{"metadata": {"vulnerability": "CVE-2020-3580", "count": 117, "kinds": {"milestone": 5, "sighting": 58, "kev": 17, "other": 37}, "linked_omitted": 0}, "data": [{"timestamp": "2019-12-12T00:00:00Z", "date_only": false, "value": "2019-12-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-3580", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-19T18:38:04Z", "date_only": false, "value": "2020-10-19T18:38:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_release_date.data.0.date", "linked_record": true}, {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-10-21T16:00:00Z", "date_only": false, "value": "2020-10-21T16:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-10-21T16:00:00Z", "date_only": false, "value": "2020-10-21T16:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-3580", "record": "GSD-2020-3580", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2020-10-21T16:00:00Z", "date_only": false, "value": "2020-10-21T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-10-21T18:40:26Z", "date_only": false, "value": "2020-10-21T18:40:26.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-21T18:40:26.821Z", "date_only": false, "value": "2020-10-21T18:40:26.821Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-3580", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-10-21T19:15:00Z", "date_only": false, "value": "2020-10-21T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RR9H-G433-576P", "record": "GHSA-RR9H-G433-576P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2020-10-21T19:15:00Z", "date_only": false, "value": "2020-10-21T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-3580", "record": "GSD-2020-3580", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2020-10-21T19:15:18.607Z", "date_only": false, "value": "2020-10-21T19:15:18.607000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_release_date.data.4.date", "linked_record": true}, {"timestamp": "2020-10-21T19:15:18.607Z", "date_only": false, "value": "2020-10-21T19:15:18.607", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3580", "record": "FKIE_CVE-2020-3580", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-10-22T13:46:39Z", "date_only": false, "value": "2020-10-22T13:46:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2020-10-23T00:39:39Z", "date_only": false, "value": "2020-10-23T00:39:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2020-10-26T00:00:00Z", "date_only": true, "value": "2020-10-26", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-59754", "record": "CNVD-2020-59754", "field": "submitTime", "linked_record": true}, {"timestamp": "2020-10-31T00:00:00Z", "date_only": true, "value": "2020-10-31", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-59754", "record": "CNVD-2020-59754", "field": "openTime", "linked_record": true}, {"timestamp": "2021-04-28T15:40:18Z", "date_only": false, "value": "2021-04-28T15:40:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2021-04-29T04:00:00Z", "date_only": false, "value": "2021-04-29T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=577", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "c8c96c6d-e2a2-440d-960b-b7279e14b70e", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=577"}, {"timestamp": "2021-05-17T00:00:00Z", "date_only": false, "value": "2021-05-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2021-05-17T09:06:00Z", "date_only": false, "value": "2021-05-17T09:06:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2021-06-24T13:34:08Z", "date_only": false, "value": "2021-06-24T13:34:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/48", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "3a0d5c0d-c983-41ac-be58-1052b474ca3e", "content": "PoC for XSS in Cisco ASA (CVE-2020-3580)\n\n\nPOST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: ciscoASA.local\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 44\n\nSAMLResponse=\">", "url": "https://t.me/ptswarm/48", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-06-25T18:25:12Z", "date_only": false, "value": "2021-06-25T18:25:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/25709", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "544b3a9f-92e2-4565-8e61-6ec590ea2103", "content": "\u274c Cisco ASA Bug Now Actively Exploited as PoC Drops \u274c\n\nIn-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/25709", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-06-26T17:52:24Z", "date_only": false, "value": "2021-06-26T17:52:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/theninjaway1337/1021", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "d85d2cff-9e92-4523-8a8d-a6b41912fa6c", "content": "Cisco ASA Bug Now Actively Exploited as PoC Drops\n\nIn-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter.\n\nResearchers have dropped a proof-of-concept (PoC) exploit on Twitter for a known cross-site scripting (XSS) vulnerability in the Cisco Adaptive Security Appliance (ASA). The move comes as reports surface of in-the-wild exploitation of the bug.\n\nhttps://threatpost.com/cisco-asa-bug-exploited-poc/167274/\n\n#1day #poc", "url": "https://t.me/theninjaway1337/1021", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-06-28T06:59:30Z", "date_only": false, "value": "2021-06-28T06:59:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberbannews_ir/3481", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "b92a8acb-7424-487f-922a-7d1c9992b274", "content": "\ud83d\uded1\u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc ASA \u0633\u06cc\u0633\u06a9\u0648\u060c \u067e\u0627\u062a\u0648\u0642 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0633\u0627\u06cc\u0628\u0631\u06cc\n\n \u0647\u06a9\u0631\u0647\u0627 \u0628\u0647 \u0635\u0648\u0631\u062a \u0641\u0639\u0627\u0644\u06cc \u062f\u0631 \u062d\u0627\u0644 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 ASA \u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0647\u0633\u062a\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0627\u06af \u0627\u0645\u0646\u06cc\u062a\u06cc (CVE-2020-3580)\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 XSS \u0645\u06cc \u0628\u0627\u0634\u062f.\n\n\u0633\u06cc\u0633\u06a9\u0648 \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062f\u0631 \u0627\u06a9\u062a\u0628\u0631 2020 \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062a\u0627\u06a9\u06cc\u062f \u06a9\u0631\u062f \u0648 \u062f\u0631 \u0635\u062f\u062f \u0627\u0635\u0644\u0627\u062d \u0622\u0646 \u0628\u0631\u0622\u0645\u062f. \u0627\u0645\u0627 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u06cc\u0647 \u0627\u0648\u0644\u06cc\u0647 \u0646\u0627\u0642\u0635 \u0628\u0648\u062f. \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u06cc\u06a9 \u0627\u0635\u0644\u0627\u062d\u06cc\u0647 \u062f\u06cc\u06af\u0631 \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 2021 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. \n\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0630\u06a9\u0648\u0631 \u0627\u06cc\u0646 \u0627\u062c\u0627\u0632\u0647 \u0631\u0627 \u0628\u0647 \u0628\u0627\u0632\u06cc\u06af\u0631\u0627\u0646 \u0645\u062e\u0631\u0628 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0647\u062f\u0641 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062c\u0627\u0648\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u0631 \u0631\u0648\u06cc \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0627\u06cc\u0645\u06cc\u0644 \u0647\u0627\u06cc \u0641\u06cc\u0634\u06cc\u0646\u06af \u06cc\u0627 \u0644\u06cc\u0646\u06a9 \u0647\u0627\u06cc \u0645\u062e\u0631\u0628\u06cc \u0631\u0627 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 ASA \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f.\n\n#\u0633\u06cc\u0633\u06a9\u0648\n\n\u2705\u0628\u06cc\u0634\u062a\u0631 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f:\nhttps://bit.ly/35Xv9wo\n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/3481", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-06-28T08:49:47Z", "date_only": false, "value": "2021-06-28T08:49:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/1321", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "a51c3dd7-cdb2-485a-b119-ef0457878ba8", "content": "Cisco Adaptive Security Appliances (ASA) have been actively targeted by hackers following the release of exploit code for a security vulnerability (CVE-2020-3580)\n\nRead: https://thehackernews.com/2021/06/cisco-asa-flaw-under-active-attack.html", "url": "https://t.me/thehackernews/1321", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-06-28T11:54:32Z", "date_only": false, "value": "2021-06-28T11:54:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/10466", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "7744608a-323a-4701-9564-e5cbe3d89fe0", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0421\u0435\u0442\u044c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco ASA \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ( CVE-2020-3580 ) \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 Twitter.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2020-3580 \u0431\u044b\u043b\u043e \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c, \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2021 \u0433\u043e\u0434\u0430.\nhttps://www.securitylab.ru/news/521692.php", "url": "https://t.me/SecLabNews/10466", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-06-28T15:14:27Z", "date_only": false, "value": "2021-06-28T15:14:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2021-06-28T15:14:27Z", "date_only": false, "value": "2021-06-28T15:14:27+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2021-07-01T11:03:01Z", "date_only": false, "value": "2021-07-01T11:03:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3732", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "cc30aa7f-a365-45b2-be8b-73191cf64a1a", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\nCVE-2021-1675 - Windows Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-3560 - Privilege escalation with polkit\nhttps://t.me/cybersecuritytechnologies/3587\nCVE-2021-28476 - Hyper-V RCE in vmswitch.sys\nhttps://t.me/cybersecuritytechnologies/3514\nCVE-2020-3580 - XSS in Cisco ASA\nhttps://www.helpnetsecurity.com/2021/06/29/cve-2020-3580-exploit\nCVE-2021-31955/31956 - Windows NTFS EoP/Kernel Information Disclosure\nhttps://github.com/mavillon1/CVE-2021-31955-POC\nhttps://t.me/cybersecuritytechnologies/3705\nCVE-2021-33739 - MS DWM Core Library EoP\nhttps://t.me/cybersecuritytechnologies/3581\nCVE-2021-27850 - Apache Tapestry RCE\nhttps://t.me/cybersecuritytechnologies/3694\nCVE-2020-36289 - Atlassian Jira Unauth User Enum\nhttps://mobile.twitter.com/i/web/status/1402644004781633540", "url": "https://t.me/CyberSecurityTechnologies/3732"}, {"timestamp": "2021-08-19T22:01:50Z", "date_only": false, "value": "2021-08-19T22:01:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/38740", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "8b26826f-dd8a-4be5-96e9-b62d10d3820b", "content": "U.S. Dept Of Defense: XSS due to CVE-2020-3580 [\u2588\u2588\u2588.mil]\n\nhttps://ift.tt/3j13nqn", "url": "https://t.me/ctinow/38740"}, {"timestamp": "2021-09-21T04:42:21Z", "date_only": false, "value": "2021-09-21T04:42:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/716", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "84488ec2-d635-4267-bf5d-ce487139e422", "content": "CVE-2020-3580 Cisco ASA XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-3580_Cisco_ASA_XSS%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/716"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-3580", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "224cda1c-77ec-48c8-9a2c-5ec7de034839", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-3580", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3580", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-3580", "record": "GSD-2020-3580", "field": "namespaces.cisa.gov.dateAdded", "linked_record": true}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-3580", "field": "evidence.0.details.added_date", "uuid": "6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-3580", "field": "evidence.0.details.date_added", "uuid": "224cda1c-77ec-48c8-9a2c-5ec7de034839", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-3580", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "224cda1c-77ec-48c8-9a2c-5ec7de034839", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-3580", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-3580", "field": "status.status_updated_at", "uuid": "224cda1c-77ec-48c8-9a2c-5ec7de034839", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-3580", "field": "status.status_updated_at", "uuid": "6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3580", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2020-3580 added to CISA KEV"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "5557735c-69d6-44a1-8403-c9a2110555aa"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "e7ff520b-0a0e-45fe-8cf1-5d588403ad89"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-3580", "field": "evidence.0.details.due_date", "uuid": "224cda1c-77ec-48c8-9a2c-5ec7de034839", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-3580", "record": "GSD-2020-3580", "field": "namespaces.cisa.gov.dueDate", "linked_record": true}, {"timestamp": "2022-05-24T17:31:48Z", "date_only": false, "value": "2022-05-24T17:31:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RR9H-G433-576P", "record": "GHSA-RR9H-G433-576P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-26T00:00:00Z", "date_only": false, "value": "2022-05-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2022-05-26T15:11:00Z", "date_only": false, "value": "2022-05-26T15:11Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-3580", "record": "GSD-2020-3580", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-30T00:00:00Z", "date_only": false, "value": "2022-05-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2023-10-23T17:47:20Z", "date_only": false, "value": "2023-10-23T17:47:20+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2020-3580", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-23T17:47:20Z", "date_only": false, "value": "2023-10-23T17:47:20+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2020-3580", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-07T00:00:00Z", "date_only": false, "value": "2023-11-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2023-11-07T03:22:56.730Z", "date_only": false, "value": "2023-11-07T03:22:56.730000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "sources_update_date.data.4.date", "linked_record": true}, {"timestamp": "2023-12-13T01:22:10.521Z", "date_only": false, "value": "2023-12-13T01:22:10.521427Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-3580", "record": "GSD-2020-3580", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-17T20:19:31.979Z", "date_only": false, "value": "2024-01-17T20:19:31.979000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202010-1052", "record": "VAR-202010-1052", "field": "last_update_date", "linked_record": true}, {"timestamp": "2024-02-23T00:05:33Z", "date_only": false, "value": "2024-02-23T00:05:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10016", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "bf71d679-6bae-4e2e-87f5-cecb7d5485e9", "content": "#exploit\n1. CVE-2024-25600:\nBricks <=1.9.6 - Unauthenticated RCE\nhttps://github.com/Chocapikk/CVE-2024-25600\n\n2. CVE-2023-52251:\nKafka UI 0.7.1 - Command Injection\nhttps://packetstormsecurity.com/files/177214/Kafka-UI-0.7.1-Command-Injection.html\n\n3. Additional exploits for XSS in Cisco ASA devices (CVE-2020-3580)\nhttps://github.com/imhunterand/CVE-2020-3580", "url": "https://t.me/CyberSecurityTechnologies/10016", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-05-10T22:55:15Z", "date_only": false, "value": "2024-05-10T22:55:15+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "record": "CISCO-SA-ASAFTD-XSS-MULTIPLE-FCB3VPZE", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-08-04T07:37:55.605Z", "date_only": false, "value": "2024-08-04T07:37:55.605Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-3580", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-10T05:02:28Z", "date_only": false, "value": "2024-09-10T05:02:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1528", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "0fdbe369-5d6e-4c58-a2ce-40d90402ca6b", "content": "[\ud83d\udd0d\ud83d\udee1\ufe0f\ud83c\udf10] XSS \u0438\u0437-\u0437\u0430 CVE-2020-3580 [\u2588\u2588\u2588]\n\n\u26a0\ufe0f \u0422\u0438\u043f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: Cross-site Scripting (XSS) - Reflected\n\ud83d\udcb0 \u0411\u0430\u0443\u043d\u0442\u0438: \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043e\n\ud83d\udcca \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c: \u0421\u0440\u0435\u0434\u043d\u044f\u044f\n\n\ud83d\udd0e \u0410\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 Cisco ASA \u0438 Cisco FTD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n#XSS #Medium #Cisco\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0440\u0435\u043f\u043e\u0440\u0442\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435", "url": "https://t.me/critical_bug/1528", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-08T16:07:33.171Z", "date_only": false, "value": "2024-11-08T16:07:33.171667Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3580", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-08T16:07:33.171Z", "date_only": false, "value": "2024-11-08T16:07:33.171667Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3580", "record": "FKIE_CVE-2020-3580", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-11-14T06:09:10Z", "date_only": false, "value": "2024-11-14T06:09:10.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3f8c4105-ec0f-44a2-9650-1d4bd17ceef0", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "a9b28751-bdf1-4aa4-ae7f-9967fff1ce50"}, {"timestamp": "2024-11-15T00:00:00Z", "date_only": false, "value": "2024-11-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-15)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "410e2c3a-8625-453f-bcdd-14e057e51635", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:24:29.298Z", "date_only": false, "value": "2024-12-24T20:24:29.298172Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971116", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "39ff892f-60bf-4805-b926-b474a73159a3", "url": "https://feedsin.space/feed/CISAKevBot/items/2971116"}, {"timestamp": "2024-12-27T00:00:00Z", "date_only": false, "value": "2024-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "dbbbe220-7b6d-4e9e-a77f-9a1ab3270f99", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "53474aac-9d09-4da7-ad0d-753559435016"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "401ea87d-6cd8-49a0-b7bb-34ab930e7f42", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "907176ed-69f2-4e12-924f-f7fe317d4088", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "410c8f20-e802-4f48-b33d-8a0d7ecc4ef4"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-17)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "d2236f43-6e15-4374-b7c1-bc06fa2764a3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "20a7fc1b-dbac-42fa-8bfe-2bbf29cc5f4c"}, {"timestamp": "2025-02-23T02:09:48Z", "date_only": false, "value": "2025-02-23T02:09:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "d2678bdc-7ea2-4cf5-b382-8fe226544381"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "95f3d6dc-ee91-409f-a64b-a964372c5b8c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-01)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "3e90b0d3-0ea1-4308-b9cc-abbfac1251e4"}, {"timestamp": "2025-07-27T00:00:00Z", "date_only": false, "value": "2025-07-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-27)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "38a0d33f-86e0-4020-8abf-032a636615a0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "ce4c058d-97bf-42db-ab06-157b1ec56020", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-21T23:35:34.486Z", "date_only": false, "value": "2025-10-21T23:35:34.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-3580", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:34.486Z", "date_only": false, "value": "2025-10-21T23:35:34.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-3580", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:59Z", "date_only": false, "value": "2025-10-22T00:31:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RR9H-G433-576P", "record": "GHSA-RR9H-G433-576P", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-24)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "ef6efab7-4c78-4773-8685-c24b6310e0fc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "1b1ecbde-b4a5-4324-894f-3b346959a9ae", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "cdfe29a9-6402-4ee6-b84f-0c4acd128e44", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:28:39.898Z", "date_only": false, "value": "2026-02-02T12:28:39.898790Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/224cda1c-77ec-48c8-9a2c-5ec7de034839", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "7e9ecd9c-eaaf-4508-acf1-4ddbdd7b8470", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/224cda1c-77ec-48c8-9a2c-5ec7de034839", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "7bdbad45-0e3d-40a3-98af-4ea38135afba", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "ecf59312-6bb7-4e88-b077-fb59a5cf8b4c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-26)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "ba402dbf-e907-4e23-ab53-df023960d949"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "72d1cae1-cffe-4fca-8413-b7a0c5bd1f70"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "269a8af8-17bc-4852-b56c-18841b00b3a5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "9e3947d4-4891-4da5-b70e-6e78ea717d15"}, {"timestamp": "2026-06-19T12:47:57.601Z", "date_only": false, "value": "2026-06-19T12:47:57.601086Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c08689ba-d7f2-4495-85d0-db14b3ccd17c", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "885836ee-b3ab-4271-8a9d-a67b05a896cf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c08689ba-d7f2-4495-85d0-db14b3ccd17c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-3580", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:45.880Z", "date_only": false, "value": "2026-06-23T14:04:45.880757Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "373c5bf1-8633-4e84-98e6-f65d812dfe13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6a6fd2fe-0100-4b86-a5f2-9c4d87ee2991", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:46.692Z", "date_only": false, "value": "2026-06-30T09:23:46.692741Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "2d9e264d-5279-4b47-8db9-aa8d9537b7eb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:03:13.271Z", "date_only": false, "value": "2026-07-29T12:03:13.271678Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/817", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "2551c70d-961f-4bd1-b1d6-df357b41d1eb", "content": "\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (21-27 \u0438\u044e\u043d\u044f)\n\n1\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u0443\u043c\u043d\u044b\u0445\u00bb \ud83d\udeb4\ud83c\udffb\u0432\u0435\u043b\u043e\u0441\u0438\u043f\u0435\u0434\u0430\u0445 Peloton Bike+. \u041f\u0440\u0438 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \ud83d\udeb4\ud83c\udfff\u200d\u2640\ufe0f\u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c.\n\n2\ufe0f\u20e3\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \ud83e\uddc5Tor \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0430\u0439\u0442\u0430\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \n\n3\ufe0f\u20e3\u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u0443\u0432\u0435\u0440\u0435\u043d, \u0447\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \ud83c\udf4fApple \u043f\u0440\u0435\u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438\ud83d\udcf1 iCloud. \n\n4\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \ud83d\udcbbNVIDIA \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 26 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Jetson \u0441\u0435\u0440\u0438\u0438 TX2, TX2 NX, \u0441\u0435\u0440\u0438\u0438 AGX Xavier, Xavier NX, \u0430 \u0442\u0430\u043a\u0436\u0435 Nano \u0438 Nano 2GB \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Jetson Linux \u0434\u043e 32.5.1 \n\n5\ufe0f\u20e3\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \ud83d\ude37Wire \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. \u0415\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n6\ufe0f\u20e3\u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445\ud83d\udda5 Linux Pling Store \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \n\n7\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\ud83d\udcbe SonicWall \u0441\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 \u0433\u043e\u0434 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall VPN. \n\n8\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\ud83d\udcbf Palo Alto Networks \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cortex XSOAR, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 REST API.\n\n9\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \ud83d\udddcTools \u0434\u043b\u044f Windows. \n\n1\ufe0f\u20e30\ufe0f\u20e3\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \ud83d\udcbbDell SupportAssist \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0440\u0438\u0441\u043a\u0443 \u0431\u043e\u043b\u0435\u0435 30 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u041f\u041a. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BIOSConnect Dell SupportAssist, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 BIOS \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n1\ufe0f\u20e31\ufe0f\u20e3\u0425\u0430\u043a\u0435\u0440\u044b\ud83d\udce1 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco ASA \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0432 Twitter. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco ASA \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2020-3580.\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "url": "https://t.me/cisoclub/817"}, {"timestamp": "2026-08-03T22:00:05.048Z", "date_only": false, "value": "2026-08-03T22:00:05.048426Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/817", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "581111da-4f67-441c-8399-9275d3d5b15f", "content": "\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (21-27 \u0438\u044e\u043d\u044f)\n\n1\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u0443\u043c\u043d\u044b\u0445\u00bb \ud83d\udeb4\ud83c\udffb\u0432\u0435\u043b\u043e\u0441\u0438\u043f\u0435\u0434\u0430\u0445 Peloton Bike+. \u041f\u0440\u0438 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \ud83d\udeb4\ud83c\udfff\u200d\u2640\ufe0f\u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c.\n\n2\ufe0f\u20e3\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \ud83e\uddc5Tor \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0430\u0439\u0442\u0430\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \n\n3\ufe0f\u20e3\u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u0443\u0432\u0435\u0440\u0435\u043d, \u0447\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \ud83c\udf4fApple \u043f\u0440\u0435\u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438\ud83d\udcf1 iCloud. \n\n4\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \ud83d\udcbbNVIDIA \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 26 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Jetson \u0441\u0435\u0440\u0438\u0438 TX2, TX2 NX, \u0441\u0435\u0440\u0438\u0438 AGX Xavier, Xavier NX, \u0430 \u0442\u0430\u043a\u0436\u0435 Nano \u0438 Nano 2GB \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Jetson Linux \u0434\u043e 32.5.1 \n\n5\ufe0f\u20e3\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \ud83d\ude37Wire \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. \u0415\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n6\ufe0f\u20e3\u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445\ud83d\udda5 Linux Pling Store \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \n\n7\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\ud83d\udcbe SonicWall \u0441\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 \u0433\u043e\u0434 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall VPN. \n\n8\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\ud83d\udcbf Palo Alto Networks \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cortex XSOAR, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 REST API.\n\n9\ufe0f\u20e3\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \ud83d\udddcTools \u0434\u043b\u044f Windows. \n\n1\ufe0f\u20e30\ufe0f\u20e3\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \ud83d\udcbbDell SupportAssist \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0440\u0438\u0441\u043a\u0443 \u0431\u043e\u043b\u0435\u0435 30 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u041f\u041a. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BIOSConnect Dell SupportAssist, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 BIOS \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n1\ufe0f\u20e31\ufe0f\u20e3\u0425\u0430\u043a\u0435\u0440\u044b\ud83d\udce1 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco ASA \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0432 Twitter. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco ASA \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2020-3580.\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "url": "https://t.me/cisoclub/817", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-11T19:42:47.633Z", "date_only": false, "value": "2026-08-11T19:42:47.633", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-3580", "record": "FKIE_CVE-2020-3580", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-13T10:15:09.427Z", "date_only": false, "value": "2026-08-13T10:15:09.427330Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "18ccfa4a-d550-4e3b-b70f-946949b18d52", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T10:15:07.736Z", "date_only": false, "value": "2026-08-14T10:15:07.736579Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "5b39b9c5-19dd-41b0-bc0d-58eaa4fdfc5c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-18T10:15:08.360Z", "date_only": false, "value": "2026-08-18T10:15:08.360110Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "c566f76a-f2ab-4dd5-989b-9126a5707391", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-20T10:15:19.898Z", "date_only": false, "value": "2026-08-20T10:15:19.898323Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "61a35251-4438-4c8a-a919-47dfb925b6ca", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-22T10:15:05.576Z", "date_only": false, "value": "2026-08-22T10:15:05.576202Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "69648912-c7a9-44d4-80f7-cdfec51045fe", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-23T10:15:06.192Z", "date_only": false, "value": "2026-08-23T10:15:06.192256Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-22)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "74c3ac59-a30e-43a9-94aa-98621b196be5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T10:15:18.252Z", "date_only": false, "value": "2026-08-29T10:15:18.252606Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "38b0f512-b1a0-4571-9229-005360cdc147", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:47.165Z", "date_only": false, "value": "2026-09-01T17:00:47.165563Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3582", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "1ed5ec8a-a3bb-4717-990b-1c02a1b9dbf8", "content": "Cisco Adaptive Security Appliances (ASA) have been actively targeted by hackers following the release of exploit code for a security vulnerability (CVE-2020-3580)\nRead: https://thehackernews.com/2021/06/cisco-asa-flaw-under-active-attack.html", "url": "https://t.me/cissp/3582"}, {"timestamp": "2026-09-01T20:02:34.765Z", "date_only": false, "value": "2026-09-01T20:02:34.765898Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/14538", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "9e7d0f81-8c6f-45df-b110-538e738fe646", "content": "Black Hat Ethical Hacking\nCisco ASA Bug Now Actively Exploited as PoC Drops\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Cisco ASA Bug Now Actively Exploited as PoC DropsPost Views: 113 \nReading Time: 1 Minute\nResearchers have dropped a proof-of-concept (PoC) exploit on Twitter for a known cross-site scripting (XSS) vulnerability in the Cisco Adaptive Security Appliance (ASA).\nResearchers at Positive Technologies published the PoC for the bug (CVE-2020-3580) on Thursday. One of the researchers there, Mikhail Klyuchnikov, noted that there were a heap of researchers now chasing after an exploit for the bug, which he termed \u201clow-hanging\u201d fruit.\nhttps://s.w.org/images/core/emoji/13.0.1/72x72/1f381.png PoC for XSS in Cisco ASA (CVE-2020-3580)\n\nPOST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: ciscoASA.local\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 44\nSAMLResponse=\"><svg pic.twitter.com/c53MKSK9bg\n\n \n\u2014 PT SWARM (@ptswarm) June 24, 2021\nMeanwhile, Tenable researchers published an alert about the PoC, noting that it has started to see cyberattacks using the vulnerability on targets in the wild.\n\n\u201cTenable has also received a report that attackers are exploiting CVE-2020-3580 in the wild,\u201d according to its Thursday alert. \u201cWith this new information, Tenable recommends that organizations prioritize patching CVE-2020-3580.\u201d\n\nAnd indeed, the PT PoC tweet was met with plenty of \u201cOoh thanks\u201d and \u201cthank you so much\u201d responses, presumably from would-be hackers.\nSee Also: New iPhone Bug Breaks Your WiFi: Here\u2019s The Fix\nMeanwhile, researchers at WebSec noted that the bug could be exploited for more than XSS:\nYou could have gotten 2 CVE numbers for this, as this is not just XSS but also CSRF.\n\n\u2014 WebSec (@websecnl) June 25, 2021\n\u201cResearchers often develop PoCs before reporting a vulnerability to a developer and publishing them allows other researchers to both check their work and potentially dig further and discover other issues,\u201d Claire Tills, senior research engineer at Tenable, told Threatpost. \u201cPoCs can also be used by defenders to develop detections for vulnerabilities. Unfortunately, giving that valuable information to defenders means it can also end up in the hands of attackers.\u201d\n\nGiven that a patch has been available for this vulnerability for several months, organizations are able to protect themselves which isn\u2019t the case with 0-day disclosures, she pointed out. \u201cHowever, unpatched vulnerabilities continue to haunt many organizations,\u201d Tillis added. \u201cThe public availability of a PoC is another stark reminder that effective patching is a vital step for organizations to protect themselves.\u201d Real-World Attacks for Cisco ASAThe Cisco ASA is a cybersecurity perimeter-defense appliance\u00a0that combines firewall, antivirus, intrusion prevention and virtual private network (VPN) capabilities, all meant to stop threats from making it onto corporate networks. A compromise of the device is akin to unlocking the front door of the castle for storming cyberattackers.\nSee Also: Offensive Security Tool: Pixload\nXSS attacks occur when malicious scripts are injected into otherwise benign and trusted websites; any visitors to the compromised websites are thus subject to drive-by attacks.\n\nSuccessful exploitation in this case means that unauthenticated, remote attackers could \u201cexecute arbitrary code within the [ASA] interface and access sensitive, browser-based information,\u201d Tenable added.\n\nOnce in, they could modify the device\u2019s configuration, according to Leo Pate, an application security consultant at nVisium.\n\nHowever, the target would need to be logged into the ASA for the attackers to see any joy. \u201cWhile th[...]", "url": "https://t.me/hacking_Attack/14538"}, {"timestamp": "2026-09-08T02:00:06.075Z", "date_only": false, "value": "2026-09-08T02:00:06.075131Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/14538", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "4cf28062-904f-4bdb-ad47-f678b932e89c", "content": "Black Hat Ethical Hacking\nCisco ASA Bug Now Actively Exploited as PoC Drops\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Cisco ASA Bug Now Actively Exploited as PoC DropsPost Views: 113 \nReading Time: 1 Minute\nResearchers have dropped a proof-of-concept (PoC) exploit on Twitter for a known cross-site scripting (XSS) vulnerability in the Cisco Adaptive Security Appliance (ASA).\nResearchers at Positive Technologies published the PoC for the bug (CVE-2020-3580) on Thursday. One of the researchers there, Mikhail Klyuchnikov, noted that there were a heap of researchers now chasing after an exploit for the bug, which he termed \u201clow-hanging\u201d fruit.\nhttps://s.w.org/images/core/emoji/13.0.1/72x72/1f381.png PoC for XSS in Cisco ASA (CVE-2020-3580)\n\nPOST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: ciscoASA.local\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 44\nSAMLResponse=\"><svg pic.twitter.com/c53MKSK9bg\n\n \n\u2014 PT SWARM (@ptswarm) June 24, 2021\nMeanwhile, Tenable researchers published an alert about the PoC, noting that it has started to see cyberattacks using the vulnerability on targets in the wild.\n\n\u201cTenable has also received a report that attackers are exploiting CVE-2020-3580 in the wild,\u201d according to its Thursday alert. \u201cWith this new information, Tenable recommends that organizations prioritize patching CVE-2020-3580.\u201d\n\nAnd indeed, the PT PoC tweet was met with plenty of \u201cOoh thanks\u201d and \u201cthank you so much\u201d responses, presumably from would-be hackers.\nSee Also: New iPhone Bug Breaks Your WiFi: Here\u2019s The Fix\nMeanwhile, researchers at WebSec noted that the bug could be exploited for more than XSS:\nYou could have gotten 2 CVE numbers for this, as this is not just XSS but also CSRF.\n\n\u2014 WebSec (@websecnl) June 25, 2021\n\u201cResearchers often develop PoCs before reporting a vulnerability to a developer and publishing them allows other researchers to both check their work and potentially dig further and discover other issues,\u201d Claire Tills, senior research engineer at Tenable, told Threatpost. \u201cPoCs can also be used by defenders to develop detections for vulnerabilities. Unfortunately, giving that valuable information to defenders means it can also end up in the hands of attackers.\u201d\n\nGiven that a patch has been available for this vulnerability for several months, organizations are able to protect themselves which isn\u2019t the case with 0-day disclosures, she pointed out. \u201cHowever, unpatched vulnerabilities continue to haunt many organizations,\u201d Tillis added. \u201cThe public availability of a PoC is another stark reminder that effective patching is a vital step for organizations to protect themselves.\u201d Real-World Attacks for Cisco ASAThe Cisco ASA is a cybersecurity perimeter-defense appliance\u00a0that combines firewall, antivirus, intrusion prevention and virtual private network (VPN) capabilities, all meant to stop threats from making it onto corporate networks. A compromise of the device is akin to unlocking the front door of the castle for storming cyberattackers.\nSee Also: Offensive Security Tool: Pixload\nXSS attacks occur when malicious scripts are injected into otherwise benign and trusted websites; any visitors to the compromised websites are thus subject to drive-by attacks.\n\nSuccessful exploitation in this case means that unauthenticated, remote attackers could \u201cexecute arbitrary code within the [ASA] interface and access sensitive, browser-based information,\u201d Tenable added.\n\nOnce in, they could modify the device\u2019s configuration, according to Leo Pate, an application security consultant at nVisium.\n\nHowever, the target would need to be logged into the ASA for the attackers to see any joy. \u201cWhile th[...]", "url": "https://t.me/hacking_Attack/14538", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T10:15:23.248Z", "date_only": false, "value": "2026-09-10T10:15:23.248387Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "eb41f7c4-5fad-43b1-94ae-40aa1fc46e2b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-11T03:00:04.845Z", "date_only": false, "value": "2026-09-11T03:00:04.845547Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/3582", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "c23acb8b-18a9-4673-9b09-25db3be3f4ae", "content": "Cisco Adaptive Security Appliances (ASA) have been actively targeted by hackers following the release of exploit code for a security vulnerability (CVE-2020-3580)\nRead: https://thehackernews.com/2021/06/cisco-asa-flaw-under-active-attack.html", "url": "https://t.me/cissp/3582", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-13T19:00:14Z", "date_only": false, "value": "2026-10-13T19:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rhYhr76FidjJAzOBzV0WbzLQvA0hxNFR79TxywRwxJcTlI4", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "1051951f-6874-450b-b36b-c36a2689ab41", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-13T19:00:14Z", "date_only": false, "value": "2026-10-13T19:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rhYhr76FidjJAzOBzV0WbzLQvA0hxNFR79TxywRwxJcTlI4", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "84f18207-0123-450f-a199-51a140d7ebf0"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-3580", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "224cda1c-77ec-48c8-9a2c-5ec7de034839", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2020-3580", "field": "timestamps.last_seen_at", "uuid": "bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": true, "value": "2026-11-05", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2020-3580", "field": "evidence.0.details.observation_date", "uuid": "bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2020-3580", "field": "status.status_updated_at", "uuid": "bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-07T01:00:01Z", "date_only": false, "value": "2026-11-07T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2020-3580", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "bd29c5bc-9dd5-4bd2-a688-daad70b0ab46", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-10T20:56:12.097Z", "anchors": {"origin": {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-06-24T13:34:08Z", "date_only": false, "value": "2021-06-24T13:34:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/48", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "3a0d5c0d-c983-41ac-be58-1052b474ca3e", "content": "PoC for XSS in Cisco ASA (CVE-2020-3580)\n\n\nPOST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: ciscoASA.local\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 44\n\nSAMLResponse=\">", "url": "https://t.me/ptswarm/48", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2021-06-25T18:25:12Z", "date_only": false, "value": "2021-06-25T18:25:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/25709", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "544b3a9f-92e2-4565-8e61-6ec590ea2103", "content": "\u274c Cisco ASA Bug Now Actively Exploited as PoC Drops \u274c\n\nIn-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/25709", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 21407112.0, "hours": 5946.42, "days": 247.7675, "min_seconds": 21320712.0, "max_seconds": 21407112.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-06-25T18:25:12Z", "date_only": false, "value": "2021-06-25T18:25:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/25709", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "544b3a9f-92e2-4565-8e61-6ec590ea2103", "content": "\u274c Cisco ASA Bug Now Actively Exploited as PoC Drops \u274c\n\nIn-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/25709", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 21407112.0, "hours": 5946.42, "days": 247.7675, "min_seconds": 21320712.0, "max_seconds": 21407112.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-06-25T18:25:12Z", "date_only": false, "value": "2021-06-25T18:25:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/25709", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "544b3a9f-92e2-4565-8e61-6ec590ea2103", "content": "\u274c Cisco ASA Bug Now Actively Exploited as PoC Drops \u274c\n\nIn-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/25709", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 21303248.0, "hours": 5917.568888888889, "days": 246.56537037037037, "min_seconds": 21216848.0, "max_seconds": 21303248.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-06-24T13:34:08Z", "date_only": false, "value": "2021-06-24T13:34:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/48", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "3a0d5c0d-c983-41ac-be58-1052b474ca3e", "content": "PoC for XSS in Cisco ASA (CVE-2020-3580)\n\n\nPOST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: ciscoASA.local\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 44\n\nSAMLResponse=\">", "url": "https://t.me/ptswarm/48", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 191105772.097014, "hours": 53084.936693615, "days": 2211.8723622339585, "min_seconds": 191019372.097014, "max_seconds": 191105772.097014, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-10-21T00:00:00Z", "date_only": false, "value": "2020-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2020-3580", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T20:56:12.097Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 169698660.097014, "hours": 47138.516693615005, "days": 1964.1048622339586, "min_seconds": 169698660.097014, "max_seconds": 169698660.097014, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-06-25T18:25:12Z", "date_only": false, "value": "2021-06-25T18:25:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/25709", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "544b3a9f-92e2-4565-8e61-6ec590ea2103", "content": "\u274c Cisco ASA Bug Now Actively Exploited as PoC Drops \u274c\n\nIn-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter.\n\n\ud83d\udcd6 Read\n\nvia \"Threat Post\".", "url": "https://t.me/cibsecurity/25709", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T20:56:12.097Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 169802524.097014, "hours": 47167.36780472611, "days": 1965.306991863588, "min_seconds": 169802524.097014, "max_seconds": 169802524.097014, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-06-24T13:34:08Z", "date_only": false, "value": "2021-06-24T13:34:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/48", "record": "CVE-2020-3580", "field": "creation_timestamp", "uuid": "3a0d5c0d-c983-41ac-be58-1052b474ca3e", "content": "PoC for XSS in Cisco ASA (CVE-2020-3580)\n\n\nPOST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: ciscoASA.local\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 44\n\nSAMLResponse=\">", "url": "https://t.me/ptswarm/48", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T20:56:12.097Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}