{"vulnerability": "cve-2021-2001", "sightings": [{"uuid": "4a056566-a07f-47af-b786-0f8048726ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "4ac51048-9f89-44b0-be73-2998f7cca759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "e14dfab9-ff3b-4eb2-993c-146f470cbab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "MISP/d81c3a80-018d-413d-9f11-59aa0c67e761", "content": "", "creation_timestamp": "2021-05-24T09:56:40.000000Z"}, {"uuid": "b19c3015-a09b-4637-bc63-0848489411a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:42.000000Z"}, {"uuid": "897dd685-cc8d-4387-95cc-019dd916ec67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "MISP/831d2060-6bb9-467c-9f2c-961ae0651829", "content": "", "creation_timestamp": "2021-06-07T13:36:14.000000Z"}, {"uuid": "2f34edd0-2fda-49e1-af24-b416f1afcc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "seen", "source": "MISP/f3c1e323-31de-4d65-8352-3e2bb30e683f", "content": "", "creation_timestamp": "2024-11-14T06:09:37.000000Z"}, {"uuid": "e45f1ebf-06e2-4042-bb9a-aa435bc3b8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970923", "content": "", "creation_timestamp": "2024-12-24T20:21:48.314764Z"}, {"uuid": "f9668158-a746-42f6-a60a-53e32172fbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:51.000000Z"}, {"uuid": "bb153168-9ddd-42f5-89c2-eef4efb4d28f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lnynambdqx2k", "content": "", "creation_timestamp": "2025-04-30T01:26:08.802875Z"}, {"uuid": "b1ba96e7-19c4-4ca0-b36b-1a016c83ba0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lnyt7gpu6h2s", "content": "", "creation_timestamp": "2025-04-30T03:12:50.805072Z"}, {"uuid": "9a82d02d-0b23-40f1-9d12-f8ead0dec77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lo2i7xbynu2g", "content": "", "creation_timestamp": "2025-04-30T19:01:36.528380Z"}, {"uuid": "9fa59514-9796-4fed-a84f-6f854040bb98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lo2wrhrp3k2x", "content": "", "creation_timestamp": "2025-04-30T23:21:57.389164Z"}, {"uuid": "b576eaf0-d981-4a28-939d-6f2c23af4150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lp6eaioi2g2c", "content": "", "creation_timestamp": "2025-05-15T01:26:10.928471Z"}, {"uuid": "f9b12061-ea76-4473-b304-9d63e128ffbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lp6j3qxtw32v", "content": "", "creation_timestamp": "2025-05-15T02:53:00.481918Z"}, {"uuid": "7e9eac63-6bf5-432a-8065-740582818a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lp7v6o7eaz2o", "content": "", "creation_timestamp": "2025-05-15T16:02:11.683944Z"}, {"uuid": "9343708f-d7a9-4305-8621-eab248d931e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpanksjua22c", "content": "", "creation_timestamp": "2025-05-15T23:18:19.785150Z"}, {"uuid": "0fb6d54b-26af-468e-8aed-02c1021dabef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-20016", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3773bc3-7af1-4ceb-a99c-472dd5f7d2d8", "content": "", "creation_timestamp": "2026-02-02T12:29:03.631368Z"}, {"uuid": "2f50fa0e-17d7-4150-83e0-308bce51a812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/ctinow/235350", "content": "Web Scanning SonicWall for CVE-2021-20016 - Update, (Wed, May 14th)\nhttps://ift.tt/q8Ta2sv", "creation_timestamp": "2025-05-15T02:44:45.000000Z"}, {"uuid": "3dfbd530-3cda-4c7f-8ceb-b002cd30e8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/hackyourmom/5946", "content": "\u0423 \u0441\u0443\u0447\u0430\u0441\u043d\u043e\u043c\u0443 \u0441\u0432\u0456\u0442\u0456 \u0431\u0435\u0437\u0434\u0456\u044f\u043b\u044c\u043d\u0456\u0441\u0442\u044c \u043a\u043e\u0448\u0442\u0443\u0454 \u0434\u0443\u0436\u0435 \u0434\u043e\u0440\u043e\u0433\u043e.\n\n\u0412\u0435\u043b\u0438\u043a\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u0430 \u0440\u0430\u0434\u0456\u043e\u043b\u043e\u0433\u0456\u0447\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0432 \u0421\u0428\u0410 US Radiology \u043f\u043e\u0433\u043e\u0434\u0438\u043b\u0430\u0441\u044f \u0441\u043f\u043b\u0430\u0442\u0438\u0442\u0438 \u0448\u0442\u0440\u0430\u0444 \u0443 \u0440\u043e\u0437\u043c\u0456\u0440\u0456 450 000 \u0434\u043e\u043b\u0430\u0440\u0456\u0432 \u0437\u0430 \u0432\u0438\u0442\u0456\u043a \u0434\u0430\u043d\u0438\u0445 \u043c\u0430\u0439\u0436\u0435 200 000 \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432 \u043f\u0456\u0441\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0432\u0438\u043c\u0430\u0433\u0430\u044e\u0447\u043e\u0457 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u0432 2021 \u0440\u043e\u0446\u0456. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0432\u0456\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u0457 SonicWall \u0434\u043b\u044f \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u043c\u0435\u0440\u0435\u0436\u0456, \u044f\u043a\u0430 \u0442\u0430\u043a\u043e\u0436 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043b\u0430 \u0457\u0457 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0456\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0447\u0438 Windsong Radiology Group. \u041e\u0434\u043d\u0430\u043a US Radiology \u043d\u0435 \u0443\u0441\u0443\u043d\u0443\u043b\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \"\u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f\" CVE-2021-20016, \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0443 \u0449\u0435 \u0432 \u0441\u0456\u0447\u043d\u0456 2021 \u0440\u043e\u043a\u0443. \u0426\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0441\u0442\u0430\u043b\u0430 \u0442\u043e\u0447\u043a\u043e\u044e \u0432\u0445\u043e\u0434\u0443 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u0456\u0432, \u043e\u0441\u043a\u0456\u043b\u044c\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u043d\u0435 \u0437\u043c\u043e\u0433\u043b\u0430 \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u0456\u0434\u043d\u0435 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0441\u0442\u0430\u0440\u0456\u043b\u0435 \u043e\u0431\u043b\u0430\u0434\u043d\u0430\u043d\u043d\u044f, \u0437\u0430\u043c\u0456\u043d\u0430 \u044f\u043a\u043e\u0433\u043e \u0431\u0443\u043b\u0430 \u0432\u0456\u0434\u043a\u043b\u0430\u0434\u0435\u043d\u0430.\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c SQL-\u0456\u043d'\u0454\u043a\u0446\u0456\u0457 CVE-2021-20016 (CVSS: 9.8) \u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0456 SonicWall SSLVPN SMA100 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u043e\u0432\u0430\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0443 \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 SQL-\u0437\u0430\u043f\u0438\u0442 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0434\u043e \u0456\u043c\u0435\u043d\u0456 \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0430, \u043f\u0430\u0440\u043e\u043b\u044e \u0442\u0430 \u0456\u043d\u0448\u043e\u0457 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0457, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u043e\u0457 \u0437 \u0441\u0435\u0430\u043d\u0441\u043e\u043c. \u0426\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 \u0437\u0431\u0456\u0440\u043a\u0443 SMA100 \u0432\u0435\u0440\u0441\u0456\u0457 10.x.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0456 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u0432\u0434\u0430\u043b\u043e\u0441\u044f \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043c\u0435\u0440\u0435\u0436\u0435\u0432\u0438\u0445 \u043f\u0430\u043f\u043e\u043a, \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0447\u0438 \u0434\u043e\u0434\u0430\u0442\u043a\u043e\u0432\u0456 \u043e\u0431\u043b\u0456\u043a\u043e\u0432\u0456 \u0434\u0430\u043d\u0456. \u0417\u0430 \u0434\u0430\u043d\u0438\u043c\u0438 \u0441\u043b\u0456\u0434\u0441\u0442\u0432\u0430, \u0445\u0430\u043a\u0435\u0440\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0444\u0430\u0439\u043b\u0456\u0432 \u0456\u0437 \u043e\u0441\u043e\u0431\u0438\u0441\u0442\u043e\u044e \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0454\u044e \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0447\u0438 \u0456\u043c\u0435\u043d\u0430, \u0434\u0430\u0442\u0438 \u043d\u0430\u0440\u043e\u0434\u0436\u0435\u043d\u043d\u044f, \u0456\u0434\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0442\u043e\u0440\u0438 \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432, \u0434\u0430\u0442\u0438 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043d\u043d\u044f, \u0456\u043c\u0435\u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0456\u0432, \u0442\u0438\u043f\u0438 \u0440\u0430\u0434\u0456\u043e\u043b\u043e\u0433\u0456\u0447\u043d\u0438\u0445 \u043e\u0431\u0441\u0442\u0435\u0436\u0435\u043d\u044c, \u0434\u0456\u0430\u0433\u043d\u043e\u0437\u0438 \u0442\u0430 \u043d\u043e\u043c\u0435\u0440\u0438 \u043c\u0435\u0434\u0438\u0447\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u0445\u0443\u0432\u0430\u043d\u043d\u044f, \u0430 \u0442\u0430\u043a\u043e\u0436 \u0432\u043e\u0434\u0456\u0439\u0441\u044c\u043a\u0456 \u043f\u043e\u0441\u0432\u0456\u0434\u0447\u0435\u043d\u043d\u044f, \u043d\u043e\u043c\u0435\u0440\u0438 \u043f\u0430\u0441\u043f\u043e\u0440\u0442\u0456\u0432 \u0456 \u043d\u043e\u043c\u0435\u0440\u0438 \u0441\u043e\u0446\u0456\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u0445\u0443\u0432\u0430\u043d\u043d\u044f \u0431\u0430\u0433\u0430\u0442\u044c\u043e\u0445 \u043c\u0435\u0448\u043a\u0430\u043d\u0446\u0456\u0432 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044e US Radiology \u0442\u0430\u043a\u043e\u0436 \u0437\u043e\u0431\u043e\u0432'\u044f\u0437\u0430\u043b\u0438 \u043c\u043e\u0434\u0435\u0440\u043d\u0456\u0437\u0443\u0432\u0430\u0442\u0438 \u0406\u0422-\u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0437\u043e\u043a\u0440\u0435\u043c\u0430 \u0448\u0438\u0444\u0440\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u043d\u0444\u0456\u0434\u0435\u043d\u0446\u0456\u0439\u043d\u0443 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u044e \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432 \u0456 \u0440\u043e\u0437\u0440\u043e\u0431\u0438\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0443 \u0442\u0435\u0441\u0442\u0443\u0432\u0430\u043d\u043d\u044f \u043d\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0435\u043d\u043d\u044f. \u0422\u0430\u043a\u043e\u0436 \u043f\u0435\u0440\u0435\u0434\u0431\u0430\u0447\u0435\u043d\u043e \u0432\u0438\u0434\u0430\u043b\u0435\u043d\u043d\u044f \u0434\u0430\u043d\u0438\u0445 \u043f\u0430\u0446\u0456\u0454\u043d\u0442\u0456\u0432 \u0431\u0435\u0437 \u0440\u043e\u0437\u0443\u043c\u043d\u0438\u0445 \u043f\u0456\u0434\u0441\u0442\u0430\u0432 \u0434\u043b\u044f \u0444\u0443\u043d\u043a\u0446\u0456\u043e\u043d\u0443\u0432\u0430\u043d\u043d\u044f \u0431\u0456\u0437\u043d\u0435\u0441\u0443 \u0442\u0430 \u043d\u0430\u0434\u0430\u043d\u043d\u044f \u0437\u0432\u0456\u0442\u0456\u0432 \u043f\u0440\u043e \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u0456\u0441\u0442\u044c \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0432\u0441\u0442\u0432\u0443 \u043f\u0440\u043e\u0442\u044f\u0433\u043e\u043c \u0434\u0432\u043e\u0445 \u0440\u043e\u043a\u0456\u0432.", "creation_timestamp": "2023-11-14T08:14:32.000000Z"}, {"uuid": "896fea2f-2c6d-45ed-871e-01cab9b12de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "seen", "source": "Telegram/zR-eo4wPLc-hYA3qQx9nAUyHsr4JGFEBCHt2Z3c7PDGJOA", "content": "", "creation_timestamp": "2021-06-23T16:46:36.000000Z"}, {"uuid": "e821f79a-c262-4be2-8889-a53367b72725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/true_secator/4151", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u0432\u043c\u0435\u0442\u0441\u043d\u043e \u0441 SonicWall PSIRT \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a UNC4540 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall Secure Mobile Access (SMA).\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0430\u043a\u0442\u043e\u0440 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0438 \u0434\u0430\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041c\u0430\u043b\u0432\u0430\u0440\u044c \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ELF, \u0431\u044d\u043a\u0434\u043e\u0440\u0430 TinyShell \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 bash, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u044e \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043c\u043e\u0434\u0443\u043b\u044c firewalld \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 SQL-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043a\u0440\u0430\u0434\u0435\u0442 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u0445 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u043d\u0438 \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0444\u0430\u0439\u043b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432 tmp/syslog.db, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0432 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435.\n\nfirewalld \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b TinyShell, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0430\u0442\u0447 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 SonicWall, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0435\u0433\u043e \u0442\u043e\u0447\u043d\u0443\u044e \u0446\u0435\u043b\u044c.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u0440\u0438 \u0432\u0432\u043e\u0434\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043a\u0430\u043a\u0430\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 (\u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0445, \u043a\u0430\u043a CVE-2021-20038, CVE-2021-20039,\u00a0CVE-2021-20045,    CVE-2021-20016, CVE-2022-22282 \u0438 \u0434\u0440).\n\nMandiant \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u044d\u0442\u043e\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044e iptabled, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e \u0441\u0443\u0442\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c \u0436\u0435 \u043c\u043e\u0434\u0443\u043b\u0435\u043c, \u0447\u0442\u043e \u0438 firewalld, \u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430 (rc.local) \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0445\u043e\u0434\u0430, \u0441\u0431\u043e\u044f \u0438\u043b\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043a\u0440\u0438\u043f\u0442 bash (geoBotnetd) \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0432 \u00ab/cf/FIRMWARE/NEW/INITRD.GZ\u00bb \u043a\u0430\u0436\u0434\u044b\u0435 10 \u0441\u0435\u043a\u0443\u043d\u0434.\u00a0\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u043c\u0435\u043d\u0435\u043c acme \u0432 \u0444\u0430\u0439\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u043c\u043e\u0433 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043e \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 SonicWall \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA100.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u0430\u044f \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014\u00a010.2.1.7\u00a0\u0438 \u0432\u044b\u0448\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 (FIM) \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u0433\u043e \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430\u00a00-day \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet SSL-VPN,\u00a0\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.", "creation_timestamp": "2023-03-10T11:00:07.000000Z"}, {"uuid": "5d6fd28f-ead2-45e5-b89b-6fadc665e466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/ctinow/234618", "content": "Web Scanning Sonicwall for CVE-2021-20016, (Tue, Apr 29th)\nhttps://ift.tt/Kg3BIQa", "creation_timestamp": "2025-04-30T05:19:23.000000Z"}, {"uuid": "e7ebc9a6-23bf-4716-bd7b-0e6131f8a747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/true_secator/2144", "content": "SonicWall \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0431\u0430\u0433\u0443 CVE-2021-20034 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 100 Secure Mobile Access (SMA), \u0432\u043a\u043b\u044e\u0447\u0430\u044f SMA 200, 210, 400, 410 \u0438 500v.\n \n\u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SonicWall \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 500 000 \u0431\u0438\u0437\u043d\u0435\u0441-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0431\u043e\u043b\u0435\u0435, \u0447\u0435\u043c 215 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439.\n \n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0443 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0415\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0448\u043b\u044e\u0437\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SMA 100 \u0434\u043b\u044f \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u0430 \u0432 \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n \n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0440 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0442, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c SonicWall \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0437\u0432\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441 MySonicWall.com \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n \n\u041a\u0430\u043a \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u043d\u0430\u043f\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0435 \u0431\u0435\u0441\u043f\u043e\u0447\u0432\u0435\u043d\u043d\u043e, \u0432\u0435\u0434\u044c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2021 \u0433\u043e\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0438 SonicWall SMA 100 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c ransomware, \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0432 \u0441\u0435\u0442\u044c \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n \n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, UNC2447 (\u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Mandiant) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2021-20016 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall SMA 100 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f FiveHands \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u0432 \u0438\u044e\u043b\u0435 SonicWall \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0441\u0435\u0440\u0438\u0438 SMA 100 \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0441\u043b\u0443\u0436\u0431\u044b (EoL) \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (SRA).\n \n\u041f\u043e \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0430\u043c CISA, CrowdStrike \u0438 Coveware, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u0440\u0435\u0448\u044c\u044e \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 SonicWall \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0435\u0441\u043b\u0438 \u0443\u0436\u0435 \u043d\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c \u0438 \u043d\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432.", "creation_timestamp": "2021-09-24T17:46:16.000000Z"}, {"uuid": "72d969fc-f2a8-46e6-9d4a-3cbe2446bd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "seen", "source": "https://t.me/true_secator/1842", "content": "\u200b\u200b\u041e\u0441\u0435\u043d\u044c\u044e \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0432 Sonic Wall VPN \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5135 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 9,4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u0434\u0430\u0436\u0435 \u0432 \u0442\u0435\u043e\u0440\u0438\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0443\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE). \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u0438\u044f \u0432 \u0441\u0435\u0442\u0438 \u0441\u0432\u0435\u0442\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u0447\u0442\u0438 800 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Tripwire \u041a\u0440\u0435\u0439\u0433 \u042f\u043d\u0433, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043a\u043e\u0440\u044f\u0432\u044b\u043c. \n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 Sonic Wall \u0441\u0442\u0430\u043b \u0432\u043c\u0435\u0441\u0442\u043e \u0432\u044b\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0441\u0430\u0434\u043e\u043a \u0432\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 DoS \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u0442\u043e\u043a \u0441\u043e\u0437\u043d\u0430\u043d\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0441\u044f \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u0439 \u0434\u0430\u043c\u043f \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0412 \u0438\u0442\u043e\u0433\u0435 SonicWall \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0438 \u0441\u0432\u043e\u0439 \u043f\u0440\u043e\u043c\u0430\u0445, \u043f\u0440\u0430\u0432\u0434\u0430 \u043d\u0430 \u0434\u043e\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 CVE-2021-20019 \u0438\u043c \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \"\u0432\u0441\u0435\u0433\u043e-\u0442\u043e\" 8 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0422\u0430\u043a\u043e\u0435 \u0441\u0435\u0431\u0435, \u043a\u043e\u043d\u0435\u0447\u043d\u043e.", "creation_timestamp": "2021-06-23T13:33:33.000000Z"}, {"uuid": "1424c675-286e-4112-8f7c-944cd6277f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "exploited", "source": "https://t.me/true_secator/1668", "content": "\u200b\u200b\u0412 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 VPN-\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SonicWall \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445, \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438 \u0441\u0430\u043c\u0443 SonicWall.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 FireEye \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2021-20016, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UNC2447, \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a ransomware.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c FireEye, UNC2447 \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u043e\u043f\u043f\u0435\u0440 WarPrism. \u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 ransomware, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0441 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0448\u0442\u0430\u043c\u043c\u043e\u0432 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2021 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u044f\u0434 \u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0431\u044b\u043b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d \u043d\u043e\u0432\u044b\u043c ransomware FiveHands ( \u043f\u0435\u0440\u0435\u0434\u0435\u043b\u043a\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e DeathRansom), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b\u0441\u044f \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 SombRAT. \u0422\u043e\u0447\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0439 \u0441\u043b\u0443\u0436\u0438\u043b\u043e \u041f\u041e \u043e\u0442 SonicWall. \u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u0446\u044b WarPrism, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 Cobalt Strike, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u043c\u0441\u044f UNC2447. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, FireEye \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439.\n\n\u0421\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435, \u0447\u0442\u043e UNC2447 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN \u043e\u0442 SonicWall \u0435\u0449\u0435 \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0435\u0441\u0442\u044c \u043e\u043d\u0438 \u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e CVE-2021-20016 \u043f\u0443\u0442\u0435\u043c \u0440\u0435\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0441 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 BleepingComputer \u0441\u0432\u044f\u0437\u0430\u043b\u0441\u044f \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0431\u0440\u044d\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u043b\u0447\u0438\u0442 \u0438 \u043d\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u0440\u0435\u0447\u044c \u0448\u043b\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043e SonicWall.\n\n\u0415\u0441\u043b\u0438 \u0434\u0435\u043b\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u0441\u0442\u043e\u044f\u0442 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0442\u043e \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e  SonicWall \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u043d\u0435\u0441\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u043f\u043e\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0443\u0449\u0435\u0440\u0431 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a ransomware FiveHands. \u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u044b\u0440\u043a\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445.", "creation_timestamp": "2021-04-30T12:25:17.000000Z"}, {"uuid": "3ca037f9-6cde-44eb-bce8-6679d6e3d6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20018", "type": "seen", "source": "https://t.me/cibsecurity/24882", "content": "\u203c CVE-2021-20018 \u203c\n\nA post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-13T07:25:17.000000Z"}, {"uuid": "13f91d0a-84f0-4cf7-b5f4-f489a76fe818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20017", "type": "seen", "source": "https://t.me/cibsecurity/24881", "content": "\u203c CVE-2021-20017 \u203c\n\nA post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-13T07:25:16.000000Z"}, {"uuid": "814d72f7-4f76-4a54-b112-b6cba3f3d237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/cibsecurity/23046", "content": "\u203c CVE-2021-20016 \u203c\n\nA SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-04T12:34:03.000000Z"}, {"uuid": "6867cd3e-6523-4a4b-ad50-0913a04d3fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "seen", "source": "https://t.me/haccking/99859", "content": "#\u041d\u043e\u0432\u043e\u0441\u0442\u0438\n\n1. \u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 SonicWall \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430\nhttps://xakep.ru/2021/06/23/cve-2021-20019/\n\n2. \u041c\u0430\u043b\u0432\u0430\u0440\u044c DirtyMoe \u0437\u0430\u0440\u0430\u0437\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 100 000 Windows-\u0441\u0438\u0441\u0442\u0435\u043c\nhttps://xakep.ru/2021/06/23/dirtymoe/\n\n3. \u041d\u043e\u0432\u044b\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ZeR\u00d8 \u0438 No-FAT \u043d\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0449\u0438\u0442\u044f\u0442 \u043f\u0430\u043c\u044f\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\nhttps://www.securitylab.ru/news/521619.php\n\n4. \u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 Clop \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0430\u0440\u0435\u0441\u0442\u044b\nhttps://www.securitylab.ru/news/521616.php", "creation_timestamp": "2021-06-25T06:03:15.000000Z"}, {"uuid": "dae6b1c4-cc3c-4505-a81f-dc738a5de002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "exploited", "source": "https://t.me/thehackernews/1308", "content": "A memory leak vulnerability [CVE-2021-20019] affecting SonicWall VPN appliances was left unpatched amidst 0-day attacks that could allow remote attackers access to sensitive data.\n\nRead: https://thehackernews.com/2021/06/sonicwall-left-vpn-flaw-partially.html\n\nSecurity patches have now been released.", "creation_timestamp": "2021-06-23T07:27:05.000000Z"}, {"uuid": "ff39bb12-f7ed-4fc2-8a34-710a83860ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "seen", "source": "https://t.me/xakep_ru/10934", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 SonicWall \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430\n\n\u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043e\u0441\u0435\u043d\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-5135, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 SonicOS, \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall Network Security Appliance (NSA), \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0434\u043e \u043a\u043e\u043d\u0446\u0430. \u0422\u0435\u043f\u0435\u0440\u044c \u0431\u0430\u0433\u0443 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u0438 \u0432\u044b\u0448\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n\nhttps://xakep.ru/2021/06/23/cve-2021-20019/", "creation_timestamp": "2021-06-23T20:35:12.000000Z"}, {"uuid": "9cc0e742-d4dc-4268-9669-fe515570309e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20019", "type": "seen", "source": "https://t.me/haccking/6431", "content": "#\u041d\u043e\u0432\u043e\u0441\u0442\u0438\n\n1. \u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 SonicWall \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430\nhttps://xakep.ru/2021/06/23/cve-2021-20019/\n\n2. \u041c\u0430\u043b\u0432\u0430\u0440\u044c DirtyMoe \u0437\u0430\u0440\u0430\u0437\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 100 000 Windows-\u0441\u0438\u0441\u0442\u0435\u043c\nhttps://xakep.ru/2021/06/23/dirtymoe/\n\n3. \u041d\u043e\u0432\u044b\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ZeR\u00d8 \u0438 No-FAT \u043d\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0449\u0438\u0442\u044f\u0442 \u043f\u0430\u043c\u044f\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\nhttps://www.securitylab.ru/news/521619.php\n\n4. \u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 Clop \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0430\u0440\u0435\u0441\u0442\u044b\nhttps://www.securitylab.ru/news/521616.php", "creation_timestamp": "2021-06-25T08:03:12.000000Z"}, {"uuid": "7dba00ac-9a76-481d-9b9b-405a26c4e860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "published-proof-of-concept", "source": "Telegram/7PKT4vSfEXG4PvUtPX6aqX5WnY6lYGawj_ilBlaHPuVdNJs", "content": "", "creation_timestamp": "2021-09-25T11:18:48.000000Z"}, {"uuid": "65bce085-11b0-4e2d-addf-5818bbc300d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "published-proof-of-concept", "source": "Telegram/5ubhU27SpJm0inovuggpG8C0qn9UJcc29_eBx9XnhM6h7d4", "content": "", "creation_timestamp": "2021-09-27T02:45:55.000000Z"}, {"uuid": "c2fb530a-fd31-497e-906a-7d69a902ccbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msvwntrhaa24", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2021-20016: A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfo\u2026\nCVSS 9.8 \u00b7 EPSS 37.0% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2021-20016\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-12T20:08:46.503939Z"}, {"uuid": "3554be56-2699-4ccd-8146-4255368e041f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd59b5f1-7465-4d1d-8f18-8fcda4bc6916", "content": "", "creation_timestamp": "2026-06-19T12:48:04.665395Z"}, {"uuid": "e07240d7-e00c-4226-a866-57301968a24b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd189943-0eed-47f0-bc47-8d380d77f6cd", "content": "", "creation_timestamp": "2026-06-23T14:04:29.202998Z"}, {"uuid": "88e96116-bf0c-481e-a7a0-e2080a16c0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/hacking_Attack/181926", "content": "Is it helpful if your pentest report looks like when you stop ranking by CVSS and start reading it like an attacker\nhttps://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/\n\nSince there are issues attaching the CVE chaining image to the post., explaining it here... Real situation. Not hypothetical. Pentest report came back with these five CVEs: CVE-2024-24919 \u2014 Check Point VPN credential leak \u2014 CVSS 8.6 CVE-2022-1388 \u2014 F5 BIG-IP auth bypass \u2014 CVSS 9.8 CVE-2021-20016 \u2014 SonicWall SQL injection \u2014 CVSS 9.8 CVE-2023-20198 \u2014 Cisco IOS XE privilege escalation \u2014 CVSS 10.0 CVE-2023-28578 \u2014 Siemens SCALANCE memory corruption \u2014 CVSS 9.3 Team patched in CVSS order. The 10.0 first. Then the two 9.8s. Felt good. Sprint closed.\n The attacker used CVE-2024-24919. The 8.6. The one nobody rushed on. Because here is what the CVSS list does not show you.  CVE-2024-24919 leaks valid credentials from the Check Point VPN. Those credentials are exactly what CVE-2022-1388 needs to bypass F5 authentication. That bypass gives remote code execution , which is exactly what CVE-2021-20016 needs to pivot into the internal SonicWall.  From there CVE-2023-20198 is a single hop to full network control. Four CVEs. One chain.\n The entry point was the lowest score on the list. The 10.0 they patched first? Unreachable without the chain firing first.\n They patched the destination. Left the road open.\n For pentesters this is the actual conversation clients need to have. Not \"here are your critical CVEs.\"\n But \"here is the one CVE that if unpatched makes everything else reachable.\"  That is a completely different deliverable. And honestly clients act on it faster. Because it is one thing to hand someone a list of ten critical CVEs and watch their eyes glaze over. It is another thing entirely to say \"patch this one specific CVE this week and your attacker has no path in.\"  One CVE. One patch. Every route blocked. Question for the room: When you deliver a pentest report ,do your clients actually patch in the order you recommend, or do they go straight to the 9.8s regardless of what you tell them?    submitted by    /u/Silly_Stress4696  (https://www.reddit.com/user/Silly_Stress4696) \n [link] (https://i.redd.it/63tfd2oa53qg1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/)", "creation_timestamp": "2026-09-01T20:00:12.396137Z"}, {"uuid": "5143dc5d-e53e-4f71-b995-d2078c3a8d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/hacking_Attack/181926", "content": "Is it helpful if your pentest report looks like when you stop ranking by CVSS and start reading it like an attacker\nhttps://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/\n\nSince there are issues attaching the CVE chaining image to the post., explaining it here... Real situation. Not hypothetical. Pentest report came back with these five CVEs: CVE-2024-24919 \u2014 Check Point VPN credential leak \u2014 CVSS 8.6 CVE-2022-1388 \u2014 F5 BIG-IP auth bypass \u2014 CVSS 9.8 CVE-2021-20016 \u2014 SonicWall SQL injection \u2014 CVSS 9.8 CVE-2023-20198 \u2014 Cisco IOS XE privilege escalation \u2014 CVSS 10.0 CVE-2023-28578 \u2014 Siemens SCALANCE memory corruption \u2014 CVSS 9.3 Team patched in CVSS order. The 10.0 first. Then the two 9.8s. Felt good. Sprint closed.\n The attacker used CVE-2024-24919. The 8.6. The one nobody rushed on. Because here is what the CVSS list does not show you.  CVE-2024-24919 leaks valid credentials from the Check Point VPN. Those credentials are exactly what CVE-2022-1388 needs to bypass F5 authentication. That bypass gives remote code execution , which is exactly what CVE-2021-20016 needs to pivot into the internal SonicWall.  From there CVE-2023-20198 is a single hop to full network control. Four CVEs. One chain.\n The entry point was the lowest score on the list. The 10.0 they patched first? Unreachable without the chain firing first.\n They patched the destination. Left the road open.\n For pentesters this is the actual conversation clients need to have. Not \"here are your critical CVEs.\"\n But \"here is the one CVE that if unpatched makes everything else reachable.\"  That is a completely different deliverable. And honestly clients act on it faster. Because it is one thing to hand someone a list of ten critical CVEs and watch their eyes glaze over. It is another thing entirely to say \"patch this one specific CVE this week and your attacker has no path in.\"  One CVE. One patch. Every route blocked. Question for the room: When you deliver a pentest report ,do your clients actually patch in the order you recommend, or do they go straight to the 9.8s regardless of what you tell them?    submitted by    /u/Silly_Stress4696  (https://www.reddit.com/user/Silly_Stress4696) \n [link] (https://i.redd.it/63tfd2oa53qg1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/)", "creation_timestamp": "2026-09-02T01:00:28.929619Z"}, {"uuid": "3a4b0e1c-0aeb-41ef-860c-98c3510b806c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20016", "type": "seen", "source": "https://t.me/hacking_Attack/181926", "content": "Is it helpful if your pentest report looks like when you stop ranking by CVSS and start reading it like an attacker\nhttps://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/\n\nSince there are issues attaching the CVE chaining image to the post., explaining it here... Real situation. Not hypothetical. Pentest report came back with these five CVEs: CVE-2024-24919 \u2014 Check Point VPN credential leak \u2014 CVSS 8.6 CVE-2022-1388 \u2014 F5 BIG-IP auth bypass \u2014 CVSS 9.8 CVE-2021-20016 \u2014 SonicWall SQL injection \u2014 CVSS 9.8 CVE-2023-20198 \u2014 Cisco IOS XE privilege escalation \u2014 CVSS 10.0 CVE-2023-28578 \u2014 Siemens SCALANCE memory corruption \u2014 CVSS 9.3 Team patched in CVSS order. The 10.0 first. Then the two 9.8s. Felt good. Sprint closed.\n The attacker used CVE-2024-24919. The 8.6. The one nobody rushed on. Because here is what the CVSS list does not show you.  CVE-2024-24919 leaks valid credentials from the Check Point VPN. Those credentials are exactly what CVE-2022-1388 needs to bypass F5 authentication. That bypass gives remote code execution , which is exactly what CVE-2021-20016 needs to pivot into the internal SonicWall.  From there CVE-2023-20198 is a single hop to full network control. Four CVEs. One chain.\n The entry point was the lowest score on the list. The 10.0 they patched first? Unreachable without the chain firing first.\n They patched the destination. Left the road open.\n For pentesters this is the actual conversation clients need to have. Not \"here are your critical CVEs.\"\n But \"here is the one CVE that if unpatched makes everything else reachable.\"  That is a completely different deliverable. And honestly clients act on it faster. Because it is one thing to hand someone a list of ten critical CVEs and watch their eyes glaze over. It is another thing entirely to say \"patch this one specific CVE this week and your attacker has no path in.\"  One CVE. One patch. Every route blocked. Question for the room: When you deliver a pentest report ,do your clients actually patch in the order you recommend, or do they go straight to the 9.8s regardless of what you tell them?    submitted by    /u/Silly_Stress4696  (https://www.reddit.com/user/Silly_Stress4696) \n [link] (https://i.redd.it/63tfd2oa53qg1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/)", "creation_timestamp": "2026-09-03T00:00:35.056660Z"}]}