{"metadata": {"vulnerability": "CVE-2023-28771", "count": 198, "kinds": {"milestone": 5, "sighting": 147, "kev": 20, "other": 26}}, "data": [{"timestamp": "2023-03-23T00:00:00Z", "date_only": false, "value": "2023-03-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-28771", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-24T00:00:00Z", "date_only": false, "value": "2023-04-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202304-2073", "record": "VAR-202304-2073", "field": "sources_release_date.data.2.date"}, {"timestamp": "2023-04-24T22:00:00Z", "date_only": false, "value": "2023-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-04-24T22:00:00Z", "date_only": false, "value": "2023-04-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-04-24T22:00:00Z", "date_only": false, "value": "2023-04-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-04-25T00:00:00Z", "date_only": false, "value": "2023-04-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202304-2073", "record": "VAR-202304-2073", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-04-25T00:00:00Z", "date_only": false, "value": "2023-04-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28771", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-04-25T02:15:00Z", "date_only": false, "value": "2023-04-25T02:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-28771", "record": "GSD-2023-28771", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-04-25T02:15:08Z", "date_only": false, "value": "2023-04-25T02:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3XVP-8QG2-X43W", "record": "GHSA-3XVP-8QG2-X43W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-04-25T02:15:08.743Z", "date_only": false, "value": "2023-04-25T02:15:08.743000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202304-2073", "record": "VAR-202304-2073", "field": "sources_release_date.data.1.date"}, {"timestamp": "2023-04-25T02:15:08.743Z", "date_only": false, "value": "2023-04-25T02:15:08.743", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28771", "record": "FKIE_CVE-2023-28771", "field": "published"}, {"timestamp": "2023-04-25T03:30:15Z", "date_only": false, "value": "2023-04-25T03:30:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3XVP-8QG2-X43W", "record": "GHSA-3XVP-8QG2-X43W", "field": "published"}, {"timestamp": "2023-04-25T07:24:17Z", "date_only": false, "value": "2023-04-25T07:24:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/62787", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8d31a82e-4a88-4ec2-9473-3ab122383cb6", "content": "\u203c CVE-2023-28771 \u203c\n\nImproper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/62787"}, {"timestamp": "2023-04-28T13:46:57Z", "date_only": false, "value": "2023-04-28T13:46:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3294", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "d590d8b5-69f0-4ee5-9ec5-da066362665d", "content": "\ud83d\udd12 Alert: Zyxel releases critical security patches for firewall devices. CVE-2023-28771 could allow remote code execution on affected systems.\n\nRead details: https://thehackernews.com/2023/04/zyxel-firewall-devices-vulnerable-to.html\n\nATP, USG FLEX, VPN, and ZyWALL/USG devices are impacted.", "url": "https://t.me/thehackernews/3294"}, {"timestamp": "2023-04-28T15:59:01Z", "date_only": false, "value": "2023-04-28T15:59:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/124", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "42ad67ab-44dd-4a26-b725-79f6a8d5c876", "content": "Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks \u2014 Patch Now\nhttps://thehackernews.com/2023/04/zyxel-firewall-devices-vulnerable-to.html\n\nNetworking equipment maker Zyxel has released patches for a critical security flaw in its firewall devices that could be exploited to achieve remote code execution on affected systems.\nThe issue, tracked as\u00a0CVE-2023-28771, is rated 9.8 on the CVSS scoring system. Researchers from TRAPA Security have been credited with reporting the flaw.\n\"Improper error message handling in some firewall versions", "url": "https://t.me/KomunitiSiber/124"}, {"timestamp": "2023-04-28T16:05:51Z", "date_only": false, "value": "2023-04-28T16:05:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pRORtQvVSkoBwtsAkT_d5Ggws1o-Da5P_9jXnQXkGHWBkQ", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "1811372b-7b3c-4861-a811-438751b45608"}, {"timestamp": "2023-05-20T23:50:49Z", "date_only": false, "value": "2023-05-20T23:50:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvinclub1/209", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "3448c5a2-f39a-44d7-891f-e3efa39e56ac", "content": "https://attackerkb.com/topics/N3i8dxpFKS/cve-2023-28771/rapid7-analysis", "url": "https://t.me/arvinclub1/209"}, {"timestamp": "2023-05-22T14:07:52Z", "date_only": false, "value": "2023-05-22T14:07:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/113337", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "2d6481ea-ad02-4419-9614-b0c2d10862be", "content": "Vulnerability in Zyxel firewalls may soon be widely exploited (CVE-2023-28771)\n\nhttps://ift.tt/rOHqSoR", "url": "https://t.me/ctinow/113337"}, {"timestamp": "2023-05-22T22:00:00Z", "date_only": false, "value": "2023-05-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-05-23T02:52:40Z", "date_only": false, "value": "2023-05-23T02:52:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4400", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e735e22f-6b30-4077-afb2-e7bfcabed993", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC for CVE-2023-28771 based on Rapid7's excellent writeup\nURL\uff1ahttps://github.com/BenHays142/CVE-2023-28771-PoC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4400"}, {"timestamp": "2023-05-25T18:12:41Z", "date_only": false, "value": "2023-05-25T18:12:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11025", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "89d0b783-5707-4b50-a6f2-2ef604becc37", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2023-28771\n\nhttps://attackerkb.com/topics/N3i8dxpFKS/cve-2023-28771/rapid7-analysis", "url": "https://t.me/cKure/11025"}, {"timestamp": "2023-05-26T13:37:56Z", "date_only": false, "value": "2023-05-26T13:37:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/50005", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "027eea7d-8dad-4890-acb4-54196e8dd37d", "content": "Zyxel Firewalls Hacked by Mirai Botnet\nhttps://www.securityweek.com/zyxel-firewalls-hacked-by-mirai-botnet-via-recently-patched-vulnerability/\n\nA Mirai botnet has been exploiting a recently patched vulnerability tracked as CVE-2023-28771 to hack many Zyxel firewalls. \nThe post Zyxel Firewalls Hacked by Mirai Botnet (https://www.securityweek.com/zyxel-firewalls-hacked-by-mirai-botnet-via-recently-patched-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/50005"}, {"timestamp": "2023-05-26T18:40:05Z", "date_only": false, "value": "2023-05-26T18:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4429", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "014bb35a-6fc4-4727-8d66-ee1542b842b1", "content": "Zyxel \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 firewall \u0438 VPN.\n\n\u041a\u0430\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c, \u043e\u0431\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0430.\n\n\u0412\u0441\u0435 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a DoS \u0438 RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u041f\u0440\u0438\u0447\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Zyxel \u043a\u0430\u043a \u0440\u0430\u0437 \u0442\u0430\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 CVE-2023-33009 \u0438 CVE-2023-33010 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0443 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432 9,8 \u0431\u0430\u043b\u043b\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u043c\u0438: ATP \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 ZLD V4.32 \u0434\u043e V5.36, USG FLEX \u043e\u0442 ZLD V4.50 \u0434\u043e V5.36, USG FLEX50 (W) / USG20 (W) - \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 VPN \u0432\u0435\u0440\u0441\u0438\u0439 \u043e\u0442 ZLD V4.25 \u0434\u043e V5.36, VPN \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 ZLD V4.30 \u0434\u043e V5.36 \u0438 ZyWALL / USG \u043e\u0442 ZLD V4.25 \u0434\u043e V4.73.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0432\u043e\u0435\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438 \u043c\u0430\u043b\u043e\u0433\u043e \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0440\u0430\u0431\u043e\u0442\u043d\u0438\u043a\u0430\u043c, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0442\u0430\u043a\u0438\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0434\u0430\u0431\u044b \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432. \n\n\u0412\u0435\u0434\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Zyxel (CVE-2023-28771), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435,\u00a0\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c Mirai DDoS.\u00a0\u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0443\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 PoC \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438.", "url": "https://t.me/true_secator/4429"}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28771", "field": "timestamps.asserted_at", "uuid": "aa637b60-4c92-4960-9d26-4148ff2a4a3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-28771", "field": "timestamps.asserted_at", "uuid": "4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": true, "value": "2023-05-31", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28771", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-28771", "field": "evidence.0.details.added_date", "uuid": "4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": true, "value": "2023-05-31", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-28771", "field": "evidence.0.details.date_added", "uuid": "aa637b60-4c92-4960-9d26-4148ff2a4a3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-28771", "field": "timestamps.first_seen_at", "uuid": "aa637b60-4c92-4960-9d26-4148ff2a4a3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-28771", "field": "timestamps.first_seen_at", "uuid": "4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-28771", "field": "status.status_updated_at", "uuid": "aa637b60-4c92-4960-9d26-4148ff2a4a3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-28771", "field": "status.status_updated_at", "uuid": "4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-31T00:00:00Z", "date_only": false, "value": "2023-05-31T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28771", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-05-31T14:27:34Z", "date_only": false, "value": "2023-05-31T14:27:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/9e6da5c3-d33f-4010-b5c3-ced196d65402", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8ab03fe5-25ca-429d-bdb6-ac8914ab735f"}, {"timestamp": "2023-05-31T21:05:16Z", "date_only": false, "value": "2023-05-31T21:05:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/16836", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "0102716a-fc10-47ac-abcd-25d2a14a1334", "content": "\u200aHackers exploit critical Zyxel firewall flaw in ongoing attacks\n\nHackers are performing widespread exploitation of a critical-severity command injection flaw in Zyxel networking devices, tracked as CVE-2023-28771, to install malware. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-zyxel-firewall-flaw-in-ongoing-attacks/", "url": "https://t.me/BleepingComputer/16836"}, {"timestamp": "2023-06-01T04:51:03Z", "date_only": false, "value": "2023-06-01T04:51:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/16843", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "b994bfcf-2113-40bd-922f-af1d5edd6244", "content": "Latest news and stories from BleepingComputer.com\nHackers exploit critical Zyxel firewall flaw in ongoing attacks\n\nHackers are performing widespread exploitation of a critical-severity command injection flaw in Zyxel networking devices, tracked as CVE-2023-28771, to install malware. [...]", "url": "https://t.me/BleepingComputer/16843"}, {"timestamp": "2023-06-01T07:01:30Z", "date_only": false, "value": "2023-06-01T07:01:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3427", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5fbb9f10-6348-415b-871b-00c3140ba9e4", "content": "U.S. Cybersecurity Agency raises alarm over critical flaw in Zyxel gear! Active exploitation detected. Learn more about the CVE-2023-28771 vulnerability and its potential risks. \n \nRead: https://thehackernews.com/2023/06/active-mirai-botnet-variant-exploiting.html", "url": "https://t.me/thehackernews/3427"}, {"timestamp": "2023-06-01T07:14:54Z", "date_only": false, "value": "2023-06-01T07:14:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/292", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "751ef247-de59-4d2b-b1ea-c0b769ac3fe8", "content": "Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks\nhttps://thehackernews.com/2023/06/active-mirai-botnet-variant-exploiting.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has\u00a0added\u00a0a recently patched critical security flaw in Zyxel gear to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nTracked as\u00a0CVE-2023-28771\u00a0(CVSS score: 9.8), the issue relates to a\u00a0command injection flaw\u00a0impacting different firewall models that could enable an unauthenticated attacker", "url": "https://t.me/KomunitiSiber/292"}, {"timestamp": "2023-06-01T08:14:17Z", "date_only": false, "value": "2023-06-01T08:14:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/PANPDXSSji5c8wNeboF648ctTt_PGhekPqWGCuQ0-hLzKg", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "2ad97d85-607c-4d9a-aff5-4e28d8631281"}, {"timestamp": "2023-06-01T13:47:35Z", "date_only": false, "value": "2023-06-01T13:47:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/jokerplstaeen/17573", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "ca7794c6-43ab-4a20-8aa5-74f2350ddc42", "content": "\u200f\u0627\u0630\u0627 \u0643\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 \u062c\u062f\u0627\u0631 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u0646 \u0634\u0631\u0643\u0629 Zyxel \u0641\u0647\u0646\u0627\u0643 \u062b\u063a\u0631\u0629 \u0627\u0645\u0646\u064a\u0629 \u062d\u0631\u062c\u0629 \u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u062a\u062b\u0628\u064a\u062a \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0636\u0627\u0631\u0629 \u062a\u062d\u062a \u0631\u0642\u0645 CVE-2023-28771 \u0642\u0645 \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0628\u0634\u0643\u0644 \u0645\u0628\u0627\u0634\u0631 \n\u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u200e#cybersecurity", "url": "https://t.me/jokerplstaeen/17573"}, {"timestamp": "2023-06-01T22:00:00Z", "date_only": false, "value": "2023-06-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-06-01T22:00:00Z", "date_only": false, "value": "2023-06-01T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-06-02T15:38:59Z", "date_only": false, "value": "2023-06-02T15:38:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14143", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5083a812-0f7f-4d6a-be46-9f01d0a23523", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-28771 \u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 Zyxel \u0443\u0436\u0435 \u0432\u0437\u044f\u0442\u0430 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u0435\u0436\u0438\u043c \u0431\u0430\u0433\u043e\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Mirai-\u0431\u043e\u0442\u043d\u0435\u0442.\n\nhttps://xakep.ru/2023/06/02/zyxel-mirai/", "url": "https://t.me/xakep_ru/14143"}, {"timestamp": "2023-06-07T15:59:32Z", "date_only": false, "value": "2023-06-07T15:59:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/alexredsec/357", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "736a886b-0c47-4eab-864e-7052c396040a", "content": "\u0423\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \"\u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u043e\u0432\u044b\u0435\" \u0438\u0442\u043e\u0433\u0438 \u0437\u0430 2023 \u0433\u043e\u0434 - \u0432\u0440\u0435\u043c\u044f \u043b\u0435\u0442\u0438\u0442\ud83d\ude05\n\u0412\u043e\u0442 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438\u0437 PRIOn \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 \u043f\u043e \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0432 \u044d\u0442\u043e \u0433\u043e\u0434\u0443 - \u0438\u0445 \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0438 44 \u0448\u0442\u0443\u043a\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \"\u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435\" \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 PRIOn:\n\u27a1\ufe0fCVE-2023-23397 [Microsoft Outlook] - \u0441\u0430\u043c\u0430\u044f \ud83d\udd25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442. \u0410\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 APT28.\n\u27a1\ufe0fCVE-2023-27350  [PaperCut NG] - \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 ransomware-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438.\n\u27a1\ufe0fCVE-2023-28771 [Zyxel] \u0438 CVE-2023-1389 [TP-Link] - \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u044f\u0434\u044b \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Mirai\ud83d\ude08\n\u27a1\ufe0fCVE-2023-0669 [Fortra GoAnywhere MFT] - \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Clop.\n\u27a1\ufe0fCVE-2023-2868 [Barracuda ESG] - \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u043e\u043c\u0443 \u043d\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u27a1\ufe0fCVE-2023-24880 [Microsoft Windows SmartScreen] - \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f ransomware-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Magniber.\n\u27a1\ufe0fCVE-2023-28252 [Microsoft Windows 10] - \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f ransomware-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Nokoyama.\n\u27a1\ufe0fCVE-2023-27532 [Veeam Backup] - \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 FIN7.\n\u27a1\ufe0fCVE-2023-34362 [MOVEit Transfer] - \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438.\n\n\u041d\u0443 \u0438 \u0422\u041e\u041f-3 \u0442\u0438\u043f\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\u27a1\ufe0fPrivilege Escalation\n\u27a1\ufe0fSecurity Feature Bypass\n\u27a1\ufe0fCommand Injection", "url": "https://t.me/alexredsec/357"}, {"timestamp": "2023-06-09T00:00:00Z", "date_only": false, "value": "2023-06-09T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zyxel", "record": "CVE-2023-28771", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-09T13:18:52Z", "date_only": false, "value": "2023-06-09T13:18:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/zyxel_ike_decoder_rce_cve_2023_28771.rb", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "d087ce30-6069-4bed-9932-4594e61ea4e6", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/zyxel_ike_decoder_rce_cve_2023_28771.rb"}, {"timestamp": "2023-06-09T18:12:00Z", "date_only": false, "value": "2023-06-09T18:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-28771", "record": "GSD-2023-28771", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-09T18:12:04.557Z", "date_only": false, "value": "2023-06-09T18:12:04.557000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202304-2073", "record": "VAR-202304-2073", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-06-12T00:00:00Z", "date_only": false, "value": "2023-06-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202304-2073", "record": "VAR-202304-2073", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e8c12e99-375c-4ee6-95a1-5dbcee0ff2c9"}, {"timestamp": "2023-06-21T00:00:00Z", "date_only": true, "value": "2023-06-21", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-28771", "field": "evidence.0.details.due_date", "uuid": "aa637b60-4c92-4960-9d26-4148ff2a4a3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-07-21T11:07:35Z", "date_only": false, "value": "2023-07-21T11:07:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3629", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "855d088c-6271-48f2-a5d9-16e51e23bea1", "content": "DDoS botnets are exploiting the CVE-2023-28771 vulnerability in Zyxel devices to gain remote control and launch devastating attacks. \n \nLearn more: https://thehackernews.com/2023/07/ddos-botnets-hijacking-zyxel-devices-to.html", "url": "https://t.me/thehackernews/3629"}, {"timestamp": "2023-07-21T11:12:50Z", "date_only": false, "value": "2023-07-21T11:12:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3628", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "49bf74d4-06c9-4513-b42d-604af6d04eb7", "content": "DDoS botnets are exploiting the CVE-2023-28771 vulnerability in Zyxel devices to gain remote control and launch devastating attacks. \n \nLearn more: https://thehackernews.com/2023/07/ddos-botnets-hijacking-zyxel-devices-to.html", "url": "https://t.me/thehackernews/3628"}, {"timestamp": "2023-07-21T14:22:25Z", "date_only": false, "value": "2023-07-21T14:22:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/UXU1rEVKI86RLF8c41Yg8xU6mlBNBAfryGuo7QKDqntsNmU", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "9133e7da-f17f-425f-a8c1-83c4578b34b9"}, {"timestamp": "2023-07-21T20:37:56Z", "date_only": false, "value": "2023-07-21T20:37:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14399", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e228d260-f6c7-46e9-b49c-17ae97e3178f", "content": "\u0421\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e DDoS-\u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Zyxel\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fortinet, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0442\u0440\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-28771, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Zyxel. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0443\u044e \u0410\u043c\u0435\u0440\u0438\u043a\u0443, \u0421\u0435\u0432\u0435\u0440\u043d\u0443\u044e \u0410\u043c\u0435\u0440\u0438\u043a\u0443, \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u0443\u044e \u0410\u0437\u0438\u044e \u0438 \u042e\u0436\u043d\u0443\u044e \u0410\u0437\u0438\u044e.\n\nhttps://xakep.ru/2023/07/21/zyxel-atacks/", "url": "https://t.me/xakep_ru/14399"}, {"timestamp": "2023-07-24T12:45:03Z", "date_only": false, "value": "2023-07-24T12:45:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/2928", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e215d421-b820-4c15-9981-4b8985e4c74a", "content": "\u200b\u26a1\ufe0f\u0417\u0430\u0431\u0438\u043b\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c: \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Zyxel \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u0441\u0442\u0430\u0440\u043e\u043c \u041f\u041e \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c.\n\n\ud83d\udcac \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Zyxel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u0441\u0442\u0430\u043b\u0438 \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-28771 , \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 IKEv2. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u044b Zyxel \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. 25 \u0430\u043f\u0440\u0435\u043b\u044f Zyxel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Shadowserver, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0443\u0433\u0440\u043e\u0437\u044b \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 , \u0447\u0442\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Zyxel \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f. Shadowserver \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u043c\u0438.\n\n\u0410 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 , \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0440\u0435\u0437\u043a\u043e\u043c \u0440\u043e\u0441\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 Mirai \u2014 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 Mirai \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0435 DDoS-\u0430\u0442\u0430\u043a\u0438.\n\n\u041c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c, PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Zyxel \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0435\u0449\u0451 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043a\u0430\u043a-\u0442\u043e \u043f\u043e\u0434\u0441\u0442\u0435\u0433\u043d\u0443\u0442\u044c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041d\u043e, \u043f\u043e\u0445\u043e\u0436\u0435, \u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u043b\u0430\u043d \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b, \u0441\u0443\u0434\u044f \u043f\u043e \u0442\u043e\u043c\u0443 \u0433\u0440\u043e\u043c\u0430\u0434\u043d\u043e\u043c\u0443 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u00ab\u0421 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0434\u0443\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u0410\u043d\u0430\u043b\u0438\u0437, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0439 FortiGuard Labs, \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a \u0441 \u043c\u0430\u044f. \u041c\u044b \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Dark.IoT, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Mirai, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u043e\u0439 \u0431\u043e\u0442\u043d\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b DDoS-\u0430\u0442\u0430\u043a\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Fortinet \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0430\u0440\u0430 \u041b\u0438\u043d.\n\n\u041b\u0438\u043d \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 CVE-2023-28771, \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 Internet Key Exchange, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Zyxel. \u0410\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a curl \u0438 wget, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 Dark.IoT, \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 Rapperbot \u0438 Katana.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041d\u043e \u0443\u0432\u044b, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u043c\u0430\u043b\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043b\u043e.\n\n\u00ab\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u0440\u0438\u0441\u043a\u0430\u043c. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c, \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u0432 \u0441\u0432\u043e\u0439 \u0431\u043e\u0442\u043d\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a DDoS\u00bb, \u2014 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u041b\u0438\u043d.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442 Fortinet \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u044b \u0438 \u0443\u0434\u0435\u043b\u044f\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e, \u0432 \u0438\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0441\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044f\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/2928"}, {"timestamp": "2023-08-01T14:03:59Z", "date_only": false, "value": "2023-08-01T14:03:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/JerusalemElectronicArmy/510", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e61941b3-bd8d-4ea2-9355-126cb6a49a87", "content": "#\u0627\u062e\u0628\u0627\u0631_\u0633\u0627\u064a\u0628\u0631 \n\ud83d\udd35 \u0627\u0644\u062e\u0628\u0631: DDoS Botnets Hijacking Zyxel Devices to Launch Devastating Attacks\n \ud83d\udd39\u0627\u0644\u0648\u0635\u0641: \u0643\u0634\u0641 \u062a\u0642\u0631\u064a\u0631 \"Fortinet\" \u0644\u0644\u0628\u0627\u062d\u062b\u0629 \u0643\u0627\u0631\u0627 \u0644\u064a\u0646 \u0623\u0646\u0647 \u062a\u0645\u062a \u0645\u0644\u0627\u062d\u0638\u0629 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0631\u0648\u0628\u0648\u062a\u0627\u062a \u0627\u0644\u0645\u0648\u0632\u0639\u0629 \u0644\u0631\u0641\u0636 \u0627\u0644\u062e\u062f\u0645\u0629 (DDoS) \u0648\u0647\u064a \u062a\u0633\u062a\u063a\u0644 \u0639\u064a\u0628\u064b\u0627 \u062e\u0637\u064a\u0631\u064b\u0627 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 Zyxel \u0627\u0644\u062a\u064a \u0638\u0647\u0631\u062a \u0641\u064a \u0623\u0628\u0631\u064a\u0644 2023 \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0643\u0645 \u0639\u0646 \u0628\u0639\u062f \u0641\u064a \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0639\u0631\u0636\u0629 \u0644\u0644\u062e\u0637\u0631.\n\u0648\u0642\u0627\u0644\u062a \u0643\u0627\u0631\u0627 \u0644\u064a\u0646\u060c \u0627\u0644\u0628\u0627\u062d\u062b\u0629 \u0641\u064a Fortinet FortiGuard Labs: \u00ab\u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0627\u0633\u062a\u064a\u0644\u0627\u0621 \u0639\u0644\u0649 \u062d\u0631\u0643\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629\u060c \u062a\u0645 \u062a\u062d\u062f\u064a\u062f \u0639\u0646\u0648\u0627\u0646 IP \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u060c \u0648\u062a\u0645 \u062a\u062d\u062f\u064a\u062f \u0623\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0643\u0627\u0646\u062a \u062a\u062d\u062f\u062b \u0641\u064a \u0645\u0646\u0627\u0637\u0642 \u0645\u062a\u0639\u062f\u062f\u0629\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0623\u0645\u0631\u064a\u0643\u0627 \u0627\u0644\u0648\u0633\u0637\u0649 \u0648\u0623\u0645\u0631\u064a\u0643\u0627 \u0627\u0644\u0634\u0645\u0627\u0644\u064a\u0629 \u0648\u0634\u0631\u0642 \u0622\u0633\u064a\u0627 \u0648\u062c\u0646\u0648\u0628 \u0622\u0633\u064a\u0627\u00bb.. \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629  CVE-2023-28771 (\u062f\u0631\u062c\u0629 CVSS: 9.8)\u060c \u062a\u062a\u0645\u062b\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u062d\u0642\u0646 \u0623\u0645\u0631 \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0646\u0645\u0627\u0630\u062c \u062c\u062f\u0627\u0631 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0633\u0645\u062d \u0644\u0634\u062e\u0635 \u063a\u064a\u0631 \u0645\u0635\u0631\u062d \u0628\u0647 \u0628\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645\u0629 \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627 \u0625\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641.\n\u0641\u064a \u0627\u0644\u0634\u0647\u0631 \u0627\u0644\u0645\u0627\u0636\u064a\u060c \u062d\u0630\u0631\u062a \u0645\u0624\u0633\u0633\u0629 Shadowserver Foundation \u0645\u0646 \u0623\u0646 \u0627\u0644\u062e\u0644\u0644 \u00ab\u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647 \u0628\u0646\u0634\u0627\u0637 \u0644\u0628\u0646\u0627\u0621 \u0634\u0628\u0643\u0629 \u0628\u0648\u062a \u062a\u0634\u0628\u0647 Mirai\u00bb \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644 \u0645\u0646\u0630 26 \u0645\u0627\u064a\u0648 2023\u060c \u0648\u0647\u0648 \u0645\u0624\u0634\u0631 \u0639\u0644\u0649 \u0643\u064a\u0641\u064a\u0629 \u062a\u0632\u0627\u064a\u062f \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u062a\u064a \u062a\u0639\u0645\u0644 \u0628\u0628\u0631\u0627\u0645\u062c \u063a\u064a\u0631 \u0645\u0637\u0627\u0628\u0642\u0629.\n#\u062c\u064a\u0634_\u0627\u0644\u0642\u062f\u0633_\u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a", "url": "https://t.me/JerusalemElectronicArmy/510"}, {"timestamp": "2023-08-08T14:30:51Z", "date_only": false, "value": "2023-08-08T14:30:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/800", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "cfe4681c-1710-4c29-8c20-384e55c555c3", "content": "CVE-2023-28771 : Zyxel ZyWALL/USG - Unauthenticated command injection\nPOC : https://attackerkb.com/topics/N3i8dxpFKS/cve-2023-28771/rapid7-analysis", "url": "https://t.me/MrVGunz/800"}, {"timestamp": "2023-10-13T16:00:48Z", "date_only": false, "value": "2023-10-13T16:00:48+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-28771", "field": "timestamps.asserted_at", "uuid": "ac2e1f78-4210-4656-8b08-d376f87cce99", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-13T16:00:48Z", "date_only": false, "value": "2023-10-13T16:00:48+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-28771", "field": "timestamps.first_seen_at", "uuid": "ac2e1f78-4210-4656-8b08-d376f87cce99", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-13T18:11:01Z", "date_only": false, "value": "2023-11-13T18:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b4a98411-68c8-46bf-aff8-1659046646b3", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "1ef1a3ad-a8b6-4d0a-a669-f374cd365702"}, {"timestamp": "2023-11-13T20:12:06Z", "date_only": false, "value": "2023-11-13T20:12:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/170", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "674e7a9d-c1bf-4918-aa86-fa7acba36728", "content": "#ExploitObserverAlert\n\nCVE-2023-28771\n\nDESCRIPTION: Exploit Observer has 17 entries related to CVE-2023-28771. Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.\n\nFIRST-EPSS: 0.918550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/170"}, {"timestamp": "2023-11-15T09:27:54Z", "date_only": false, "value": "2023-11-15T09:27:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11981", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "3fd9ddff-19b7-40e5-b8b4-0733a76e872e", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Russia: Sandworm have breached Danish energy sector companies. \nVery nice timeline analysis.\nCVE-2023-28771 + CVE-2023-33009 + CVE-2023-33010\n\nhttps://github.com/blackorbird/APT_REPORT/blob/master/Sandworm/sektorcert-angrebet-mod-dansk-kritisk-infrastruktur-tlp-clear-en.pdf", "url": "https://t.me/cKure/11981"}, {"timestamp": "2023-11-18T05:00:32.985Z", "date_only": false, "value": "2023-11-18T05:00:32.985076Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28771", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2023-11-18T05:00:32.985Z", "date_only": false, "value": "2023-11-18T05:00:32.985076Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28771", "record": "FKIE_CVE-2023-28771", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2023-11-19T12:30:25Z", "date_only": false, "value": "2023-11-19T12:30:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/givALT91Iu6PiZCnvj8kFTH53Gxfs_4qgOYXRQrQEGWoYTg", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "c697d6e5-6cce-4de5-bd95-bad6d17622d0"}, {"timestamp": "2023-12-13T01:20:48.581Z", "date_only": false, "value": "2023-12-13T01:20:48.581733Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-28771", "record": "GSD-2023-28771", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-16T14:35:50Z", "date_only": false, "value": "2023-12-16T14:35:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1828", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "98e95a33-be47-448d-9a2d-88774e60f9b7", "content": "#ExploitObserverAlert\n\nCVE-2023-28771\n\nDESCRIPTION: Exploit Observer has 20 entries related to CVE-2023-28771. Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.\n\nFIRST-EPSS: 0.923800000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1828"}, {"timestamp": "2023-12-18T13:59:09.508Z", "date_only": false, "value": "2023-12-18T13:59:09.508000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202304-2073", "record": "VAR-202304-2073", "field": "last_update_date"}, {"timestamp": "2024-01-14T10:51:06Z", "date_only": false, "value": "2024-01-14T10:51:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/1338", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5f10bb29-30b9-4489-b21a-075b8c04c0c7", "content": "New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks\nhttps://thehackernews.com/2024/01/new-findings-challenge-attribution-in.html\n\nThe cyber attacks targeting the energy sector in Denmark last year may not have had the involvement of the Russia-linked Sandworm hacking group,\u00a0new findings\u00a0from Forescout show.\nThe intrusions, which\u00a0targeted around 22 Danish energy organizations\u00a0in May 2023, occurred in two distinct waves, one which exploited a security flaw in Zyxel firewall (CVE-2023-28771) and a", "url": "https://t.me/KomunitiSiber/1338"}, {"timestamp": "2024-01-14T11:53:29Z", "date_only": false, "value": "2024-01-14T11:53:29.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/W61CapQbdjpY8fHyKye7OKQAedJ4EpIVCv1jgFZtfo7CUw", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "ff10888d-ac25-435c-ae90-1d927f245931"}, {"timestamp": "2024-01-15T09:15:13Z", "date_only": false, "value": "2024-01-15T09:15:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberbannews_ir/10632", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "23039092-4fb2-4702-bcad-d1ac580dbce0", "content": "\ud83d\udce1 \u06cc\u0627\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u0645\u0648\u0631\u062f \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u062e\u0634 \u0627\u0646\u0631\u0698\u06cc \u062f\u0627\u0646\u0645\u0627\u0631\u06a9\n\n\ud83d\udd3a\u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u06a9\u0647 \u0633\u0627\u0644 \u06af\u0630\u0634\u062a\u0647 \u0628\u062e\u0634 \u0627\u0646\u0631\u0698\u06cc \u062f\u0627\u0646\u0645\u0627\u0631\u06a9 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646\u062f\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0627\u0632 \u0633\u0648\u06cc \u06af\u0631\u0648\u0647 \u0647\u06a9\u0631\u06cc \u0633\u0646\u062f\u0648\u0648\u0631\u0645 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0631\u0648\u0633\u06cc\u0647 \u0631\u062e \u0646\u062f\u0627\u062f\u0647 \u0628\u0627\u0634\u062f.\n\n\ud83d\udd3a\u0627\u06cc\u0646 \u0646\u0641\u0648\u0630\u0647\u0627 \u06a9\u0647 \u062d\u062f\u0648\u062f 22 \u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0646\u0631\u0698\u06cc \u062f\u0627\u0646\u0645\u0627\u0631\u06a9\u06cc \u0631\u0627 \u062f\u0631 \u0645\u06cc 2023 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646\u062f\u060c \u062f\u0631 \u062f\u0648 \u0645\u0648\u062c \u0645\u062a\u0645\u0627\u06cc\u0632 \u0631\u062e \u062f\u0627\u062f\u0646\u062f\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u06cc\u06a9 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc (CVE-2023-28771) \u062f\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0632\u0627\u06cc\u06a9\u0633\u0644 (Zyxel) \u0648 \u062f\u06cc\u06af\u0631\u06cc \u06cc\u06a9 \u062e\u0648\u0634\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a \u0645\u062a\u0639\u0627\u0642\u0628 \u06a9\u0647 \u0628\u0627\u0639\u062b \u0634\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627\u062a \u0646\u062a \u0645\u06cc\u0631\u0627\u06cc (Mirai) \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0627\u0646\u0648\u0627\u0639 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0628\u0631\u062f\u0627\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647 \u06a9\u0647 \u0647\u0646\u0648\u0632 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0627\u0633\u062a\u060c \u0645\u0633\u062a\u0642\u0631 \u06a9\u0646\u0646\u062f.\n\n#\u062d\u0645\u0644\u0647_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u062f\u0627\u0646\u0645\u0627\u0631\u06a9 #\u0641\u0636\u0627\u06cc_\u0633\u0627\u06cc\u0628\u0631\u06cc \n\n\ud83d\udcf2\u0633\u0627\u06cc\u0628\u0631\u0628\u0627\u0646 \n\u00a9@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/10632"}, {"timestamp": "2024-08-02T13:51:38.311Z", "date_only": false, "value": "2024-08-02T13:51:38.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-28771", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:49:57.501Z", "date_only": false, "value": "2024-08-15T17:49:57.501+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1070", "record": "WID-SEC-W-2023-1070", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-24)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "b25e7d50-c80a-427b-b051-9877ca9394f6"}, {"timestamp": "2024-10-25T00:00:00Z", "date_only": false, "value": "2024-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "7e78d501-7445-4df8-8510-30aafca8f7a2"}, {"timestamp": "2024-10-26T00:00:00Z", "date_only": false, "value": "2024-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-26)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "f8427181-9590-4e95-bcc9-e91c9919e96b"}, {"timestamp": "2024-10-28T15:04:49.479Z", "date_only": false, "value": "2024-10-28T15:04:49.479889Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "518d1784-0370-40dc-ba2f-c94ddcac4c18"}, {"timestamp": "2024-10-28T15:04:53.500Z", "date_only": false, "value": "2024-10-28T15:04:53.500242Z", "kind": "sighting", "label": "Confirmed", "source": "Source not specified", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8bcb2322-45fc-4625-93b5-d3abb97b951a"}, {"timestamp": "2024-10-28T15:04:57.869Z", "date_only": false, "value": "2024-10-28T15:04:57.869879Z", "kind": "sighting", "label": "Exploited", "source": "Source not specified", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "78b12509-8c74-438a-b186-406f831b9830"}, {"timestamp": "2024-11-06T15:21:53.583Z", "date_only": false, "value": "2024-11-06T15:21:53.583555Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/3f11fc07-94c7-4c49-b71c-caff6266b8b2", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "3d5f163f-e0d0-46be-bfb9-e6244b11a507", "url": "https://vulnerability.circl.lu/comment/3f11fc07-94c7-4c49-b71c-caff6266b8b2"}, {"timestamp": "2024-11-09T00:00:00Z", "date_only": false, "value": "2024-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-09)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "916cc431-8f2e-44b6-a189-a00a52c42893"}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": false, "value": "2024-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-14)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "08a8e492-6520-4d50-9d27-c9f5edbe7db7"}, {"timestamp": "2024-12-24T20:34:31.663Z", "date_only": false, "value": "2024-12-24T20:34:31.663401Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971825", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "2d444ee4-4a62-4bba-a746-a1c8e0c1500a", "url": "https://feedsin.space/feed/CISAKevBot/items/2971825"}, {"timestamp": "2024-12-28T00:00:00Z", "date_only": false, "value": "2024-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-28)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "f59e4af0-23f6-4fdd-b90c-9b405f973669"}, {"timestamp": "2025-01-01T00:00:00Z", "date_only": false, "value": "2025-01-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cti-feed.circl.lu", "record": "CVE-2023-28771", "field": "timestamps.first_seen_at", "uuid": "654a76ab-65b5-485b-a116-b3d71a795054", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-12T00:00:00Z", "date_only": false, "value": "2025-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-12)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "2e7d9877-6a12-4bcc-a167-e10d8c48aaa1"}, {"timestamp": "2025-01-23T18:41:16Z", "date_only": false, "value": "2025-01-23T18:41:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6651", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e7a120dd-a42f-49c1-aae3-54c5013588a2", "content": "QiAnXin XLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 cnPilot \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cambium Networks \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0442\u0430\u043c\u043c\u0430 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 AISURU \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c AIRASHI \u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0432 DDoS-\u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0439.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 AIRASHI: CVE-2013-3307, CVE-2016-20016, CVE-2017-5259, CVE-2018-14558, CVE-2020-25499, CVE-2020-8515, CVE-2022-3573, CVE-2022-40005, CVE-2022-44149, CVE-2023-28771, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IP-\u043a\u0430\u043c\u0435\u0440\u0430\u0445 AVTECH, \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u0445 LILIN \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Shenzhen TVT.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0441\u0432\u043e\u0438\u0445 \u0442\u0435\u0441\u0442\u043e\u0432, DDoS-\u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c AIRASHI \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 1\u20133 \u0422\u0431\u0438\u0442/\u0441.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435 \u0438 \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u0438 \u041a\u0438\u0442\u0430\u0439, \u0421\u0428\u0410, \u041f\u043e\u043b\u044c\u0448\u0430 \u0438 \u0420\u043e\u0441\u0441\u0438\u044f.\n\nAIRASHI - \u044d\u0442\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 AISURU (\u043e\u043d \u0436\u0435 NAKOTNE), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f  DDoS-\u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 Steam, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u0433\u0440\u044b\u00a0Black Myth: Wukong.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u0438 AIRASHI, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0432 \u0441\u0435\u0431\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b DDoS.\n\nAISURU \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0441\u0432\u043e\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0441\u044f\u0446 \u0431\u043e\u0442\u043d\u0435\u0442 \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c (\u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Kitty) \u0438 \u0437\u0430\u0442\u0435\u043c \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f (\u043e\u043d\u0430 \u0436\u0435 AIRASHI).\n\n\u041e\u0431\u0440\u0430\u0437\u0435\u0446 kitty \u043d\u0430\u0447\u0430\u043b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0446\u0430\u043c\u0438 AISURU \u043e\u043d \u0443\u043f\u0440\u043e\u0441\u0442\u0438\u043b \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0438 \u043a \u043a\u043e\u043d\u0446\u0443 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0441\u0442\u0430\u043b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b SOCKS5 \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c C2.\n\n\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, AIRASHI \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445:\n\n- AIRASHI-DDoS (\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 \u043a\u043e\u043d\u0446\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- AIRASHI-Proxy (\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0431\u043e\u0439 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e AIRASHI-DDoS \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043a\u0441\u0438.\n\n\u0411\u043e\u0442\u043d\u0435\u0442, \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2 \u0447\u0435\u0440\u0435\u0437 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 HMAC-SHA256 \u0438 CHACHA20 \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, AIRASHI-DDoS \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 13 \u0442\u0438\u043f\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a AIRASHI-Proxy \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u044f\u0442\u044c \u0442\u0438\u043f\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u0430\u043a \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0449\u043d\u044b\u0445 DDoS-\u0430\u0442\u0430\u043a.", "url": "https://t.me/true_secator/6651"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "b84d4852-3a7c-414f-b4f0-624544643c52"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "92209373-0a63-46f5-b011-d110c83ca43c"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "ff56c475-ecc8-42ea-b49a-00113d9f5c84"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-06)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8ec53f8d-8468-412d-9a48-566c5f9f827a"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5a92b470-6e75-4f03-a26d-1c91fc48baa9"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "2054f27d-2a81-48b7-92d4-7e82ec9dea65"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "3d9fa59b-256a-4f6a-85ed-d72965ed43eb"}, {"timestamp": "2025-02-23T02:10:42Z", "date_only": false, "value": "2025-02-23T02:10:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8ce4e70f-7e72-4d38-a648-05b13ed01b23"}, {"timestamp": "2025-02-23T04:10:53Z", "date_only": false, "value": "2025-02-23T04:10:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "177ea93c-5ab4-419f-8943-5c2eb7045aad"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "bc5d9e19-1e4e-4043-a47e-9ab171913b28"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-14)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8752d26c-08ab-4a73-a242-0b2b57b5ecc7"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "08fbe668-249e-4353-8da2-22123b92ea37"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "59c27c53-61db-40b2-bd50-6a3eaec81901"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-16)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "f71ccc77-9063-43d5-95a6-e786a9dc2043"}, {"timestamp": "2025-06-16T20:55:49.036Z", "date_only": false, "value": "2025-06-16T20:55:49.036703Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114695035186707969", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "cc9d69ca-de1c-423f-8ad6-67ca1af0fa44", "url": "https://infosec.exchange/users/cR0w/statuses/114695035186707969"}, {"timestamp": "2025-06-16T21:03:02.278Z", "date_only": false, "value": "2025-06-16T21:03:02.278696Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/greynoise/statuses/114695063566299759", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "fd820c51-c3f9-444c-aa7a-b329f248568b", "url": "https://infosec.exchange/users/greynoise/statuses/114695063566299759"}, {"timestamp": "2025-06-16T21:04:17.278Z", "date_only": false, "value": "2025-06-16T21:04:17.278715Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.io/post/3lrquyjdizs2q", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "befa124a-d2c2-4c50-9105-ad93bba382cb", "url": "https://bsky.app/profile/greynoise.io/post/3lrquyjdizs2q"}, {"timestamp": "2025-06-16T21:04:51.094Z", "date_only": false, "value": "2025-06-16T21:04:51.094663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lrquyuety5a2", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "7d5100b6-4c7f-4a32-8956-d6b8bffb9866", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lrquyuety5a2"}, {"timestamp": "2025-06-17T01:21:49.224Z", "date_only": false, "value": "2025-06-17T01:21:49.224538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrrdf2yajs2o", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "6219cd97-c2af-4a34-a04c-e28bfeccfd7f", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrrdf2yajs2o"}, {"timestamp": "2025-06-17T02:21:19.865Z", "date_only": false, "value": "2025-06-17T02:21:19.865179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lrrgpimc5v2g", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "08ba3766-78c9-4933-a8e5-29477a4e447a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lrrgpimc5v2g"}, {"timestamp": "2025-06-17T06:28:05.354Z", "date_only": false, "value": "2025-06-17T06:28:05.354198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lrruipkkpc2g", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "43749cf3-594f-4e6e-b995-c522a3222f14", "url": "https://bsky.app/profile/shiojiri.com/post/3lrruipkkpc2g"}, {"timestamp": "2025-06-17T09:20:23.287Z", "date_only": false, "value": "2025-06-17T09:20:23.287969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrs64pe5krw2", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "1baeb309-de81-45a6-8ad8-0738f7d87ee2", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrs64pe5krw2"}, {"timestamp": "2025-06-17T11:32:34.248Z", "date_only": false, "value": "2025-06-17T11:32:34.248873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrsfj6kzsd22", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5efa6992-bada-4a33-a10b-614b5240deac", "url": "https://bsky.app/profile/nimblenerd.social/post/3lrsfj6kzsd22"}, {"timestamp": "2025-06-17T11:38:19.150Z", "date_only": false, "value": "2025-06-17T11:38:19.150041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrsfth36jz2f", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "de426832-806f-4dc9-958e-bb7719b8f691", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrsfth36jz2f"}, {"timestamp": "2025-06-17T11:40:10.530Z", "date_only": false, "value": "2025-06-17T11:40:10.530675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lrsfwrx7js2w", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "490325ba-9e19-4dbf-bbbe-56c0ca98813a", "url": "https://bsky.app/profile/cyberhub.blog/post/3lrsfwrx7js2w"}, {"timestamp": "2025-06-17T13:51:18.348Z", "date_only": false, "value": "2025-06-17T13:51:18.348077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrsn5o35zav2", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "057db340-0b7d-4d45-b8c1-c6ee75548277", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrsn5o35zav2"}, {"timestamp": "2025-06-17T14:10:48.687Z", "date_only": false, "value": "2025-06-17T14:10:48.687124Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrsoe4r6nm2a", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "a73d1689-47c1-4fcf-b9c1-c291b556fad4", "url": "https://bsky.app/profile/nimblenerd.social/post/3lrsoe4r6nm2a"}, {"timestamp": "2025-06-17T17:51:35.865Z", "date_only": false, "value": "2025-06-17T17:51:35.865232Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114699973128818133", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "d8dbc965-357a-45b9-9e1c-59b2b3a4954b", "url": "https://infosec.exchange/users/threatcodex/statuses/114699973128818133"}, {"timestamp": "2025-06-17T20:02:52.956Z", "date_only": false, "value": "2025-06-17T20:02:52.956732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3lrtbzpi2bt23", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "632fce25-3ec5-47e8-9abb-ad22417cc370", "url": "https://bsky.app/profile/theitnerd.ca/post/3lrtbzpi2bt23"}, {"timestamp": "2025-06-17T20:42:27.343Z", "date_only": false, "value": "2025-06-17T20:42:27.343941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrteadftg452", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "21522d54-73f3-4087-ac94-46380ac4d56b", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrteadftg452"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "0d62484e-68fe-473b-a088-eb0759209336"}, {"timestamp": "2025-06-18T00:40:40.812Z", "date_only": false, "value": "2025-06-18T00:40:40.812984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lrtrkgtrcd24", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "61da2846-192c-41ca-8de6-f254878d9d6e", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lrtrkgtrcd24"}, {"timestamp": "2025-06-18T06:17:11.411Z", "date_only": false, "value": "2025-06-18T06:17:11.411341Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lruee6b6j22h", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "d3e4ab6c-c5dd-41ed-af80-c1b1ad38de5c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lruee6b6j22h"}, {"timestamp": "2025-06-18T06:39:32.048Z", "date_only": false, "value": "2025-06-18T06:39:32.048806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lrufm4vu2o27", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "9b40a7fc-4bf4-4064-8245-c035129e39a7", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lrufm4vu2o27"}, {"timestamp": "2025-06-20T18:30:05Z", "date_only": false, "value": "2025-06-20T18:30:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7151", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "89624ef0-b170-460c-8c3a-f320772a63f4", "content": "\u0412 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f:\n\n1. BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430.\n\nCVE-2025-5309 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Resilion\u00a0\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Remote Support \u0438 Privileged Remote Access. \n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440 BeyondTrust \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n2. Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u0440\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 (CVE-2025-5777) \u0432 NetScaler ADC \u0438 NetScaler Gateway.\n\nCitrix \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\u00a0\n\n3. \u0414\u0436\u043e\u043d\u0430\u0442\u0430\u043d \u041c\u044d\u043d\u043d\u0445\u0435\u043d \u043e\u0442\u044b\u0441\u043a\u0430\u043b \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Erlang/OTP ZIP-\u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043f\u0443\u0442\u044c \u043f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u044e.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 CrowdStrike \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 AMSI \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439, \u0435\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n5. Cisco \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n6. Atlassian \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Bamboo, Bitbucket, Confluence, Crowd \u0438 Jira.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2025-22228 (\u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0432 Spring), CVE-2025-24970 (DoS \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Netty), CVE-2024-38816 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 WebMvc.fn \u0438 WebFlux.fn), CVE-2024-57699 (DoS \u0432 Netplex Json-smart) \u0438 CVE-2025-31650 (DoS \u0432 Apache Tomcat).\n\n7. Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0426\u0435\u043d\u0442\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438.\n\n8. GreyNoise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-28771 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8) \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Zyxel, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Mirai.\n\n9. \u041d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-3248, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u043e\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442 Flodrix, \u043e \u0447\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Trend Micro.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445.", "url": "https://t.me/true_secator/7151"}, {"timestamp": "2025-06-23T09:48:06Z", "date_only": false, "value": "2025-06-23T09:48:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/06/23/zyxel-devices-hit-by-active.html", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "91630e36-523d-4f1b-9213-40030e44f545", "url": "https://threatintel.cc/2025/06/23/zyxel-devices-hit-by-active.html"}, {"timestamp": "2025-06-23T10:43:55Z", "date_only": false, "value": "2025-06-23T10:43:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/5704", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "4c43818e-e361-4b27-aa57-3cf59d5c67b2", "content": "\ud83d\udea8 News Alert!\n\nSource: Hackread \u2013 Latest Cybersecurity, Hacking News, Tech, AI & Crypto\nTitle: Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability\nLink: https://hackread.com/zyxel-devices-active-exploits-cve-2023-28771-vulnerability/", "url": "https://t.me/DarkWebInformer_News/5704"}, {"timestamp": "2025-06-23T10:48:28.964Z", "date_only": false, "value": "2025-06-23T10:48:28.964626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lsbfttaits2h", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e3d37dcc-e00a-44b9-8861-b210ec373834", "url": "https://bsky.app/profile/hackread.bsky.social/post/3lsbfttaits2h"}, {"timestamp": "2025-06-23T11:06:39.834Z", "date_only": false, "value": "2025-06-23T11:06:39.834236Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lsbguezwa52b", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "eb7cf065-4c7e-450f-9aaf-f78de6a36777", "url": "https://bsky.app/profile/nimblenerd.social/post/3lsbguezwa52b"}, {"timestamp": "2025-06-23T11:47:59.833Z", "date_only": false, "value": "2025-06-23T11:47:59.833858Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/114732517258986097", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "72065f6e-2f6a-443c-8a08-89df46b9ef55", "url": "https://infosec.exchange/users/edwardk/statuses/114732517258986097"}, {"timestamp": "2025-06-23T12:03:33Z", "date_only": false, "value": "2025-06-23T12:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/14091", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "68e8b216-008b-4098-8230-0cd04b99a8ae", "content": "Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability \u2013 hackread.com\n\nMon, 23 Jun 2025 18:43:04", "url": "https://t.me/MalaysiaHacktivistz/14091"}, {"timestamp": "2025-06-23T12:03:33Z", "date_only": false, "value": "2025-06-23T12:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/5058", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5de82ba8-e91a-4e82-809b-b13681f754f6", "content": "Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability \u2013 hackread.com\n\nMon, 23 Jun 2025 18:43:04", "url": "https://t.me/MalaysiaHacktivistz/5058"}, {"timestamp": "2025-06-23T12:03:33Z", "date_only": false, "value": "2025-06-23T12:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/3211", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "02f854bb-0b1e-4d29-a29f-1666c96fe3e1", "content": "Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability \u2013 hackread.com\n\nMon, 23 Jun 2025 18:43:04", "url": "https://t.me/TengkorakCyberCrewzz/3211"}, {"timestamp": "2025-06-23T12:03:33Z", "date_only": false, "value": "2025-06-23T12:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/32330", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "252dc8b7-aa79-44c7-b14f-090279b0f4b2", "content": "Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability \u2013 hackread.com\n\nMon, 23 Jun 2025 18:43:04", "url": "https://t.me/TengkorakCyberCrewzz/32330"}, {"timestamp": "2025-06-23T14:08:35.940Z", "date_only": false, "value": "2025-06-23T14:08:35.940331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsbqzp76ra26", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "514c8c40-a8a7-4884-944c-3a25ebc16736", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsbqzp76ra26"}, {"timestamp": "2025-06-23T20:51:01.770Z", "date_only": false, "value": "2025-06-23T20:51:01.770791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lschhxkxaxg2", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "c0a044f7-d25d-4276-b41c-f49007cb7490", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lschhxkxaxg2"}, {"timestamp": "2025-06-24T04:49:05.380Z", "date_only": false, "value": "2025-06-24T04:49:05.380679Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lsdca55euc2h", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "b3e7e05d-2dee-433c-98a2-1232ffe14d16", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lsdca55euc2h"}, {"timestamp": "2025-06-24T12:42:13.487Z", "date_only": false, "value": "2025-06-24T12:42:13.487015Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lse4o6p5fv2d", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "96ddb27e-51db-46bf-af64-9a77d00d0c44", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lse4o6p5fv2d"}, {"timestamp": "2025-06-24T13:42:14.541Z", "date_only": false, "value": "2025-06-24T13:42:14.541072Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114738628781206173", "record": "cve-2023-28771", "field": "creation_timestamp", "uuid": "fa122b18-523e-4457-a408-07fff8004961", "url": "https://infosec.exchange/users/patrickcmiller/statuses/114738628781206173"}, {"timestamp": "2025-06-26T21:23:04Z", "date_only": false, "value": "2025-06-26T21:23:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3517", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "04c1359d-cc62-4c81-960c-277eaefa1258", "content": "\u26a1\ufe0fZyxel users beware: A critical remote code execution flaw (CVE-2023-28771) in Zyxel devices is under active exploitation by a Mirai-like botnet. GreyNoise observed a surge on June 16, targeting devices globally.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3517"}, {"timestamp": "2025-06-27T13:37:34.442Z", "date_only": false, "value": "2025-06-27T13:37:34.442349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/innovirtuoso.bsky.social/post/3lslr5waggv2l", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "6e9b7681-10be-4829-a8ab-b6c47c21b476", "url": "https://bsky.app/profile/innovirtuoso.bsky.social/post/3lslr5waggv2l"}, {"timestamp": "2025-07-07T05:16:45Z", "date_only": false, "value": "2025-07-07T05:16:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b4a98411-68c8-46bf-aff8-1659046646b3", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "90bd7aa6-0330-41f4-82e8-90ce07d33677"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "1fb29fae-9bcb-42cc-b050-e358fdc0449d"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "7f08d1a0-ed33-4a28-8f1d-32777e8edf60"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "26e3a817-c622-493b-9597-d57a038ad2f1"}, {"timestamp": "2025-07-15T00:00:00Z", "date_only": false, "value": "2025-07-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "89e286d8-65b0-499c-b0ad-86bb6b8f14a7"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "6b0a1ef3-2ddd-4902-8eeb-37b148f91ebb"}, {"timestamp": "2025-07-17T00:00:00Z", "date_only": false, "value": "2025-07-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-17)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "5c21c794-c2f0-4f81-847d-6b11c62fa67b"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "92b451ec-b33e-4ef4-b244-11e1913a98d0"}, {"timestamp": "2025-08-02T00:00:00Z", "date_only": false, "value": "2025-08-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-02)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "cc310d28-1204-41e0-a061-344732d6fcd3"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-04)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8941e750-28c9-4dfc-902d-d2a34da8e499"}, {"timestamp": "2025-08-31T03:13:00Z", "date_only": false, "value": "2025-08-31T03:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "84532303-c7d8-4ac7-9832-54f505b69d5e"}, {"timestamp": "2025-10-09T20:15:59Z", "date_only": false, "value": "2025-10-09T20:15:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/heavyscientist/de6a7c14e68b5862734b94a3c10e574c", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "4ac4721e-40a0-436a-9553-033a67b51b7b", "url": "https://gist.github.com/heavyscientist/de6a7c14e68b5862734b94a3c10e574c"}, {"timestamp": "2025-10-21T23:05:48.400Z", "date_only": false, "value": "2025-10-21T23:05:48.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-28771", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:48.400Z", "date_only": false, "value": "2025-10-21T23:05:48.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28771", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:44Z", "date_only": false, "value": "2025-10-22T00:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3XVP-8QG2-X43W", "record": "GHSA-3XVP-8QG2-X43W", "field": "modified"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "70f9af68-cc71-430e-8832-e861ea962881"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "fe92d521-c0c3-4cd5-80e1-0458ef1c3ad8"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "dd533035-0094-45be-9cbe-0bbce7663a8f"}, {"timestamp": "2026-01-28T17:00:00Z", "date_only": false, "value": "2026-01-28T17:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "cti-feed.circl.lu", "record": "CVE-2023-28771", "field": "timestamps.last_seen_at", "uuid": "654a76ab-65b5-485b-a116-b3d71a795054", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:58.131Z", "date_only": false, "value": "2026-02-02T12:26:58.131022Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5ab8151-f2a7-43d0-a530-fb60cf334e1a", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "4812934b-0f29-48c0-9cec-6932ff0724e5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5ab8151-f2a7-43d0-a530-fb60cf334e1a"}, {"timestamp": "2026-02-02T12:26:58.131Z", "date_only": false, "value": "2026-02-02T12:26:58.131022Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5ab8151-f2a7-43d0-a530-fb60cf334e1a", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "c75d7159-37d1-4333-91da-23e84fdcc3b0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5ab8151-f2a7-43d0-a530-fb60cf334e1a"}, {"timestamp": "2026-02-03T09:42:53Z", "date_only": false, "value": "2026-02-03T09:42:53+00:00", "kind": "kev", "label": "Status updated", "source": "cti-feed.circl.lu", "record": "CVE-2023-28771", "field": "status.status_updated_at", "uuid": "654a76ab-65b5-485b-a116-b3d71a795054", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-03T09:45:35.674Z", "date_only": false, "value": "2026-02-03T09:45:35.674971Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/654a76ab-65b5-485b-a116-b3d71a795054", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "30afb1e7-a71d-42c6-9399-a9f1992df0c4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/654a76ab-65b5-485b-a116-b3d71a795054"}, {"timestamp": "2026-02-03T09:45:35.674Z", "date_only": false, "value": "2026-02-03T09:45:35.674971Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/654a76ab-65b5-485b-a116-b3d71a795054", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "ed86fc64-af07-4830-9f69-ae854a928081", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/654a76ab-65b5-485b-a116-b3d71a795054"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e4b01af0-bce2-486b-ab92-d251eef707e6"}, {"timestamp": "2026-04-10T09:38:19Z", "date_only": false, "value": "2026-04-10T09:38:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/390462c4-7cd4-4967-94d8-6f5a07d8cfd9", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "711ce767-4954-4d3f-81f4-2bbffcd0a5a1"}, {"timestamp": "2026-04-14T12:02:35Z", "date_only": false, "value": "2026-04-14T12:02:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a7fb943f-00ef-43d8-87ca-c9ef19928d19", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "d8a740fe-d8d2-4f90-88d8-1982ce9b9eac"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "84067ff5-be78-4a3c-86fa-30d1330492be"}, {"timestamp": "2026-06-17T05:48:44.217Z", "date_only": false, "value": "2026-06-17T05:48:44.217", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28771", "record": "FKIE_CVE-2023-28771", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:54.335Z", "date_only": false, "value": "2026-06-19T12:46:54.335862Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4527455b-cd1d-4fb4-b257-679ae56b6a75", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "9e09909b-9676-46d9-a61b-868cc8105d22", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4527455b-cd1d-4fb4-b257-679ae56b6a75"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-28771", "field": "timestamps.recorded_at", "uuid": "4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:07.094Z", "date_only": false, "value": "2026-06-23T11:14:07.094675Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "010297b2-0d00-4de6-84e9-8f961181cbf7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4ed23fe9-93c2-49ac-b9f1-49f6b30efcf5"}, {"timestamp": "2026-06-23T14:05:41.236Z", "date_only": false, "value": "2026-06-23T14:05:41.236687Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/771a4f7f-b996-4b54-991f-6806cf6f2781", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "034e4952-c23e-453a-9bca-66eb3aae7b07", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/771a4f7f-b996-4b54-991f-6806cf6f2781"}, {"timestamp": "2026-06-30T09:24:01.553Z", "date_only": false, "value": "2026-06-30T09:24:01.553210Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d7bb84a0-13cf-450a-b125-a07a03bb2f24", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "bca7dccd-6f4e-4866-a52a-6d648738b085", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d7bb84a0-13cf-450a-b125-a07a03bb2f24"}, {"timestamp": "2026-07-01T05:53:56.818Z", "date_only": false, "value": "2026-07-01T05:53:56.818353Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ac2e1f78-4210-4656-8b08-d376f87cce99", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "b10d19dd-e3d6-4d6f-82fc-fa49f579ee03", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ac2e1f78-4210-4656-8b08-d376f87cce99"}, {"timestamp": "2026-07-10T06:15:04.841Z", "date_only": false, "value": "2026-07-10T06:15:04.841488Z", "kind": "sighting", "label": "Seen", "source": "MISP/5347acf3-3f91-45ed-a163-836cfc9218d2", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "9e9bed99-e560-4309-93bf-dad8140b3f62"}, {"timestamp": "2026-07-11T00:15:04.020Z", "date_only": false, "value": "2026-07-11T00:15:04.020719Z", "kind": "sighting", "label": "Seen", "source": "MISP/5347acf3-3f91-45ed-a163-836cfc9218d2", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8f4d996d-d563-4e68-b4c5-6ce0ad97b071"}, {"timestamp": "2026-07-15T10:15:07.036Z", "date_only": false, "value": "2026-07-15T10:15:07.036649Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "67760f60-3be4-4633-b203-661b5e3b90cc"}, {"timestamp": "2026-07-26T02:02:19.247Z", "date_only": false, "value": "2026-07-26T02:02:19.247419Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2152", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "65c58f04-b527-4205-a37c-9261997453c0", "url": "https://t.me/EchelonEyes/2152"}, {"timestamp": "2026-07-26T02:02:26.347Z", "date_only": false, "value": "2026-07-26T02:02:26.347064Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1601", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "46dbd2a9-7e7c-4fe4-84b1-58cedf3a9ae2", "url": "https://t.me/EchelonEyes/1601"}, {"timestamp": "2026-07-27T00:00:55.883Z", "date_only": false, "value": "2026-07-27T00:00:55.883359Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2152", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "8dd21a91-ae98-4997-9a60-1323a1726544", "url": "https://t.me/EchelonEyes/2152"}, {"timestamp": "2026-07-27T00:01:03.843Z", "date_only": false, "value": "2026-07-27T00:01:03.843069Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1601", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "20cf37b7-87dd-4a39-b238-898e09d9d146", "url": "https://t.me/EchelonEyes/1601"}, {"timestamp": "2026-07-28T00:00:09.403Z", "date_only": false, "value": "2026-07-28T00:00:09.403236Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1601", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "6221c113-1194-412c-bd9f-f62247828c0d", "url": "https://t.me/EchelonEyes/1601"}, {"timestamp": "2026-07-28T00:00:31.701Z", "date_only": false, "value": "2026-07-28T00:00:31.701629Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/2152", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "c89def91-2bf4-4fd1-995e-2ad67202c829", "url": "https://t.me/EchelonEyes/2152"}, {"timestamp": "2026-07-29T12:00:26.541Z", "date_only": false, "value": "2026-07-29T12:00:26.541122Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14259", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "0ba8dd80-c766-4d01-b5e9-806ce7f11a81", "url": "https://t.me/CVEhub/14259"}, {"timestamp": "2026-07-29T12:00:30.364Z", "date_only": false, "value": "2026-07-29T12:00:30.364202Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13524", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "e6b0fd09-73d2-4ec4-a32c-50d14d9cec94", "url": "https://t.me/CVEhub/13524"}, {"timestamp": "2026-07-30T00:00:49.027Z", "date_only": false, "value": "2026-07-30T00:00:49.027525Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14259", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "f3527117-1206-4360-a3a5-1608a33a498e", "url": "https://t.me/CVEhub/14259"}, {"timestamp": "2026-07-30T00:00:54.463Z", "date_only": false, "value": "2026-07-30T00:00:54.463356Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13524", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "ad884d0f-b863-4af0-a716-b0b0b9b25070", "url": "https://t.me/CVEhub/13524"}, {"timestamp": "2026-07-31T00:00:10.721Z", "date_only": false, "value": "2026-07-31T00:00:10.721039Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13524", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "2ff9ee57-2c17-4a98-8130-50948d9d823d", "url": "https://t.me/CVEhub/13524"}, {"timestamp": "2026-07-31T01:00:12.607Z", "date_only": false, "value": "2026-07-31T01:00:12.607913Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14259", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "9a442f9f-ffdc-415b-8f9b-3a6832ddd9c3", "url": "https://t.me/CVEhub/14259"}, {"timestamp": "2026-08-14T16:00:11.925Z", "date_only": false, "value": "2026-08-14T16:00:11.925695Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/770", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "a387fd86-1761-4e23-ab5e-1d21988a3cd5", "url": "https://t.me/purp_sec/770"}, {"timestamp": "2026-08-24T10:00:08.973Z", "date_only": false, "value": "2026-08-24T10:00:08.973168Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "9bbfc663-c772-46a0-a394-697454d57671"}, {"timestamp": "2026-08-30T10:00:08.411Z", "date_only": false, "value": "2026-08-30T10:00:08.411302Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "0f1c708b-f15a-48e7-a552-dc5be107a974"}, {"timestamp": "2026-09-01T17:00:20.892Z", "date_only": false, "value": "2026-09-01T17:00:20.892341Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6804", "record": "CVE-2023-28771", "field": "creation_timestamp", "uuid": "6b31409d-be57-4993-b0e8-1579617dc9aa", "url": "https://t.me/cissp/6804"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-28771", "field": "timestamps.last_seen_at", "uuid": "ac2e1f78-4210-4656-8b08-d376f87cce99", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-28771", "field": "evidence.0.details.observation_date", "uuid": "ac2e1f78-4210-4656-8b08-d376f87cce99", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-28771", "field": "status.status_updated_at", "uuid": "ac2e1f78-4210-4656-8b08-d376f87cce99", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-28771", "field": "timestamps.recorded_at", "uuid": "aa637b60-4c92-4960-9d26-4148ff2a4a3e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T01:00:01Z", "date_only": false, "value": "2026-11-05T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-28771", "field": "timestamps.recorded_at", "uuid": "ac2e1f78-4210-4656-8b08-d376f87cce99", "status": {"status_reason": "confirmed", "exploited": true}}]}