{"metadata": {"vulnerability": "cve-2018-17532", "count": 107, "kinds": {"milestone": 4, "sighting": 71, "kev": 11, "other": 21}}, "data": [{"timestamp": "2018-09-25T00:00:00Z", "date_only": false, "value": "2018-09-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2018-17532", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-10-11T00:00:00Z", "date_only": false, "value": "2018-10-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-10-12T16:16:15Z", "date_only": false, "value": "2018-10-12T16:16:15", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_release_date.data.3.date", "linked_record": true}, {"timestamp": "2018-10-15T00:00:00Z", "date_only": false, "value": "2018-10-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2018-10-15T18:57:01Z", "date_only": false, "value": "2018-10-15T18:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-10-15T19:00:00Z", "date_only": false, "value": "2018-10-15T19:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2018-17532", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-10-15T19:29:00Z", "date_only": false, "value": "2018-10-15T19:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9936-24WM-39MX", "record": "GHSA-9936-24WM-39MX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2018-10-15T19:29:00Z", "date_only": false, "value": "2018-10-15T19:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-17532", "record": "GSD-2018-17532", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2018-10-15T19:29:01.617Z", "date_only": false, "value": "2018-10-15T19:29:01.617000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_release_date.data.5.date", "linked_record": true}, {"timestamp": "2018-10-15T19:29:01.617Z", "date_only": false, "value": "2018-10-15T19:29:01.617", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-17532", "record": "FKIE_CVE-2018-17532", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2018-10-16T00:00:00Z", "date_only": false, "value": "2018-10-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2018-10-16T00:00:00Z", "date_only": true, "value": "2018-10-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-18494", "record": "CNVD-2019-18494", "field": "submitTime", "linked_record": true}, {"timestamp": "2018-11-30T00:00:00Z", "date_only": false, "value": "2018-11-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2018-11-30T14:12:00Z", "date_only": false, "value": "2018-11-30T14:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-17532", "record": "GSD-2018-17532", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2019-01-04T00:00:00Z", "date_only": false, "value": "2019-01-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2019-06-19T00:00:00Z", "date_only": false, "value": "2019-06-19T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2019-06-19T00:00:00Z", "date_only": true, "value": "2019-06-19", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-18494", "record": "CNVD-2019-18494", "field": "openTime", "linked_record": true}, {"timestamp": "2022-05-14T01:54:36Z", "date_only": false, "value": "2022-05-14T01:54:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9936-24WM-39MX", "record": "GHSA-9936-24WM-39MX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-14T01:54:36Z", "date_only": false, "value": "2022-05-14T01:54:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9936-24WM-39MX", "record": "GHSA-9936-24WM-39MX", "field": "modified", "linked_record": true}, {"timestamp": "2023-11-02T12:15:40Z", "date_only": false, "value": "2023-11-02T12:15:40+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T12:15:40Z", "date_only": false, "value": "2023-11-02T12:15:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:22:30.961Z", "date_only": false, "value": "2023-12-13T01:22:30.961745Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-17532", "record": "GSD-2018-17532", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-05T10:47:05.059Z", "date_only": false, "value": "2024-08-05T10:47:05.059Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2018-17532", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T10:47:05.059Z", "date_only": false, "value": "2024-08-05T10:47:05.059Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2018-17532", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-10-24)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "3e1b3ffd-dadb-4afb-b587-c1201c025ee2"}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-10-28)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "887a7db1-8235-4327-95c9-cdeac07be7da"}, {"timestamp": "2024-11-02T00:00:00Z", "date_only": false, "value": "2024-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-02)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "08e0a554-4e51-4d44-b53e-bcba211d48c1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-05T00:00:00Z", "date_only": false, "value": "2024-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-05)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "acb3e17e-a0ef-45dd-9799-6b835fb63a32", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-09T00:00:00Z", "date_only": false, "value": "2024-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-09)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "1cced538-6a34-4bd5-a22f-7d8a02fc0f64"}, {"timestamp": "2024-11-21T03:54:33.640Z", "date_only": false, "value": "2024-11-21T03:54:33.640000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "sources_update_date.data.4.date", "linked_record": true}, {"timestamp": "2024-11-23T22:12:19.248Z", "date_only": false, "value": "2024-11-23T22:12:19.248000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201810-0455", "record": "VAR-201810-0455", "field": "last_update_date", "linked_record": true}, {"timestamp": "2024-11-24T00:00:00Z", "date_only": false, "value": "2024-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-24)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "134bfc46-1151-4774-a6d3-0974c0528de9"}, {"timestamp": "2024-12-23T00:00:00Z", "date_only": false, "value": "2024-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-23)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "88502a93-f873-4e59-81ed-a0b28d106ebc"}, {"timestamp": "2024-12-26T10:05:42Z", "date_only": false, "value": "2024-12-26T10:05:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6584", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "72b6e144-8a86-40d1-b22d-8a62a7234cf8", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u0441\u043e\u043e\u0431\u0448\u0430\u044e\u0442 \u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Hail Cock \u043d\u0430 \u0431\u0430\u0437\u0435 \u043d\u0430\u0441\u043b\u0435\u0434\u0438\u044f Mirai, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u0445 DigiEver DS-2105 Pro, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE \u0438, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 TP-Link \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0431\u044b\u043b\u0430 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c TXOne \u0422\u0430-\u041b\u0443\u043d \u0419\u0435\u043d\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DefCamp \u0432 \u0411\u0443\u0445\u0430\u0440\u0435\u0441\u0442\u0435, \u0420\u0443\u043c\u044b\u043d\u0438\u044f.\n\nAkamai \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442 \u043d\u0430\u0447\u0430\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043d\u043e\u044f\u0431\u0440\u044f, \u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DigiEver \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Mirai \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-1389 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 TP-Link \u0438 CVE-2018-17532 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Teltonika RUT9XX.\n\n\u041e\u0448\u0438\u0431\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 DigiEver, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 URI \u00ab/cgi-bin/cgi_main.cgi\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0442\u0438\u043f\u0430 \u00abcurl\u00bb \u0438 \u00abchmod\u00bb \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u043e\u043b\u0435 ntp \u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 POST.\n\nAkamai \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0430\u0442\u0430\u043a\u0438, \u043f\u043e\u0445\u043e\u0436\u0438 \u043d\u0430 \u0442\u0435, \u0447\u0442\u043e \u0431\u044b\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0432 \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0422\u0430-\u041b\u0443\u043d \u0419\u0435\u043d\u0430.\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432 \u0441\u0432\u043e\u044e \u0431\u043e\u0442\u0441\u0435\u0442\u044c. \u0423\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u043d\u0438\u0439 cron.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS \u0438\u043b\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Akamai, \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 Mirai \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f XOR \u0438 ChaCha20, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, \u0432\u043a\u043b\u044e\u0447\u0430\u044f x86, ARM \u0438 MIPS.\n\n\u0425\u043e\u0442\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u043c-\u0442\u043e \u043d\u043e\u0432\u044b\u043c, \u043e\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 TTPs \u0441\u0440\u0435\u0434\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai.\n\n\u042d\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0438 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0438 \u0441\u0442\u0440\u043e\u043a \u0438\u0437 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b Mirai.\n\nIoC, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 Yara \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0443\u0433\u0440\u043e\u0437\u044b - \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Akamai.", "url": "https://t.me/true_secator/6584", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-27T00:00:00Z", "date_only": false, "value": "2024-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-27)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "34ff992f-154d-4861-a9d5-e00dfde6d6dc"}, {"timestamp": "2024-12-27T17:32:44.848Z", "date_only": false, "value": "2024-12-27T17:32:44.848943Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lecjguji6s26", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "e419ad27-4096-473c-8733-86f88b3658e7", "url": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lecjguji6s26"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "fa601ccb-550b-468d-bd95-b0d840bfa12d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "4a204ed9-e273-4e7a-b4e2-67d62cad00ad"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "fe94f812-4001-4e3d-bfa8-aba3ce42d62d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "58e21721-1325-468a-b169-56637894ad63"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-30)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "6a15dfbb-4601-4c45-845e-1ebeeb0b5039"}, {"timestamp": "2025-01-30T18:40:05Z", "date_only": false, "value": "2025-01-30T18:40:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6680", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "1b570eef-6895-4cb5-83e8-6bf4c9b7f5d2", "content": "\u041d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Aquabot \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-41710, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 SIP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b Mitel.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Akamai (SIRT) \u0447\u0435\u0440\u0435\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u0438\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 Aquabot, \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0439 \u0432 \u043f\u043e\u043b\u0435 \u0438\u0445 \u0437\u0440\u0435\u043d\u0438\u044f.\n\n\u0412 \u0442\u0440\u0435\u0442\u0438\u0435\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435, Aquabotv3, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430 C2, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433.\n\nCVE-2024-41710 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SIP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b Mitel \u0441\u0435\u0440\u0438\u0439 6800, 6900 \u0438 6900w, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\nMitel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 17 \u0438\u044e\u043b\u044f 2024 \u0433\u043e\u0434\u0430. \u0414\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041a\u0430\u0439\u043b \u0411\u0435\u0440\u043d\u0441 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u043d\u0430 GitHub.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0440\u0443\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 8021xsupport.html, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0443\u044e \u0437\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 802.1x \u0432 SIP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445 Mitel.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430 (/nvdata/etc/local.cfg).\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043a\u043e\u043d\u0446\u0430 \u0441\u0442\u0440\u043e\u043a\u0438 (%dt \u2192 %0d) \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043c, \u043a\u0430\u043a \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (bin.sh) \u0441\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0441\u043a\u0440\u0438\u043f\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 Aquabot \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b (x86, ARM, MIPS \u0438 \u0442.\u0434.), \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0435\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u00abchmod 777\u00bb, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0438\u0447\u0438\u0449\u0430\u0435\u0442 \u0432\u0441\u0435 \u0441\u043b\u0435\u0434\u044b.\n\n\u041f\u043e\u0441\u043b\u0435 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 Aquabotv3 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a C2 \u0447\u0435\u0440\u0435\u0437 TCP \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u043a\u043e\u043c\u0430\u043d\u0434 \u0430\u0442\u0430\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\n\u0417\u0430\u0442\u0435\u043c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IoT, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Mitel, CVE-2018-17532 (TP-Link), CVE-2023-26801 (RCE \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 IoT), CVE-2022-31137 (RCE \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f), RCE Linksys E-series, Hadoop YARN \u0438 CVE-2018-10562 - 10561 (\u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Dasan).\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0442\u0430\u043a\u0436\u0435 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH/Telnet, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e Aquabotv3 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043e\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 DDoS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0445 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a TCP SYN, TCP ACK, UDP, GRE IP \u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u0443\u0441\u043b\u0443\u0433\u0438 \u0432 Telegram \u043f\u043e\u0434 \u0431\u0440\u0435\u043d\u0434\u0430\u043c\u0438 Cursinq Firewall, The Eye Services \u0438 The Eye Botnet, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 DDoS-\u0430\u0442\u0430\u043a.\n\n\u0421\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 Aquabotv3 IoC, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 Snort \u0438 YARA \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/6680", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "f705abcb-ea8f-4b23-8736-973ebcce2191", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "c3b5059d-dd4f-49dd-bfa1-c331d9033eae"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "03e085ea-a33d-422c-88e1-44ccf6a1e622"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-15)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "b8c0d971-9407-441c-9867-6864dafd4bc8"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-23)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "7b541907-e2fb-4ce7-a82e-22a299fea0ae", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-23)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "41a74607-3a0c-401e-818e-de2ce9f692c3"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-26)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "3d8c852f-6f14-47f9-89d8-60b30a56a4ed"}, {"timestamp": "2025-03-30T00:00:00Z", "date_only": false, "value": "2025-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "37d236f3-f5d1-4aaa-80d3-44cbad752d24"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-10)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "0c1f9b07-4fc5-4adc-ba2f-a07be09ac14f"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "da528038-33d4-413c-8adf-c9c40c1376ba"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "70aa0cc9-6bd0-47c1-9c1c-5e1bed333dfa", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "fbf0f5cf-6db4-4e9e-9e94-8d4c47b558c7"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "661976b3-3d73-436b-a48b-b903bda6c057", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2018-17532", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8864b5e6-954c-432f-b765-60d604025a8e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2018-17532", "field": "evidence.0.details.added_date", "uuid": "8864b5e6-954c-432f-b765-60d604025a8e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-31)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "1d52ddb8-4dba-4b9b-a7af-6268d678fec4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2018-17532", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8864b5e6-954c-432f-b765-60d604025a8e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2018-17532", "field": "status.status_updated_at", "uuid": "8864b5e6-954c-432f-b765-60d604025a8e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "6322638f-516a-4c09-80c5-da7b3aefb7f2"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "6402a20b-3337-4745-b53b-d02d7e0b4632"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-11)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "be57c2f0-f933-4a95-bdcb-b053630081f4"}, {"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-14)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "080f636e-bcc1-4484-b525-2331d30723f7"}, {"timestamp": "2026-06-17T01:45:58.813Z", "date_only": false, "value": "2026-06-17T01:45:58.813", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-17532", "record": "FKIE_CVE-2018-17532", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2018-17532", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "8864b5e6-954c-432f-b765-60d604025a8e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:42.735Z", "date_only": false, "value": "2026-06-19T12:42:42.735243Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8864b5e6-954c-432f-b765-60d604025a8e", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "c75a5fda-5c60-4d71-aaf0-c08a5ecbd83c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8864b5e6-954c-432f-b765-60d604025a8e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T12:45:49.104Z", "date_only": false, "value": "2026-06-19T12:45:49.104706Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a277c7aa-82e5-40ed-95bf-8d1e4deb48fb", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "1cac67fa-4110-4e60-aea4-a76b47ca2387", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a277c7aa-82e5-40ed-95bf-8d1e4deb48fb", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:16.662Z", "date_only": false, "value": "2026-06-23T14:03:16.662702Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97af79bf-9a9b-4c65-8357-ef8159a02ba4", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "3cf779a2-07a2-4612-80ec-91b754c0a31a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97af79bf-9a9b-4c65-8357-ef8159a02ba4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-29T10:00:06.852Z", "date_only": false, "value": "2026-06-29T10:00:06.852491Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "2ca34982-f64a-4cb5-b91a-778103344ea5"}, {"timestamp": "2026-06-30T09:23:52.190Z", "date_only": false, "value": "2026-06-30T09:23:52.190876Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4205f4a0-9687-416b-9368-4bf55be1eeb6", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "0ad55217-397e-45b2-9ffd-02d89b53b338", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4205f4a0-9687-416b-9368-4bf55be1eeb6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T10:00:07.018Z", "date_only": false, "value": "2026-06-30T10:00:07.018707Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "39ac2713-bff3-4280-9492-6a95b10a573c"}, {"timestamp": "2026-07-01T05:53:58.119Z", "date_only": false, "value": "2026-07-01T05:53:58.119946Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/27d480f0-5e90-461a-bb7e-f4898993277c", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "dc823333-2a4f-4955-bfa2-5fb1c6b85310", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/27d480f0-5e90-461a-bb7e-f4898993277c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-02T10:00:10.368Z", "date_only": false, "value": "2026-07-02T10:00:10.368665Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "9afcc32e-e82f-4da0-ae53-ed8fecdd905a"}, {"timestamp": "2026-07-02T10:15:07.430Z", "date_only": false, "value": "2026-07-02T10:15:07.430256Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "6eca4d74-7b11-44f8-9aaf-0057dd0f5e9d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-06T10:00:07.405Z", "date_only": false, "value": "2026-07-06T10:00:07.405040Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-05)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "e9ba994d-ba96-4c4f-8fd5-ba106962ead3"}, {"timestamp": "2026-07-07T10:00:20.625Z", "date_only": false, "value": "2026-07-07T10:00:20.625035Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-06)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "0cc0fb0f-678f-4480-9c1e-8c97d0d18017"}, {"timestamp": "2026-07-08T10:00:19.615Z", "date_only": false, "value": "2026-07-08T10:00:19.615977Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-07)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "739517ce-3a09-4260-9e42-02ff6d11e3b8"}, {"timestamp": "2026-07-09T10:00:10.704Z", "date_only": false, "value": "2026-07-09T10:00:10.704595Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-08)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "9277fe3c-b7ed-492a-8e78-79f318350f27"}, {"timestamp": "2026-07-18T10:00:08.253Z", "date_only": false, "value": "2026-07-18T10:00:08.253273Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-17)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "14a751b1-3b1c-4d1c-9186-6f01821bf0cc"}, {"timestamp": "2026-07-19T10:00:05.990Z", "date_only": false, "value": "2026-07-19T10:00:05.990969Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "e4199bb1-34d8-4725-a11e-3aaeba5c4a1d"}, {"timestamp": "2026-07-19T10:15:10.889Z", "date_only": false, "value": "2026-07-19T10:15:10.889322Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "b2234b75-b2d5-4777-86da-4f492b56cd46", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T10:00:11.370Z", "date_only": false, "value": "2026-07-20T10:00:11.370941Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-19)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "f2e667d5-4454-4ce6-bf07-f0e2383a8f0c"}, {"timestamp": "2026-07-21T10:00:07.820Z", "date_only": false, "value": "2026-07-21T10:00:07.820385Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-20)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "0bd71e38-981f-4f5a-aa70-88c0300b609f"}, {"timestamp": "2026-07-28T10:00:06.509Z", "date_only": false, "value": "2026-07-28T10:00:06.509672Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "ffbebe65-108a-4a82-9fa8-972019bfc119"}, {"timestamp": "2026-07-28T10:15:24.507Z", "date_only": false, "value": "2026-07-28T10:15:24.507038Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "b126ddaf-5cd5-43cd-8e6c-eb32039626fc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-02T10:42:52.817Z", "date_only": false, "value": "2026-08-02T10:42:52.817291Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "306ea9b4-040d-4292-8f0f-15d622af180c"}, {"timestamp": "2026-08-02T11:02:50.040Z", "date_only": false, "value": "2026-08-02T11:02:50.040455Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-01)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "03835554-efbd-41bd-82f3-124dd05c5167", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-05T10:00:08.171Z", "date_only": false, "value": "2026-08-05T10:00:08.171844Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "49442849-e2a6-4b22-991b-1b91350a2a42"}, {"timestamp": "2026-08-05T10:15:15.787Z", "date_only": false, "value": "2026-08-05T10:15:15.787211Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "d1a0a55e-6ea5-40a1-9c28-cfa696cbe4c6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-12T10:15:11.058Z", "date_only": false, "value": "2026-08-12T10:15:11.058931Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "bfa6820f-c887-4b03-b729-7c9ff65d79c4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T10:00:12.739Z", "date_only": false, "value": "2026-08-14T10:00:12.739902Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "4c3c7790-ae4c-4efa-b20d-2dbf492bf969"}, {"timestamp": "2026-08-22T10:15:09.305Z", "date_only": false, "value": "2026-08-22T10:15:09.305291Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "a75c7b92-1fe0-4da4-aa9f-35f53df7d615", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T10:00:06.174Z", "date_only": false, "value": "2026-08-24T10:00:06.174657Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "8be7f7a8-3f6e-4ce7-91bf-db2937dbe580"}, {"timestamp": "2026-08-25T10:00:21.316Z", "date_only": false, "value": "2026-08-25T10:00:21.316631Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-24)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "150ca60a-986b-4dbd-9736-2b7c00988a77"}, {"timestamp": "2026-08-28T10:00:08.988Z", "date_only": false, "value": "2026-08-28T10:00:08.988474Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "2f921d7a-32a8-4239-81c5-647a90099aa1"}, {"timestamp": "2026-08-30T10:00:06.008Z", "date_only": false, "value": "2026-08-30T10:00:06.008271Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "6408fcc8-d0ec-4100-8f55-90675be82ced"}, {"timestamp": "2026-09-01T10:15:09.632Z", "date_only": false, "value": "2026-09-01T10:15:09.632484Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "35a4b9d0-d41a-4745-892a-7827021abfac", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-04T10:00:13.294Z", "date_only": false, "value": "2026-09-04T10:00:13.294117Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "8c4f0b58-7415-4a1a-babf-b9ce5ca822c7"}, {"timestamp": "2026-09-07T10:00:09.170Z", "date_only": false, "value": "2026-09-07T10:00:09.170714Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-06)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "fbc01e30-9340-4dbf-bb0f-1a68f36d944f"}, {"timestamp": "2026-09-08T10:00:10.548Z", "date_only": false, "value": "2026-09-08T10:00:10.548293Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "cd36abf4-6b19-4ac6-9275-7d3dd7405372"}, {"timestamp": "2026-09-16T10:15:16.958Z", "date_only": false, "value": "2026-09-16T10:15:16.958072Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "72c6f9cf-a9b5-45f3-9155-47cd93693d92", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T10:00:08.644Z", "date_only": false, "value": "2026-09-20T10:00:08.644977Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-19)", "record": "CVE-2018-17532", "field": "creation_timestamp", "uuid": "0a31f510-9816-4f58-8df1-ce7df6e2deaf"}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": false, "value": "2026-11-11T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.last_seen_at", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": true, "value": "2026-11-11", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2018-17532", "field": "evidence.0.details.observation_date", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": false, "value": "2026-11-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2018-17532", "field": "status.status_updated_at", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-13T01:00:01Z", "date_only": false, "value": "2026-11-13T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-13T01:37:31.094Z", "anchors": {"origin": {"timestamp": "2018-10-11T00:00:00Z", "date_only": false, "value": "2018-10-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2018-10-11T00:00:00Z", "date_only": false, "value": "2018-10-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2023-11-02T12:15:40Z", "date_only": false, "value": "2023-11-02T12:15:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 159711340.0, "hours": 44364.26111111111, "days": 1848.5108796296297, "min_seconds": 159624940.0, "max_seconds": 159711340.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-10-11T00:00:00Z", "date_only": false, "value": "2018-10-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-11-02T12:15:40Z", "date_only": false, "value": "2023-11-02T12:15:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 159711340.0, "hours": 44364.26111111111, "days": 1848.5108796296297, "min_seconds": 159624940.0, "max_seconds": 159711340.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-10-11T00:00:00Z", "date_only": false, "value": "2018-10-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-11-02T12:15:40Z", "date_only": false, "value": "2023-11-02T12:15:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 255317851.094663, "hours": 70921.62530407305, "days": 2955.067721003044, "min_seconds": 255231451.094663, "max_seconds": 255317851.094663, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-10-11T00:00:00Z", "date_only": false, "value": "2018-10-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2018-17532", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T01:37:31.094Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 95606511.094663, "hours": 26557.364192961944, "days": 1106.5568413734143, "min_seconds": 95606511.094663, "max_seconds": 95606511.094663, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-02T12:15:40Z", "date_only": false, "value": "2023-11-02T12:15:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2018-17532", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "27d480f0-5e90-461a-bb7e-f4898993277c", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-13T01:37:31.094Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}