{"metadata": {"vulnerability": "cve-2017-18362", "count": 45, "kinds": {"milestone": 4, "sighting": 15, "kev": 11, "other": 15}}, "data": [{"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2017-18362", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-02-05T05:00:00Z", "date_only": false, "value": "2019-02-05T05:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-18362", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-02-05T05:57:01Z", "date_only": false, "value": "2019-02-05T05:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-02-05T06:29:00Z", "date_only": false, "value": "2019-02-05T06:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W35F-W5CG-JQHH", "record": "GHSA-W35F-W5CG-JQHH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-02-05T06:29:00Z", "date_only": false, "value": "2019-02-05T06:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-18362", "record": "GSD-2017-18362", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-02-05T06:29:00.233Z", "date_only": false, "value": "2019-02-05T06:29:00.233", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-18362", "record": "FKIE_CVE-2017-18362", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-02-05T12:26:15Z", "date_only": false, "value": "2019-02-05T12:26:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/2385", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "0c523f33-6501-4c0b-9d2d-dc6fde266be5", "content": "ATENTION\u203c New - CVE-2017-18362\n\nConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/2385", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-02-22T18:33:00Z", "date_only": false, "value": "2019-02-22T18:33Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-18362", "record": "GSD-2017-18362", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-14T01:32:41Z", "date_only": false, "value": "2022-05-14T01:32:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W35F-W5CG-JQHH", "record": "GHSA-W35F-W5CG-JQHH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-18362", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "506920da-60f2-4b42-a7ab-4f7b2ee22965", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2017-18362", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": true, "value": "2022-05-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-18362", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2017-18362", "field": "evidence.0.details.added_date", "uuid": "0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": true, "value": "2022-05-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2017-18362", "field": "evidence.0.details.date_added", "uuid": "506920da-60f2-4b42-a7ab-4f7b2ee22965", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2017-18362", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "506920da-60f2-4b42-a7ab-4f7b2ee22965", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2017-18362", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2017-18362", "field": "status.status_updated_at", "uuid": "506920da-60f2-4b42-a7ab-4f7b2ee22965", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2017-18362", "field": "status.status_updated_at", "uuid": "0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": false, "value": "2022-05-24T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-18362", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2017-18362 added to CISA KEV"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": true, "value": "2022-06-14", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2017-18362", "field": "evidence.0.details.due_date", "uuid": "506920da-60f2-4b42-a7ab-4f7b2ee22965", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-01T00:00:00Z", "date_only": false, "value": "2022-07-01T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-18362", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2022-07-01T00:00:00Z", "date_only": false, "value": "2022-07-01T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-18362", "record": "FKIE_CVE-2017-18362", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2023-06-14T21:10:03Z", "date_only": false, "value": "2023-06-14T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "6dcd85a6-8c64-4b00-a61b-e891bbf050d5"}, {"timestamp": "2023-12-13T01:21:10.859Z", "date_only": false, "value": "2023-12-13T01:21:10.859417Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-18362", "record": "GSD-2017-18362", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-05T21:20:50.848Z", "date_only": false, "value": "2024-08-05T21:20:50.848Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2017-18362", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:31:21.916Z", "date_only": false, "value": "2024-12-24T20:31:21.916023Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971576", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "3d5eaca4-71c3-48bb-86cc-619a9feea31d", "url": "https://feedsin.space/feed/CISAKevBot/items/2971576"}, {"timestamp": "2025-02-23T02:10:15Z", "date_only": false, "value": "2025-02-23T02:10:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "8d21e61a-b1d1-45d8-8d3d-031d2f7d6d22"}, {"timestamp": "2025-04-29T22:33:08.170Z", "date_only": false, "value": "2025-04-29T22:33:08.170980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnydlbappg2k", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "af531c4a-86ab-4c97-bb22-9dfe17fee49d", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnydlbappg2k"}, {"timestamp": "2025-08-14T09:00:04Z", "date_only": false, "value": "2025-08-14T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HXnB78LZ993EnbGXdL2hofKwYDoKHSeDPKMDrtCNi3QDgzw", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "29517ac7-6d08-4cd2-b279-abbf97c0d54d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-16T21:02:18.300Z", "date_only": false, "value": "2025-08-16T21:02:18.300344Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd74hpu2m", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "d7c8bb7a-fbd5-42ec-95f9-982c4a28f85d", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd74hpu2m"}, {"timestamp": "2025-10-22T00:31:37Z", "date_only": false, "value": "2025-10-22T00:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W35F-W5CG-JQHH", "record": "GHSA-W35F-W5CG-JQHH", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-22T18:46:05Z", "date_only": false, "value": "2025-10-22T18:46:05.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-18362.yaml", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "9b9231b5-01fb-464c-979f-092cc424a808", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-18362.yaml"}, {"timestamp": "2025-10-25T21:02:27.997Z", "date_only": false, "value": "2025-10-25T21:02:27.997220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwcqbm2i", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "30df45a5-f7b4-4193-87fe-fb68b6792b41", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwcqbm2i"}, {"timestamp": "2026-02-02T12:27:40.291Z", "date_only": false, "value": "2026-02-02T12:27:40.291369Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334acbde-5585-47d7-928f-067adc718955", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "6ad57dee-9445-4bf3-b3f4-55d4eb05d3b8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334acbde-5585-47d7-928f-067adc718955", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:27:40.291Z", "date_only": false, "value": "2026-02-02T12:27:40.291369Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334acbde-5585-47d7-928f-067adc718955", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "22087619-e735-4b8d-ba05-d087f574941d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334acbde-5585-47d7-928f-067adc718955", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T12:47:14.320Z", "date_only": false, "value": "2026-06-19T12:47:14.320333Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/48b9435a-5d96-4c31-974d-84d102d25aa0", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "eafcf7ec-5dbf-4537-8ba7-5df368a8c740", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/48b9435a-5d96-4c31-974d-84d102d25aa0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2017-18362", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:51.698Z", "date_only": false, "value": "2026-06-23T11:13:51.698491Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "6432c6d3-6538-48f8-92f7-01d5fad19275", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0ad07e2d-55f3-45e1-928d-207e88cf7a4b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:05:23.732Z", "date_only": false, "value": "2026-06-23T14:05:23.732330Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ed1af37-3fde-40f4-b6d2-af6285e5f65d", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "57c236dc-b4c7-4afc-abfa-05e548338098", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ed1af37-3fde-40f4-b6d2-af6285e5f65d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-13T03:55:42.006Z", "date_only": false, "value": "2026-08-13T03:55:42.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2017-18362", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-13T03:55:42.006Z", "date_only": false, "value": "2026-08-13T03:55:42.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-18362", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-13T05:17:15.457Z", "date_only": false, "value": "2026-08-13T05:17:15.457", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-18362", "record": "FKIE_CVE-2017-18362", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-13T08:10:01.876Z", "date_only": false, "value": "2026-08-13T08:10:01.876719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msx6xkfzbh2u", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "2e2b9f6f-ae31-4c13-8351-bee9f04a9ca3", "url": "https://bsky.app/profile/vulnsea.com/post/3msx6xkfzbh2u"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2017-18362", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "506920da-60f2-4b42-a7ab-4f7b2ee22965", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-13T09:30:57.759Z", "anchors": {"origin": {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-08-14T09:00:04Z", "date_only": false, "value": "2025-08-14T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HXnB78LZ993EnbGXdL2hofKwYDoKHSeDPKMDrtCNi3QDgzw", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "29517ac7-6d08-4cd2-b279-abbf97c0d54d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2019-02-05T12:26:15Z", "date_only": false, "value": "2019-02-05T12:26:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/2385", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "0c523f33-6501-4c0b-9d2d-dc6fde266be5", "content": "ATENTION\u203c New - CVE-2017-18362\n\nConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/2385", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 131175.0, "hours": 36.4375, "days": 1.5182291666666667, "min_seconds": 44775.0, "max_seconds": 131175.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-02-05T12:26:15Z", "date_only": false, "value": "2019-02-05T12:26:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/2385", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "0c523f33-6501-4c0b-9d2d-dc6fde266be5", "content": "ATENTION\u203c New - CVE-2017-18362\n\nConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/2385", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 131175.0, "hours": 36.4375, "days": 1.5182291666666667, "min_seconds": 44775.0, "max_seconds": 131175.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-02-05T12:26:15Z", "date_only": false, "value": "2019-02-05T12:26:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/2385", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "0c523f33-6501-4c0b-9d2d-dc6fde266be5", "content": "ATENTION\u203c New - CVE-2017-18362\n\nConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/2385", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 205923604.0, "hours": 57201.00111111111, "days": 2383.375046296296, "min_seconds": 205837204.0, "max_seconds": 205923604.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-08-14T09:00:04Z", "date_only": false, "value": "2025-08-14T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HXnB78LZ993EnbGXdL2hofKwYDoKHSeDPKMDrtCNi3QDgzw", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "29517ac7-6d08-4cd2-b279-abbf97c0d54d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 245323857.759082, "hours": 68145.51604418944, "days": 2839.396501841227, "min_seconds": 245237457.759082, "max_seconds": 245323857.759082, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-02-04T00:00:00Z", "date_only": false, "value": "2019-02-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-18362", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T09:30:57.759Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 245192682.759082, "hours": 68109.07854418944, "days": 2837.87827267456, "min_seconds": 245192682.759082, "max_seconds": 245192682.759082, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-02-05T12:26:15Z", "date_only": false, "value": "2019-02-05T12:26:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/2385", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "0c523f33-6501-4c0b-9d2d-dc6fde266be5", "content": "ATENTION\u203c New - CVE-2017-18362\n\nConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/2385", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T09:30:57.759Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 39400253.759082, "hours": 10944.514933078333, "days": 456.0214555449305, "min_seconds": 39400253.759082, "max_seconds": 39400253.759082, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-14T09:00:04Z", "date_only": false, "value": "2025-08-14T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HXnB78LZ993EnbGXdL2hofKwYDoKHSeDPKMDrtCNi3QDgzw", "record": "CVE-2017-18362", "field": "creation_timestamp", "uuid": "29517ac7-6d08-4cd2-b279-abbf97c0d54d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T09:30:57.759Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}