{"metadata": {"vulnerability": "CVE-2022-32548", "count": 33, "kinds": {"milestone": 4, "sighting": 20, "kev": 0, "other": 9}}, "data": [{"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-04T15:13:26Z", "date_only": false, "value": "2022-08-04T15:13:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2443", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "e03164ff-db96-4b40-8fea-bb452c825ebb", "content": "Researchers discovered a critical unauthenticated RCE vulnerability (CVE-2022-32548) affecting 29 different router models from DrayTek that can be exploited to gain full access over targeted networks.\n\nRead details: https://thehackernews.com/2022/08/critical-rce-bug-could-let-hackers.html", "url": "https://t.me/thehackernews/2443"}, {"timestamp": "2022-08-05T00:12:11Z", "date_only": false, "value": "2022-08-05T00:12:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/47513", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "d2f0a3cd-c681-403f-8624-cfb75af2446b", "content": "\ud83d\udd74 Critical RCE Bug in DrayTek Routers Opens SMBs to Zero-Click Attacks \ud83d\udd74\n\nSMBs should patch CVE-2022-32548 now to avoid a host of horrors, including complete network compromise, ransomware, state-sponsored attacks, and more.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/47513"}, {"timestamp": "2022-08-26T15:00:04Z", "date_only": false, "value": "2022-08-26T15:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2371", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "d7f0e9b4-43de-43ac-85aa-5343692075ed", "content": "#CVE\n\nUnauthenticated Remote Code Execution in a Wide Range of DrayTek Vigor Routers\nCVE-2022-32548\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Trellix Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2022-32548, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 DrayTek. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0435\u0441\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u043e\u043c. \u0410\u0442\u0430\u043a\u0430 \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0435\u0442\u0438 \u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0412\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f.", "url": "https://t.me/poxek/2371"}, {"timestamp": "2022-08-29T05:38:35Z", "date_only": false, "value": "2022-08-29T05:38:35.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-08-29T05:38:35Z", "date_only": false, "value": "2022-08-29T05:38:35.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-32548", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-08-29T06:15:00Z", "date_only": false, "value": "2022-08-29T06:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R59X-897W-8H5J", "record": "GHSA-R59X-897W-8H5J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-08-29T06:15:00Z", "date_only": false, "value": "2022-08-29T06:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-32548", "record": "GSD-2022-32548", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-08-29T06:15:09.423Z", "date_only": false, "value": "2022-08-29T06:15:09.423", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-32548", "record": "FKIE_CVE-2022-32548", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-08-29T20:06:55Z", "date_only": false, "value": "2022-08-29T20:06:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R59X-897W-8H5J", "record": "GHSA-R59X-897W-8H5J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-09-01T19:56:00Z", "date_only": false, "value": "2022-09-01T19:56Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-32548", "record": "GSD-2022-32548", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-09-02T00:01:03Z", "date_only": false, "value": "2022-09-02T00:01:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R59X-897W-8H5J", "record": "GHSA-R59X-897W-8H5J", "field": "modified"}, {"timestamp": "2022-10-07T14:26:04Z", "date_only": false, "value": "2022-10-07T14:26:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3KGSVBcUEI8daJAV77erOipGt_ffS4VChajyk7mqZZk-Lkw", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "6e562d84-1dad-4d1a-9e4b-2ee34fc091ce", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-24T14:31:25Z", "date_only": false, "value": "2022-10-24T14:31:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3109", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "7406ecfc-f4c4-4ff0-9f6f-31ebb8d278a6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aDrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field\nURL\uff1ahttps://github.com/uisvit/CVE-2022-32548-RCE-MASS\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3109", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-06T17:24:54Z", "date_only": false, "value": "2022-11-06T17:24:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3182", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "5ae27647-fa48-441c-9c11-9812a84382c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aDrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field\nURL\uff1ahttps://github.com/HarleyDoo/CVE-2022-32548-RCE-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3182", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-08T05:19:47Z", "date_only": false, "value": "2022-11-08T05:19:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6788", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "b6914b02-3cb6-42f2-b404-99117199a86d", "content": "#exploit\n1. CVE-2022-36804:\nA critical vulnerability in Atlassian Bitbucket Server/Data Center\nhttps://github.com/CEOrbey/CVE-2022-36804-MASS-RCE\n\n2. CVE-2022-32548:\nDrayTek unauthenticated RCE vulnerability in /cgi-bin/wlogin.cgi via username field\nhttps://github.com/HarleyDoo/CVE-2022-32548-RCE-POC", "url": "https://t.me/CyberSecurityTechnologies/6788", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-09T02:49:30Z", "date_only": false, "value": "2022-11-09T02:49:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2437", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "d569db2f-1bd9-49fd-b92a-7455413464a1", "content": "#CVE-2022\nDrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field\n\nhttps://github.com/HarleyDoo/CVE-2022-32548-RCE-POC\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2437", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-28T18:26:40Z", "date_only": false, "value": "2023-07-28T18:26:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/1164", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "1a91b079-44b6-47f0-85c4-98d6c67e3f16", "content": "#CVE-2022-32548\n\nhttps://github.com/rftg1000/CVE-2022-32548-RCE-POC", "url": "https://t.me/crackcodes/1164", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-11T20:09:29Z", "date_only": false, "value": "2023-10-11T20:09:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xxRaxVI1gR5FP04Wc_U4-0Y2xWdwmht_siqYhLchpXSnPME", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "ea0d0ca3-9cb1-46b3-a131-17c99875dd57", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-28T12:33:01Z", "date_only": false, "value": "2023-10-28T12:33:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9277", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "0f403656-25e6-4b19-b9b8-4e204b613759", "content": "#exploit\n1. CVE-2023-5521:\nRoot takeover via signature spoofing in tiann/kernelsu\nhttps://huntr.com/bounties/d438eff7-4e24-45e0-bc75-d3a5b3ab2ea1\n\n2. CVE-2023-4632:\nLPE in Lenovo System\u00a0Updater\nhttps://enigma0x3.net/2023/10/26/cve-2023-4632-local-privilege-escalation-in-lenovo-system-updater\n\n3. CVE-2022-32548:\nDrayTek unauthenticated RCE in /cgi-bin/wlogin.cgi\nhttps://github.com/MosaedH/CVE-2022-32548-RCE-POC", "url": "https://t.me/CyberSecurityTechnologies/9277", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:19:12.646Z", "date_only": false, "value": "2023-12-13T01:19:12.646517Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-32548", "record": "GSD-2022-32548", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T07:46:43.481Z", "date_only": false, "value": "2024-08-03T07:46:43.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T07:46:43.481Z", "date_only": false, "value": "2024-08-03T07:46:43.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-32548", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:40:14Z", "date_only": false, "value": "2024-08-16T08:40:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1566", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "6dc910e8-ae03-424b-ba72-8add71131782", "content": "#exploit\n1. CVE-2023-5521:\nRoot takeover via signature spoofing in tiann/kernelsu\nhttps://huntr.com/bounties/d438eff7-4e24-45e0-bc75-d3a5b3ab2ea1\n\n2. CVE-2023-4632:\nLPE in Lenovo System\u00a0Updater\nhttps://enigma0x3.net/2023/10/26/cve-2023-4632-local-privilege-escalation-in-lenovo-system-updater\n\n3. CVE-2022-32548:\nDrayTek unauthenticated RCE in /cgi-bin/wlogin.cgi\nhttps://github.com/MosaedH/CVE-2022-32548-RCE-POC", "url": "https://t.me/Rootsec_2/1566", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T04:47:30.777Z", "date_only": false, "value": "2026-06-17T04:47:30.777", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-32548", "record": "FKIE_CVE-2022-32548", "field": "lastModified"}, {"timestamp": "2026-07-16T07:00:04.661Z", "date_only": false, "value": "2026-07-16T07:00:04.661515Z", "kind": "sighting", "label": "Seen", "source": "Telegram/RKohSGCvdziMijdXaN--ghlnE8--eQXxg0VJ7hB8GReUre0", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "34b0bb9e-9026-4a38-a060-820e3bb84cf3"}, {"timestamp": "2026-07-16T07:00:04.972Z", "date_only": false, "value": "2026-07-16T07:00:04.972264Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gDGbwf_ZbzWDh1fTowWRzKWk9bgnj5_z8hDZw5h6qACPYLQ", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "2518624e-cc1d-48da-a915-18bf962a58fe", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:43.417Z", "date_only": false, "value": "2026-07-26T02:02:43.417023Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/515", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "f00c63cc-c41b-496f-bd95-cf8d3f4f9f09", "content": "\u0421\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 DrayTek \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Trellix Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 CVE-2022-32548 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS:10). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 28 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 DrayTek, \u044d\u0442\u043e \u043e\u043a\u043e\u043b\u043e 200 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0435\u0441\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0432\u044b\u0445\u043e\u0434 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \n\n\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0430\u043c\u044b\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f: \n\n- \u0443\u0442\u0435\u0447\u043a\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043a\u043b\u044e\u0447\u0438, \u043f\u0430\u0440\u043e\u043b\u0438);\n- \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438;\n- \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440;\n- \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u0440\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430;\n- \u0431\u043e\u0442\u043d\u0435\u0442-\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c (DDoS, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0442.\u0434.).\n\n\u041c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 DrayTek \u0434\u043b\u044f \u043c\u0430\u043b\u044b\u0445 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043e\u0444\u0438\u0441\u043e\u0432 (SOHO) \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435, \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0435\u0449\u0435 \u0432 \u0440\u044f\u0434\u0435 \u0441\u0442\u0440\u0430\u043d, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0420\u043e\u0441\u0441\u0438\u044e. \u0422\u0430\u043a \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430 \u0434\u043e\u043c\u0443, \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u043c\u0430\u043b\u044b\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c VPN-\u0434\u043e\u0441\u0442\u0443\u043f \u0441\u0432\u043e\u0438\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c.\n\n\u0412\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #DrayTek", "url": "https://t.me/EchelonEyes/515"}, {"timestamp": "2026-07-29T12:01:00.868Z", "date_only": false, "value": "2026-07-29T12:01:00.868333Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2469", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "d123121b-5f37-4552-baae-7c51bfc6cdd7", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-32548\nGithub: https://github.com/alexmention/CVE-2022-32548-RCE-POC\nDescribe: \nAn issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.", "url": "https://t.me/CVEhub/2469"}, {"timestamp": "2026-08-01T03:00:03.514Z", "date_only": false, "value": "2026-08-01T03:00:03.514414Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2469", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "80dadee8-279b-43c1-aa0c-9625b64a5a04", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-32548\nGithub: https://github.com/alexmention/CVE-2022-32548-RCE-POC\nDescribe: \nAn issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.", "url": "https://t.me/CVEhub/2469", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:01:27.081Z", "date_only": false, "value": "2026-09-01T20:01:27.081149Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/64163", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "a6bf2269-5e08-44ca-91ee-c1f66522c89a", "content": "Dark Reading: Attacks/Breaches\nCritical RCE Bug in DrayTek Routers Opens SMBs to Zero-Click Attacks\n\nSMBs should patch CVE-2022-32548 now to avoid a host of horrors, including complete network compromise, ransomware, state-sponsored attacks, and more.", "url": "https://t.me/hacking_Attack/64163"}, {"timestamp": "2026-09-28T15:00:19Z", "date_only": false, "value": "2026-09-28T15:00:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/z3CC0LkDCXHu0ybWtGCfHu7KcJkTOUjqa3qIDZpLFyx9ZgY", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "3b1e379c-6eae-466b-a326-ff327ef03b1b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-28T15:00:19Z", "date_only": false, "value": "2026-09-28T15:00:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/z3CC0LkDCXHu0ybWtGCfHu7KcJkTOUjqa3qIDZpLFyx9ZgY", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "bf11c3a4-2e9f-4663-a744-6ede43250211"}], "metrics": {"as_of": "2026-10-31T02:13:30.490Z", "anchors": {"origin": {"timestamp": "2022-08-29T05:38:35Z", "date_only": false, "value": "2022-08-29T05:38:35.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-08-29T05:38:35Z", "date_only": false, "value": "2022-08-29T05:38:35.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-10-07T14:26:04Z", "date_only": false, "value": "2022-10-07T14:26:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3KGSVBcUEI8daJAV77erOipGt_ffS4VChajyk7mqZZk-Lkw", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "6e562d84-1dad-4d1a-9e4b-2ee34fc091ce", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 3401249.0, "hours": 944.7913888888888, "days": 39.36630787037037, "min_seconds": 3401249.0, "max_seconds": 3401249.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-08-29T05:38:35Z", "date_only": false, "value": "2022-08-29T05:38:35.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-10-07T14:26:04Z", "date_only": false, "value": "2022-10-07T14:26:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3KGSVBcUEI8daJAV77erOipGt_ffS4VChajyk7mqZZk-Lkw", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "6e562d84-1dad-4d1a-9e4b-2ee34fc091ce", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 131661295.49096, "hours": 36572.58208082222, "days": 1523.857586700926, "min_seconds": 131661295.49096, "max_seconds": 131661295.49096, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-08-29T05:38:35Z", "date_only": false, "value": "2022-08-29T05:38:35.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-32548", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T02:13:30.490Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 128260046.49096, "hours": 35627.79069193333, "days": 1484.4912788305555, "min_seconds": 128260046.49096, "max_seconds": 128260046.49096, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-07T14:26:04Z", "date_only": false, "value": "2022-10-07T14:26:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3KGSVBcUEI8daJAV77erOipGt_ffS4VChajyk7mqZZk-Lkw", "record": "CVE-2022-32548", "field": "creation_timestamp", "uuid": "6e562d84-1dad-4d1a-9e4b-2ee34fc091ce", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T02:13:30.490Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}