vmware-zero-day.html.", "url": "https://t.me/kasraone_com/393"}, {"timestamp": "2023-07-25T02:12:07Z", "date_only": false, "value": "2023-07-25T02:12:07Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2023:0323", "record": "ESSA-2023:0323", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-07-25T02:12:07Z", "date_only": false, "value": "2023-07-25T02:12:07Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 ESSA-2023:0323", "record": "ESSA-2023:0323", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-07-25T02:12:07Z", "date_only": false, "value": "2023-07-25T02:12:07Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 ESSA-2023:0323", "record": "ESSA-2023:0323", "field": "document.tracking.generator.date"}, {"timestamp": "2023-07-25T02:12:07Z", "date_only": false, "value": "2023-07-25T02:12:07Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 ESSA-2023:0323", "record": "ESSA-2023:0323", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-07-25T02:29:16Z", "date_only": false, "value": "2023-07-25T02:29:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-07-25T02:29:16Z", "date_only": false, "value": "2023-07-25T02:29:16Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-07-25T02:29:16Z", "date_only": false, "value": "2023-07-25T02:29:16Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "document.tracking.generator.date"}, {"timestamp": "2023-07-25T02:29:16Z", "date_only": false, "value": "2023-07-25T02:29:16Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-07-26T22:00:00Z", "date_only": false, "value": "2023-07-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-07-30T22:00:00Z", "date_only": false, "value": "2023-07-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-08-16T22:00:00Z", "date_only": false, "value": "2023-08-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2023-08-31T17:55:53Z", "date_only": false, "value": "2023-08-31T17:55:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:3504-1", "record": "SUSE-SU-2023:3504-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-31T17:55:53Z", "date_only": false, "value": "2023-08-31T17:55:53Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:3504-1", "record": "SUSE-SU-2023:3504-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-08-31T17:55:53Z", "date_only": false, "value": "2023-08-31T17:55:53Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:3504-1", "record": "SUSE-SU-2023:3504-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-08-31T17:55:53Z", "date_only": false, "value": "2023-08-31T17:55:53Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:3504-1", "record": "SUSE-SU-2023:3504-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-31T17:56:02Z", "date_only": false, "value": "2023-08-31T17:56:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:3505-1", "record": "SUSE-SU-2023:3505-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-31T17:56:02Z", "date_only": false, "value": "2023-08-31T17:56:02Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:3505-1", "record": "SUSE-SU-2023:3505-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-08-31T17:56:02Z", "date_only": false, "value": "2023-08-31T17:56:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:3505-1", "record": "SUSE-SU-2023:3505-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-08-31T17:56:02Z", "date_only": false, "value": "2023-08-31T17:56:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:3505-1", "record": "SUSE-SU-2023:3505-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-31T22:00:00Z", "date_only": false, "value": "2023-08-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2023-09-08T08:53:33Z", "date_only": false, "value": "2023-09-08T08:53:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-2", "record": "SUSE-SU-2023:2604-2", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-08T08:53:33Z", "date_only": false, "value": "2023-09-08T08:53:33Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-2", "record": "SUSE-SU-2023:2604-2", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-09-08T08:53:33Z", "date_only": false, "value": "2023-09-08T08:53:33Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-2", "record": "SUSE-SU-2023:2604-2", "field": "document.tracking.generator.date"}, {"timestamp": "2023-09-08T08:53:33Z", "date_only": false, "value": "2023-09-08T08:53:33Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-2", "record": "SUSE-SU-2023:2604-2", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-10T22:00:00Z", "date_only": false, "value": "2023-09-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2023-09-15T11:06:04Z", "date_only": false, "value": "2023-09-15T11:06:04Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1629", "record": "OESA-2023-1629", "field": "published"}, {"timestamp": "2023-09-15T11:06:04Z", "date_only": false, "value": "2023-09-15T11:06:04Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1630", "record": "OESA-2023-1630", "field": "published"}, {"timestamp": "2023-09-15T11:06:04Z", "date_only": false, "value": "2023-09-15T11:06:04Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1631", "record": "OESA-2023-1631", "field": "published"}, {"timestamp": "2023-10-10T22:00:00Z", "date_only": false, "value": "2023-10-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-10T22:00:00Z", "date_only": false, "value": "2023-10-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-10T22:00:00Z", "date_only": false, "value": "2023-10-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-13T00:00:00Z", "date_only": false, "value": "2023-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0839", "record": "CERTFR-2023-AVI-0839", "field": "last_revision_date"}, {"timestamp": "2023-10-13T00:00:00Z", "date_only": false, "value": "2023-10-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0839", "record": "CERTFR-2023-AVI-0839", "field": "initial_release_date"}, {"timestamp": "2023-10-13T00:00:00Z", "date_only": false, "value": "2023-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0839", "record": "CERTFR-2023-AVI-0839", "field": "revisions.0.revision_date"}, {"timestamp": "2023-10-16T17:06:26.274Z", "date_only": false, "value": "2023-10-16T17:06:26.274Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2023-20867", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-16T18:15:00Z", "date_only": false, "value": "2023-10-16T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-20867", "record": "GSD-2023-20867", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-07T18:52:38Z", "date_only": false, "value": "2023-11-07T18:52:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/w86JTkTMGHJBRCi1N2a0H2gagR4rhQLJNkShQ2jZR4NVTQ", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "3ffebf50-ec90-4aa7-af76-022f1155aafc"}, {"timestamp": "2023-12-13T01:20:29.348Z", "date_only": false, "value": "2023-12-13T01:20:29.348899Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20867", "record": "GSD-2023-20867", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-22T07:52:07Z", "date_only": false, "value": "2024-01-22T07:52:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/4009", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "46c2cf94-00de-4fb5-a7c4-31dcc5560b00", "content": "\u200b\u26a1\ufe0fCVE-2023-34048: zero-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u0439\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043b\u0435\u0442\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a UNC3886, \u0442\u0430\u0439\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f VMware vCenter Server \u0441 \u043a\u043e\u043d\u0446\u0430 2021 \u0433\u043e\u0434\u0430. \u042d\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Mandiant.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CVE-2023-34048 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 9.8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u043b\u043e\u043a\u0430 (Out-of-bounds Write), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u0442\u0438 vCenter Server \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. 24 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Broadcom.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 VMware \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u043e\u0442 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0433\u0434\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2023-34048 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\nUNC3886 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0430 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a \u0441\u0432\u043e\u0438\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VMware \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0438 Linux. \u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u043e\u0444\u0442\u0430 \u0431\u044b\u043b\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b VirtualPita \u0438 VirtualPie.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 Mandiant \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 UNC3886 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 VMware, \u0431\u044b\u043b\u0430 \u0438\u043c\u0435\u043d\u043d\u043e CVE-2023-34048. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 vCenter, \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0438\u0442\u044c \u0432\u0441\u0435 \u0445\u043e\u0441\u0442\u044b ESXi \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043a \u043d\u0438\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0451\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u00abvpxuser\u00bb \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0438\u0441\u044c \u043a \u043d\u0438\u043c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 VMware \u2014 CVE-2023-20867 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 3.9), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043c\u0435\u0436\u0434\u0443 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0445\u043e\u0441\u0442\u043e\u043c ESXi. \u041e\u0431 \u044d\u0442\u043e\u043c Mandiant \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u0432 \u0438\u044e\u043d\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c VMware vCenter Server \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b UNC3886 \u0442\u0430\u043a\u0436\u0435 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-41328 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6.5) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Fortinet FortiOS \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 THINCRUST \u0438 CASTLETAP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u042d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b \u0434\u043b\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4009"}, {"timestamp": "2024-05-14T22:00:00Z", "date_only": false, "value": "2024-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2024-05-14T22:00:00Z", "date_only": false, "value": "2024-05-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13022-1", "record": "OPENSUSE-SU-2024:13022-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13022-1", "record": "OPENSUSE-SU-2024:13022-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13022-1", "record": "OPENSUSE-SU-2024:13022-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13022-1", "record": "OPENSUSE-SU-2024:13022-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-02T09:21:33.524Z", "date_only": false, "value": "2024-08-02T09:21:33.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-20867", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:52:28.400Z", "date_only": false, "value": "2024-08-15T17:52:28.400+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1456", "record": "WID-SEC-W-2023-1456", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T22:00:00Z", "date_only": false, "value": "2024-08-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-12-24T20:34:40.611Z", "date_only": false, "value": "2024-12-24T20:34:40.611167Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971838", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "25967023-ffd0-4b92-bb76-bff4cc257b04", "url": "https://feedsin.space/feed/CISAKevBot/items/2971838"}, {"timestamp": "2025-02-04T19:00:03.914Z", "date_only": false, "value": "2025-02-04T19:00:03.914893Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20867", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-04T19:00:03.914Z", "date_only": false, "value": "2025-02-04T19:00:03.914893Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20867", "record": "FKIE_CVE-2023-20867", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:43Z", "date_only": false, "value": "2025-02-23T02:10:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "2c2c218b-f6b1-4794-976b-10ef96bdc663"}, {"timestamp": "2025-07-25T16:20:07Z", "date_only": false, "value": "2025-07-25T16:20:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackyourmom/12170", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "12c47829-1ca0-4abd-a5eb-85b7241135ab", "content": "\ud83d\udd0d \u0425\u0430\u043a\u0435\u0440\u0441\u044c\u043a\u0430 \u0433\u0440\u0443\u043f\u0430 Fire Ant, \u043f\u043e\u0432\u2019\u044f\u0437\u0430\u043d\u0430 \u0437 \u043a\u0438\u0442\u0430\u0439\u0441\u044c\u043a\u043e\u044e APT-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u044e UNC3886, \u0437\u043b\u0430\u043c\u0443\u0454 \u0441\u0435\u0440\u0435\u0434\u043e\u0432\u0438\u0449\u0430 VMware ESXi \u0442\u0430 vCenter, \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0447\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 CVE-2023-34048 \u0456 CVE-2023-20867 \ud83d\udcbb\n\n\u2328\ufe0f \u0412\u043e\u043d\u0438 \u043e\u0442\u0440\u0438\u043c\u0443\u044e\u0442\u044c \u043e\u0431\u043b\u0456\u043a\u043e\u0432\u0456 \u0434\u0430\u043d\u0456 vpxuser, \u043f\u043e\u0448\u0438\u0440\u044e\u044e\u0442\u044c\u0441\u044f \u043c\u0456\u0436 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u044e\u044e\u0442\u044c \u0431\u0435\u043a\u0434\u043e\u0440\u0438 \u0442\u0430 \u0456\u043c\u043f\u043b\u0430\u043d\u0442\u0438, \u0437\u043d\u0438\u0449\u0443\u044e\u0442\u044c \u043b\u043e\u0433\u0438 \u0456 \u043e\u0431\u0445\u043e\u0434\u044f\u0442\u044c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0456\u044e \u043c\u0435\u0440\u0435\u0436. \u0414\u043b\u044f \u0441\u0442\u0456\u0439\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0437\u0430\u0441\u0442\u043e\u0441\u043e\u0432\u0443\u044e\u0442\u044c V2Ray, \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u0456 \u0432\u0456\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0456 \u043c\u0430\u0448\u0438\u043d\u0438 \u0442\u0430 \u043f\u0456\u0434\u0440\u043e\u0431\u043b\u0435\u043d\u0456 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0456 \u0444\u0430\u0439\u043b\u0438 \u2699\ufe0f #cybernews", "url": "https://t.me/hackyourmom/12170"}, {"timestamp": "2025-08-06T22:00:00Z", "date_only": false, "value": "2025-08-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-08-06T22:00:00Z", "date_only": false, "value": "2025-08-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-07T08:49:26.099Z", "date_only": false, "value": "2025-08-07T08:49:26.099+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2625", "record": "WID-SEC-W-2023-2625", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-21T23:05:46.160Z", "date_only": false, "value": "2025-10-21T23:05:46.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-20867", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:46.160Z", "date_only": false, "value": "2025-10-21T23:05:46.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20867", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:44Z", "date_only": false, "value": "2025-10-22T00:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QM59-F7VH-3M2P", "record": "GHSA-QM59-F7VH-3M2P", "field": "modified"}, {"timestamp": "2025-11-21T18:41:56Z", "date_only": false, "value": "2025-11-21T18:41:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:41:56Z", "date_only": false, "value": "2025-11-21T18:41:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:41:56Z", "date_only": false, "value": "2025-11-21T18:41:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:3945", "record": "RHSA-2023:3945", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:3946", "record": "RHSA-2023:3946", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:3947", "record": "RHSA-2023:3947", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:41:57Z", "date_only": false, "value": "2025-11-21T18:41:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:3948", "record": "RHSA-2023:3948", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:41:58Z", "date_only": false, "value": "2025-11-21T18:41:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:41:58Z", "date_only": false, "value": "2025-11-21T18:41:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:41:58Z", "date_only": false, "value": "2025-11-21T18:41:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:41:58Z", "date_only": false, "value": "2025-11-21T18:41:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:41:58Z", "date_only": false, "value": "2025-11-21T18:41:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:3949", "record": "RHSA-2023:3949", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:41:58Z", "date_only": false, "value": "2025-11-21T18:41:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:3950", "record": "RHSA-2023:3950", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-02T12:26:56.795Z", "date_only": false, "value": "2026-02-02T12:26:56.795654Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a4a5f309-3149-4b71-aa53-5e75cd8d6d6d", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "2d957e68-22ce-45f1-aa66-8898deb6d3ff", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a4a5f309-3149-4b71-aa53-5e75cd8d6d6d"}, {"timestamp": "2026-02-02T12:26:56.795Z", "date_only": false, "value": "2026-02-02T12:26:56.795654Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a4a5f309-3149-4b71-aa53-5e75cd8d6d6d", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "7b7c0c26-f52c-480e-a496-f09491c86a03", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a4a5f309-3149-4b71-aa53-5e75cd8d6d6d"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-20867", "field": "timestamps.recorded_at", "uuid": "15f47a66-9863-493d-8acc-e9eee11fe4ff", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-22T07:45:12Z", "date_only": false, "value": "2026-04-22T07:45:12Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-20867", "record": "UBUNTU-CVE-2023-20867", "field": "modified"}, {"timestamp": "2026-06-17T05:31:03.380Z", "date_only": false, "value": "2026-06-17T05:31:03.380", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20867", "record": "FKIE_CVE-2023-20867", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:53.348Z", "date_only": false, "value": "2026-06-19T12:46:53.348952Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0be28a61-1ac4-4a37-be8b-b7b136f7ba39", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "530c1657-ba1e-4772-89a5-b8b88f3bf79e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0be28a61-1ac4-4a37-be8b-b7b136f7ba39"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-20867", "field": "timestamps.recorded_at", "uuid": "70598828-8514-4deb-a3c9-54d614d53be8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:07.816Z", "date_only": false, "value": "2026-06-23T11:14:07.816984Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/70598828-8514-4deb-a3c9-54d614d53be8", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "aa1bf3f9-9c8a-48ef-8f83-babaa691ef9c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/70598828-8514-4deb-a3c9-54d614d53be8"}, {"timestamp": "2026-06-23T14:05:42.146Z", "date_only": false, "value": "2026-06-23T14:05:42.146296Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6171be60-7107-435f-b922-b210619c1709", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "f0437f6a-eca3-4ae7-a6b0-e4a7117711cb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6171be60-7107-435f-b922-b210619c1709"}, {"timestamp": "2026-07-06T11:00:05.813Z", "date_only": false, "value": "2026-07-06T11:00:05.813844Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/257", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "0ace12e1-13dd-4745-adee-cf0320cddf83", "url": "https://t.me/ZerodayAlert/257"}, {"timestamp": "2026-07-07T00:00:10.515Z", "date_only": false, "value": "2026-07-07T00:00:10.515399Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/257", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "8e27cc12-f060-4cc8-9a0c-7ed185f9e07b", "url": "https://t.me/ZerodayAlert/257"}, {"timestamp": "2026-07-11T23:00:05.203Z", "date_only": false, "value": "2026-07-11T23:00:05.203136Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/257", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "14700b75-bb4a-4b6e-ad41-66a09f922f34", "url": "https://t.me/ZerodayAlert/257"}, {"timestamp": "2026-07-12T00:00:19.696Z", "date_only": false, "value": "2026-07-12T00:00:19.696229Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/257", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "bc3b7a14-e46b-474f-abdc-a9846621aaca", "url": "https://t.me/ZerodayAlert/257"}, {"timestamp": "2026-07-20T21:00:05.254Z", "date_only": false, "value": "2026-07-20T21:00:05.254124Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/infobase999/300", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "17e9fd5f-e802-44f7-9828-882344f71088", "url": "https://t.me/infobase999/300"}, {"timestamp": "2026-07-21T00:00:10.741Z", "date_only": false, "value": "2026-07-21T00:00:10.741362Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/infobase999/300", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "06b45146-b7ef-43c4-9f01-7fd60c73960a", "url": "https://t.me/infobase999/300"}, {"timestamp": "2026-07-22T00:00:34.512Z", "date_only": false, "value": "2026-07-22T00:00:34.512314Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infobase999/300", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "7062efad-6779-422c-84b3-e759cef452a6", "url": "https://t.me/infobase999/300"}, {"timestamp": "2026-07-26T02:02:25.555Z", "date_only": false, "value": "2026-07-26T02:02:25.555531Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1627", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "8fd73b5d-9983-479f-a743-fe59ee881812", "url": "https://t.me/EchelonEyes/1627"}, {"timestamp": "2026-07-27T00:01:01.067Z", "date_only": false, "value": "2026-07-27T00:01:01.067665Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1627", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "119b5ff7-8546-46b6-99b3-23355a60c69c", "url": "https://t.me/EchelonEyes/1627"}, {"timestamp": "2026-07-28T00:00:10.729Z", "date_only": false, "value": "2026-07-28T00:00:10.729048Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1627", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "e90fb9a5-5008-4ae9-972b-0f375233104b", "url": "https://t.me/EchelonEyes/1627"}, {"timestamp": "2026-08-06T11:06:04Z", "date_only": false, "value": "2026-08-06T11:06:04Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1629", "record": "OESA-2023-1629", "field": "modified"}, {"timestamp": "2026-08-06T11:06:04Z", "date_only": false, "value": "2026-08-06T11:06:04Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1630", "record": "OESA-2023-1630", "field": "modified"}, {"timestamp": "2026-08-06T11:06:04Z", "date_only": false, "value": "2026-08-06T11:06:04Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1631", "record": "OESA-2023-1631", "field": "modified"}, {"timestamp": "2026-08-28T13:00:05.190Z", "date_only": false, "value": "2026-08-28T13:00:05.190359Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jMgzP3yqhbR8MRImXXhBNonD07xG9Cnm07GXK5NZq9tuyRU", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "17610a65-cf82-4291-9c4d-d6eab8a14c71"}, {"timestamp": "2026-08-29T00:00:10.162Z", "date_only": false, "value": "2026-08-29T00:00:10.162243Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jMgzP3yqhbR8MRImXXhBNonD07xG9Cnm07GXK5NZq9tuyRU", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "bf293b3f-b08a-493b-89df-3f1ad449ec26"}, {"timestamp": "2026-09-01T17:00:08.344Z", "date_only": false, "value": "2026-09-01T17:00:08.344623Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/778", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "8be88503-f34c-4482-8160-2c1c76e1342c", "url": "https://t.me/Hackme_news/778"}, {"timestamp": "2026-09-01T20:00:57.147Z", "date_only": false, "value": "2026-09-01T20:00:57.147756Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/105977", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "a12b492a-fae1-4fd1-ab82-7a6d42fee452", "url": "https://t.me/hacking_Attack/105977"}, {"timestamp": "2026-09-04T13:00:04.102Z", "date_only": false, "value": "2026-09-04T13:00:04.102369Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/105977", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "740d0d52-607e-429a-b3bc-bd03ac206fb8", "url": "https://t.me/hacking_Attack/105977"}, {"timestamp": "2026-09-09T00:00:10.143Z", "date_only": false, "value": "2026-09-09T00:00:10.143316Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/778", "record": "CVE-2023-20867", "field": "creation_timestamp", "uuid": "22150ab3-c8d9-48da-b32d-313ffc4d717e", "url": "https://t.me/Hackme_news/778"}, {"timestamp": "2026-09-20T10:50:51Z", "date_only": false, "value": "2026-09-20T10:50:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2023:0323", "record": "ESSA-2023:0323", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T10:50:51Z", "date_only": false, "value": "2026-09-20T10:50:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 ESSA-2023:0323", "record": "ESSA-2023:0323", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T10:50:52Z", "date_only": false, "value": "2026-09-20T10:50:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:29:47Z", "date_only": false, "value": "2026-09-20T11:29:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:3944", "record": "RHSA-2023:3944", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:29:47Z", "date_only": false, "value": "2026-09-20T11:29:47Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2023:3944", "record": "RHSA-2023:3944", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T15:08:03Z", "date_only": false, "value": "2026-09-20T15:08:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2530-1", "record": "SUSE-SU-2023:2530-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T15:08:03Z", "date_only": false, "value": "2026-09-20T15:08:03Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2530-1", "record": "SUSE-SU-2023:2530-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T15:08:46Z", "date_only": false, "value": "2026-09-20T15:08:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-2", "record": "SUSE-SU-2023:2604-2", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T15:08:46Z", "date_only": false, "value": "2026-09-20T15:08:46Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2604-2", "record": "SUSE-SU-2023:2604-2", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T15:18:45Z", "date_only": false, "value": "2026-09-20T15:18:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:3504-1", "record": "SUSE-SU-2023:3504-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T15:18:45Z", "date_only": false, "value": "2026-09-20T15:18:45Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:3504-1", "record": "SUSE-SU-2023:3504-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T15:18:47Z", "date_only": false, "value": "2026-09-20T15:18:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:3505-1", "record": "SUSE-SU-2023:3505-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T15:18:47Z", "date_only": false, "value": "2026-09-20T15:18:47Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:3505-1", "record": "SUSE-SU-2023:3505-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:51:37Z", "date_only": false, "value": "2026-09-20T20:51:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13022-1", "record": "OPENSUSE-SU-2024:13022-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:51:37Z", "date_only": false, "value": "2026-09-20T20:51:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13022-1", "record": "OPENSUSE-SU-2024:13022-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:21:24Z", "date_only": false, "value": "2026-10-11T11:21:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:21:24Z", "date_only": false, "value": "2026-10-11T11:21:24Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 ESSA-2023:0324", "record": "ESSA-2023:0324", "field": "document.tracking.current_release_date"}]}