Активная эксплуатация уязвимостей интерфейса Web Management User Interface программного обеспечения Cisco IOS XE - SEC-1275-1
Tags
| attack-pattern: | Javascript - T1059.007 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 34701532-2d13-4ac8-ae45-9109e05213a9 |
| Fingerprint | a41274bf48924e79 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Oct. 27, 2023, midnight |
| Added to db | Oct. 27, 2023, 7:46 a.m. |
| Last updated | Nov. 15, 2024, 10:46 a.m. |
| Headline | Активная эксплуатация уязвимостей интерфейса Web Management User Interface программного обеспечения Cisco IOS XE |
| Title | Активная эксплуатация уязвимостей интерфейса Web Management User Interface программного обеспечения Cisco IOS XE - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 7/1/8 |
Source URLs
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 117 | cve-2023-20198 |
|
| Details | CVE | 63 | cve-2023-20273 |
|
| Details | File | 23 | logoutconfirm.html |
|
| Details | sha1 | 8 | 0ff4fbf0ecffa77ce8d3852a29263e263838e9bb |
|
| Details | IPv4 | 12 | 154.53.56.231 |
|
| Details | IPv4 | 3 | 154.53.63.93 |
|
| Details | IPv4 | 12 | 5.149.249.74 |
|
| Details | Url | 12 | https://deviceip/webui/logoutconfirm.html?logon_hash=1 |