{"metadata": {"vulnerability": "cve-2022-41080", "count": 84, "kinds": {"milestone": 7, "sighting": 36, "kev": 11, "other": 30}}, "data": [{"timestamp": "2022-09-19T00:00:00Z", "date_only": false, "value": "2022-09-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-41080", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-30T08:40:20Z", "date_only": false, "value": "2022-09-30T08:40:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_14/2022", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "ae5e051a-93a7-4503-abe4-ab7c624d4023", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_14/2022"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41080", "record": "MSRC_CVE-2022-41080", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41080", "record": "MSRC_CVE-2022-41080", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2022-41080", "field": "containers.cna.datePublic"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41080", "record": "MSRC_CVE-2022-41080", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-08T23:00:00Z", "date_only": false, "value": "2022-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1980", "record": "WID-SEC-W-2022-1980", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-08T23:00:00Z", "date_only": false, "value": "2022-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1980", "record": "WID-SEC-W-2022-1980", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-08T23:00:00Z", "date_only": false, "value": "2022-11-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1980", "record": "WID-SEC-W-2022-1980", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1015", "record": "CERTFR-2022-AVI-1015", "field": "initial_release_date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-41080", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1015", "record": "CERTFR-2022-AVI-1015", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-09T14:40:05Z", "date_only": false, "value": "2022-11-09T14:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3680", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "ed810e04-0d03-4a2b-b85c-916eed27c5c2", "content": "\u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 Patch Tuesday \u043e\u0442 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 68 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 6 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day.\n\n\u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445: 12 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, 2 -\u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0438 55 - \u0432\u0430\u0436\u043d\u044b\u0435.\n\n\u041f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c: 27 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 4 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 16 - RCE, 11 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 6 - DoS, 3 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0438\u0437\u044e\u043c\u0438\u043d\u043a\u0430 \u043f\u0430\u0442\u0447\u0430 - \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 CVE \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Exchange Server, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a\u0430\u043a ProxyNotShell.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0436\u0435, \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n- CVE-2022-41128: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u044f\u0437\u044b\u043a\u0430\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 Windows, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041a\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u043c \u041b\u0435\u0441\u0438\u043d\u0435\u043c \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google. \u0411\u0430\u0433\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 Windows \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443.\n\n- CVE-2022-41091: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows Mark of the Web Security Bypass. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 MOTW, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0432 Microsoft Office. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 Mark of the Web, \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0423\u0438\u043b\u043b\u043e\u043c \u0414\u043e\u0440\u043c\u0430\u043d\u043d\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 Zip-\u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows.\n\n- CVE-2022-41073: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u043e\u043c Microsoft Threat Intelligence Center (MSTIC). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0439\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n- CVE-2022-41125: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 Windows CNG, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Microsoft Threat Intelligence Center (MSTIC) \u0438 Microsoft Security Response Center (MSRC).\n\n- CVE-2022-41040: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Exchange Server, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 GTSC \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Zero Dat. \u041f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c PowerShell \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n- CVE-2022-41082: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Microsoft Exchange, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 GTSC \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Zero Dat. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u2014 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows\u00a0Kerberos (CVE-2022-37967),\u00a0Kerberos RC4-HMAC (CVE-2022-37966) \u0438 Microsoft Exchange Server (CVE-2022-41080) \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 Windows Hyper-V (CVE-2022-38015).\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u044d\u0442\u0438\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0440\u044f\u0434 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u043e\u0447\u043a\u0430-\u0442\u043e\u0447\u043a\u0430 (PPTP), Microsoft Excel, Word, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 ODBC, Office Graphics, SharePoint Server, JScript9, Chakra \u0438 Visual Studio, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u044f\u0434 \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Win32k, Overlay Filter \u0438 Group Policy.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0432 Patch Tuesday \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/3680"}, {"timestamp": "2022-11-09T22:15:00Z", "date_only": false, "value": "2022-11-09T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2CWH-G5WF-MFH8", "record": "GHSA-2CWH-G5WF-MFH8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-09T22:15:00Z", "date_only": false, "value": "2022-11-09T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-41080", "record": "GSD-2022-41080", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-09T22:15:21.550Z", "date_only": false, "value": "2022-11-09T22:15:21.550", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41080", "record": "FKIE_CVE-2022-41080", "field": "published"}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": true, "value": "2022-11-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-89608", "record": "CNVD-2022-89608", "field": "submitTime"}, {"timestamp": "2022-11-10T00:46:25Z", "date_only": false, "value": "2022-11-10T00:46:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/52770", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "552e0e37-05e4-41dc-8661-4786661e7d3c", "content": "\u203c CVE-2022-41080 \u203c\n\nMicrosoft Exchange Server Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41123.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/52770"}, {"timestamp": "2022-11-10T12:01:04Z", "date_only": false, "value": "2022-11-10T12:01:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2CWH-G5WF-MFH8", "record": "GHSA-2CWH-G5WF-MFH8", "field": "published"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1015", "record": "CERTFR-2022-AVI-1015", "field": "last_revision_date"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1015", "record": "CERTFR-2022-AVI-1015", "field": "revisions.1.revision_date"}, {"timestamp": "2022-12-15T08:00:00Z", "date_only": false, "value": "2022-12-15T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41080", "record": "MSRC_CVE-2022-41080", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-12-15T08:00:00Z", "date_only": false, "value": "2022-12-15T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41080", "record": "MSRC_CVE-2022-41080", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-20T23:00:00Z", "date_only": false, "value": "2022-12-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1980", "record": "WID-SEC-W-2022-1980", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-12-20T23:00:00Z", "date_only": false, "value": "2022-12-20T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1980", "record": "WID-SEC-W-2022-1980", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-21T14:45:32Z", "date_only": false, "value": "2022-12-21T14:45:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/crackcodes/1913", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "03c873c8-f397-4af5-be9c-6ce349908cda", "content": "\ud83d\udca5OWASSRF: CrowdStrike Identifies New Exploit Method for Exchange Bypassing ProxyNotShell Mitigations\n\nCrowdStrike recently discovered a new exploit method (called OWASSRF) consisting of CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution (RCE) through Outlook Web Access (OWA). The new exploit method bypasses URL rewrite mitigations for the Autodiscover endpoint provided by Microsoft in response to ProxyNotShell.\nAfter initial access via this new exploit method, the threat actor leveraged legitimate Plink and AnyDesk executables to maintain access, and performed anti-forensics techniques on the Microsoft Exchange server in an attempt to hide their activity.", "url": "https://t.me/crackcodes/1913"}, {"timestamp": "2022-12-21T15:13:09Z", "date_only": false, "value": "2022-12-21T15:13:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/82970", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "3d539450-314e-40f3-8410-c34e01d4f25e", "content": "New Microsoft Exchange exploit chain lets ransomware attackers in (CVE-2022-41080)\n\nhttps://ift.tt/1Wagh7V", "url": "https://t.me/ctinow/82970"}, {"timestamp": "2022-12-23T00:00:00Z", "date_only": true, "value": "2022-12-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-89608", "record": "CNVD-2022-89608", "field": "openTime"}, {"timestamp": "2022-12-23T11:53:39Z", "date_only": false, "value": "2022-12-23T11:53:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b65aab02-f091-4c4c-a59e-067cb0f5abfe", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "86bb3e09-c9df-480c-b369-53aba1fb82c1"}, {"timestamp": "2022-12-23T12:02:04Z", "date_only": false, "value": "2022-12-23T12:02:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4333252e-4558-4c4f-a119-c8f7ce69cee9", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "f556b55f-3dc7-43de-9906-c07ec657c460"}, {"timestamp": "2023-01-06T10:02:47Z", "date_only": false, "value": "2023-01-06T10:02:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2928", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "de239757-85c8-4112-aef5-8496bcf883d8", "content": "Rackspace confirmed that the Play ransomware gang was responsible for last month's breach. The attack used a zero-day exploit related to CVE-2022-41080 to gain initial access to the company's email environment.\n\nRead: https://thehackernews.com/2023/01/rackspace-confirms-play-ransomware-gang.html", "url": "https://t.me/thehackernews/2928"}, {"timestamp": "2023-01-09T09:22:44Z", "date_only": false, "value": "2023-01-09T09:22:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Web_Security_Live/46", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "2994450c-72f9-4d5b-b534-7cf5db3ddfc7", "content": "\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u043a\u0438\u0431\u0435\u0440\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Play \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 Rackspace\n\nRackspace \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 , \u0447\u0442\u043e \u0437\u0430 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0443\u044e 2 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Play. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b Rackspace Hosted Exchange, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f.\n\n\u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-41080 . \u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u0435 Rackspace, \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u0443\u043c\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f\u043c-\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430\u043c, \u0441\u043f\u0438\u0441\u043a\u0430\u043c \u0437\u0430\u0434\u0430\u0447, \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0435 \u0438 \u043f\u0440\u043e\u0447\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 PST-\u0444\u0430\u0439\u043b\u0430\u0445 (Personal Storage Table) 27 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Rackspace. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0421\u0435\u0439\u0447\u0430\u0441 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 Hosted Exchange \u0438 \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 30 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Microsoft 365.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u043b\u0438 Rackspace \u0432\u044b\u043a\u0443\u043f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043e\u0442\u0447\u0435\u0442\u043e\u043c \u0418\u0411-\u0444\u0438\u0440\u043c\u044b Crowdstrike, \u043f\u0440\u043e\u043b\u0438\u0432\u0448\u0435\u0439 \u0441\u0432\u0435\u0442 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Play. \u0422\u0435\u0445\u043d\u0438\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 OWASSRF, \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Exchange, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-41040 \u0438 CVE-2022-41082 . \u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2022-41080 \u0438 CVE-2022-41082, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043e\u0431\u0445\u043e\u0434 \u043f\u0440\u0430\u0432\u0438\u043b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 Outlook Web Access (OWA).\n\n\ud83d\udd18 https://t.me/web_security_live", "url": "https://t.me/Web_Security_Live/46"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-41080", "field": "timestamps.asserted_at", "uuid": "b882a43b-1001-4763-b9da-fc8855266442", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-41080", "field": "timestamps.asserted_at", "uuid": "6dad1659-8c87-456b-aafb-f9ee0155c43a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": true, "value": "2023-01-10", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-41080", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-41080", "field": "evidence.0.details.added_date", "uuid": "6dad1659-8c87-456b-aafb-f9ee0155c43a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": true, "value": "2023-01-10", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-41080", "field": "evidence.0.details.date_added", "uuid": "b882a43b-1001-4763-b9da-fc8855266442", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-41080", "field": "timestamps.first_seen_at", "uuid": "b882a43b-1001-4763-b9da-fc8855266442", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-41080", "field": "timestamps.first_seen_at", "uuid": "6dad1659-8c87-456b-aafb-f9ee0155c43a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-41080", "field": "status.status_updated_at", "uuid": "b882a43b-1001-4763-b9da-fc8855266442", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-41080", "field": "status.status_updated_at", "uuid": "6dad1659-8c87-456b-aafb-f9ee0155c43a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-41080", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-01-11T12:23:54Z", "date_only": false, "value": "2023-01-11T12:23:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/86192", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "d9027ce4-a419-495d-a8f8-d7558ca5e0b5", "content": "US CISA adds MS Exchange bug CVE-2022-41080 to its\u00a0Known Exploited Vulnerabilities Catalog\n\nhttps://ift.tt/JdfhqY5", "url": "https://t.me/ctinow/86192"}, {"timestamp": "2023-01-11T17:07:00Z", "date_only": false, "value": "2023-01-11T17:07:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/JxV335mrXGLLRIW6QB2RVD8PIHG1CoHToTf_G5RxZm2BaC0", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "acd0f8b0-be96-4c9d-a7b0-d78867fc57da"}, {"timestamp": "2023-01-17T18:06:22Z", "date_only": false, "value": "2023-01-17T18:06:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jokerplstaeen/12090", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "4e739357-8867-4b20-829c-d5853d54057d", "content": "\u200f\u0627\u0644\u0645\u0633\u0624\u0648\u0644\u064a\u0646 \u0639\u0646 \u0628\u0631\u0645\u062c\u064a\u0629 \u200e#\u0627\u0644\u0641\u062f\u064a\u0629 Cuba \u062a\u0633\u062a\u0645\u0631 \u0628\u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0627\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0627\u0644\u0645\u062a\u0623\u062b\u0631\u0629 \u0628\u062b\u063a\u0631\u0629 OWASSRF CVE-2022-41080  \u0628\u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u0645\u0644\u0641\u0627\u062a\u060c \u0648\u0635\u0644 \u0639\u062f\u062f \u0627\u0644\u0645\u0635\u0627\u0628\u064a\u0646 \u0628\u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0641\u0648\u0642 \u0661\u0660\u0660 \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645.\n\u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \nbleepingcomputer.com/news/security/\u2026\u200e", "url": "https://t.me/jokerplstaeen/12090"}, {"timestamp": "2023-01-31T00:00:00Z", "date_only": true, "value": "2023-01-31", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-41080", "field": "evidence.0.details.due_date", "uuid": "b882a43b-1001-4763-b9da-fc8855266442", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T09:19:54Z", "date_only": false, "value": "2023-02-21T09:19:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jokerplstaeen/13523", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "6ff57699-bb24-4ae7-98d2-27b726cd33a0", "content": "\u200f\u0627\u0644\u0645\u0633\u0624\u0648\u0644\u064a\u0646 \u0639\u0646 \u0628\u0631\u0645\u062c\u064a\u0629 \u200e#\u0627\u0644\u0641\u062f\u064a\u0629 Cuba \u062a\u0633\u062a\u0645\u0631 \u0628\u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0627\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0627\u0644\u0645\u062a\u0623\u062b\u0631\u0629 \u0628\u062b\u063a\u0631\u0629 OWASSRF CVE-2022-41080  \u0628\u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u0645\u0644\u0641\u0627\u062a\u060c \u0648\u0635\u0644 \u0639\u062f\u062f \u0627\u0644\u0645\u0635\u0627\u0628\u064a\u0646 \u0628\u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0641\u0648\u0642 \u0661\u0660\u0660 \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645.\n\u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a", "url": "https://t.me/jokerplstaeen/13523"}, {"timestamp": "2023-06-13T17:15:00Z", "date_only": false, "value": "2023-06-13T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-41080", "record": "GSD-2022-41080", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "6fdd7ecc-5e63-444e-b8b8-520d7bb2d70a"}, {"timestamp": "2023-08-10T10:27:29Z", "date_only": false, "value": "2023-08-10T10:27:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3054", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "f4b8d0d7-272f-4124-b8b7-a3f88e94d90c", "content": "\u200b\u26a1\ufe0f\u041d\u0435\u0432\u0435\u0440\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Microsoft \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c\u0443 \u0433\u0440\u043e\u043c\u043a\u043e\u043c\u0443 \u0432\u0437\u043b\u043e\u043c\u0443 \u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438.\n\n\ud83d\udcac \u0412\u0441\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u2014 \u0432\u0437\u043b\u043e\u043c\u0430 \u0418\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u044b \u043e\u0441\u0432\u0435\u0449\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434, \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Microsoft Exchange. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u043e \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0434\u043e 40 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0436\u0438\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0418\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0432 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a. \u041e\u043d\u0438 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u043e\u0438 \u0441\u0435\u0442\u0438 \u0435\u0449\u0451 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0435\u0449\u0451 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2021 \u0433\u043e\u0434\u0430. \u0422\u043e \u0435\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0441\u0435\u0442\u0438 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438 \u0446\u0435\u043b\u044b\u0445 14 \u043c\u0435\u0441\u044f\u0446\u0435\u0432, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0438\u0445 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u043f\u0440\u043e\u0433\u043d\u0430\u043b\u0438 \u043e\u0442\u0442\u0443\u0434\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u044f \u043f\u043e \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0435 \u0436\u0434\u0430\u043b\u0430 \u0435\u0449\u0451 \u0434\u0435\u0432\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043f\u043e\u0441\u043b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0435.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u0430\u0434\u0440\u0435\u0441\u0430 \u043b\u044e\u0434\u0435\u0439, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0432\u044b\u0431\u043e\u0440\u0430\u0445 \u0441 2014 \u043f\u043e 2022 \u0433\u043e\u0434. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0442\u044c 40 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0447\u0435\u043b\u043e\u0432\u0435\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u044f \u043f\u043e\u043a\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0430 \u043d\u0438 \u043f\u0440\u0438\u0447\u0438\u043d\u0443 \u0432\u0437\u043b\u043e\u043c\u0430, \u043d\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0435 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c\u0438, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Microsoft Exchange Server, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u044f\u0449\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a CVE-2022-41080 \u0438 CVE-2022-41082 , \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u043e\u0434 \u043e\u0431\u0449\u0438\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c ProxyNotShell, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u041e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0431\u043e\u043b\u0435\u0435 \u043c\u0435\u0441\u044f\u0446\u0430 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u044b, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0430 \u043d\u0443\u0436\u043d\u044b\u043c \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043b\u0438\u0448\u044c 8 \u043d\u043e\u044f\u0431\u0440\u044f, \u0447\u0435\u0440\u0435\u0437 \u0448\u0435\u0441\u0442\u044c \u043d\u0435\u0434\u0435\u043b\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f.\n\n\u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041a\u0435\u0432\u0438\u043d \u0411\u043e\u043c\u043e\u043d\u0442 \u0441\u043e\u043e\u0431\u0449\u0438\u043b , \u0447\u0442\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Microsoft \u043c\u0435\u0440\u044b \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u043e\u0439\u0442\u0438. \u0412\u0447\u0435\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043d\u043e\u0432\u0430 \u043f\u0440\u043e\u0448\u0451\u043b\u0441\u044f \u0441 \u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0439 \u043f\u043e Microsoft: \u0432\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0437\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u0448\u043b\u043e \u0430\u0436 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430.\n\n\u0421\u0441\u044b\u043b\u0430\u044f\u0441\u044c \u043d\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Shodan, \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u044f \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 Exchange \u0441 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c Outlook. \u041f\u043e\u0438\u0441\u043a \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0440\u0430\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u041f\u041e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u2014 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u043c\u0435\u0441\u044f\u0446, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0414\u0430\u043d\u043d\u044b\u0439 \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u043e \u0442\u043e\u043c \u0443\u0449\u0435\u0440\u0431\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0430\u043d\u0435\u0441\u0451\u043d \u043f\u0440\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u041f\u041e \u0432 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u0445. \u0422\u0430\u043a\u0436\u0435 \u044d\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438\u043b\u0438 \u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3054"}, {"timestamp": "2023-12-13T01:19:32.841Z", "date_only": false, "value": "2023-12-13T01:19:32.841211Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-41080", "record": "GSD-2022-41080", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-22T05:00:58.328Z", "date_only": false, "value": "2023-12-22T05:00:58.328537Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-41080", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2023-12-22T05:00:58.328Z", "date_only": false, "value": "2023-12-22T05:00:58.328537Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41080", "record": "FKIE_CVE-2022-41080", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-03T12:35:48.787Z", "date_only": false, "value": "2024-08-03T12:35:48.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-41080", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:37:40.176Z", "date_only": false, "value": "2024-08-15T17:37:40.176+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1980", "record": "WID-SEC-W-2022-1980", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-24T20:33:40.548Z", "date_only": false, "value": "2024-12-24T20:33:40.548069Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971754", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "1e710642-4817-411d-8ebf-0f810d74f21a", "url": "https://feedsin.space/feed/CISAKevBot/items/2971754"}, {"timestamp": "2025-01-02T21:31:19.558Z", "date_only": false, "value": "2025-01-02T21:31:19.558Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41080", "record": "MSRC_CVE-2022-41080", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-23T02:10:39Z", "date_only": false, "value": "2025-02-23T02:10:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "6cfa9df6-ac73-4b0d-8f3f-a96fa5496603"}, {"timestamp": "2025-10-21T23:15:31.953Z", "date_only": false, "value": "2025-10-21T23:15:31.953Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-41080", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:37Z", "date_only": false, "value": "2025-10-22T00:32:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2CWH-G5WF-MFH8", "record": "GHSA-2CWH-G5WF-MFH8", "field": "modified"}, {"timestamp": "2026-02-02T12:27:06.502Z", "date_only": false, "value": "2026-02-02T12:27:06.502838Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbf6e29d-12c3-4248-a032-2e9274509e34", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "7b1059f5-6ae7-4380-a12e-3e9ea97b9249", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbf6e29d-12c3-4248-a032-2e9274509e34"}, {"timestamp": "2026-02-02T12:27:06.502Z", "date_only": false, "value": "2026-02-02T12:27:06.502838Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbf6e29d-12c3-4248-a032-2e9274509e34", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "baae069e-ed07-4aa9-a9ee-913c5642c644", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbf6e29d-12c3-4248-a032-2e9274509e34"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-41080", "field": "timestamps.recorded_at", "uuid": "b882a43b-1001-4763-b9da-fc8855266442", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-06T22:37:51Z", "date_only": false, "value": "2026-02-06T22:37:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4333252e-4558-4c4f-a119-c8f7ce69cee9", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "f379a0ce-b1bf-462b-bc84-33be4be75498"}, {"timestamp": "2026-02-06T22:42:07Z", "date_only": false, "value": "2026-02-06T22:42:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b65aab02-f091-4c4c-a59e-067cb0f5abfe", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "3f41f479-0908-4d45-ba71-4b734e6dcd2a"}, {"timestamp": "2026-04-08T07:25:51Z", "date_only": false, "value": "2026-04-08T07:25:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "3a4dd0fd-cfd7-4b13-b847-4be89f8df432"}, {"timestamp": "2026-04-18T13:07:24Z", "date_only": false, "value": "2026-04-18T13:07:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "47487017-5a14-4176-a369-474576d64b31"}, {"timestamp": "2026-06-19T12:47:00.318Z", "date_only": false, "value": "2026-06-19T12:47:00.318171Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c8441aa2-3e9c-4b01-a953-c8e8665ab32e", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "3ebceaa9-e56b-48b7-af49-275a48f98b97", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c8441aa2-3e9c-4b01-a953-c8e8665ab32e"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-41080", "field": "timestamps.recorded_at", "uuid": "6dad1659-8c87-456b-aafb-f9ee0155c43a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:03.126Z", "date_only": false, "value": "2026-06-23T11:14:03.126419Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6dad1659-8c87-456b-aafb-f9ee0155c43a", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "ad07840c-93dd-4aff-89c0-207e43eab9b3", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6dad1659-8c87-456b-aafb-f9ee0155c43a"}, {"timestamp": "2026-06-23T14:05:36.331Z", "date_only": false, "value": "2026-06-23T14:05:36.331447Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d39493d-7b71-4894-8fa8-6db710423079", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "5f5c0c56-679b-425f-9e05-fe6815dcb951", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d39493d-7b71-4894-8fa8-6db710423079"}, {"timestamp": "2026-07-29T12:03:11.271Z", "date_only": false, "value": "2026-07-29T12:03:11.271579Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2177", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "fbdcf5f1-a858-4a16-b1de-d972e25e9548", "url": "https://t.me/cisoclub/2177"}, {"timestamp": "2026-07-30T00:02:58.424Z", "date_only": false, "value": "2026-07-30T00:02:58.424404Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2177", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "a3e060bc-2318-45bc-8f3a-64198700ef43", "url": "https://t.me/cisoclub/2177"}, {"timestamp": "2026-08-03T21:00:04.226Z", "date_only": false, "value": "2026-08-03T21:00:04.226951Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2177", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "d57320d8-4eb1-4b2d-a84a-4fdfa0e68c0d", "url": "https://t.me/cisoclub/2177"}, {"timestamp": "2026-08-04T00:00:13.210Z", "date_only": false, "value": "2026-08-04T00:00:13.210869Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2177", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "bc3a5e7e-4ceb-4de1-8e36-06fee362126d", "url": "https://t.me/cisoclub/2177"}, {"timestamp": "2026-08-10T15:11:25.822Z", "date_only": false, "value": "2026-08-10T15:11:25.822Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-41080", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:11:25.822Z", "date_only": false, "value": "2026-08-10T15:11:25.822Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2022-41080", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-10T16:18:19.843Z", "date_only": false, "value": "2026-08-10T16:18:19.843", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41080", "record": "FKIE_CVE-2022-41080", "field": "lastModified"}, {"timestamp": "2026-09-01T20:01:11.535Z", "date_only": false, "value": "2026-09-01T20:01:11.535296Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/84953", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "0b480194-9f20-4c42-a574-eff176661bd4", "url": "https://t.me/hacking_Attack/84953"}, {"timestamp": "2026-09-01T20:01:12.742Z", "date_only": false, "value": "2026-09-01T20:01:12.742968Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81456", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "25ffea11-3609-481a-9181-95c1e65dc998", "url": "https://t.me/hacking_Attack/81456"}, {"timestamp": "2026-09-02T01:00:11.938Z", "date_only": false, "value": "2026-09-02T01:00:11.938308Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "bb46b2a5-d2bd-493d-831f-befefc0d6640"}, {"timestamp": "2026-09-03T00:00:54.401Z", "date_only": false, "value": "2026-09-03T00:00:54.401765Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "0f31f11d-f5a7-4a74-9b75-1040649c94c3"}, {"timestamp": "2026-09-05T00:00:08.722Z", "date_only": false, "value": "2026-09-05T00:00:08.722805Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81456", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "085d5bb9-a40f-47ea-8e09-4a67a6893023", "url": "https://t.me/hacking_Attack/81456"}, {"timestamp": "2026-09-05T00:00:10.407Z", "date_only": false, "value": "2026-09-05T00:00:10.407944Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/84953", "record": "CVE-2022-41080", "field": "creation_timestamp", "uuid": "792c6d8f-9cf8-4262-8e3e-49d1cfe0cae4", "url": "https://t.me/hacking_Attack/84953"}]}