{"metadata": {"vulnerability": "CVE-2022-40765", "count": 56, "kinds": {"milestone": 5, "sighting": 13, "kev": 11, "other": 27}}, "data": [{"timestamp": "2022-09-18T00:00:00Z", "date_only": false, "value": "2022-09-18T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-40765", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-913", "record": "CERTFR-2022-AVI-913", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-22T00:00:00Z", "date_only": false, "value": "2022-11-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-11-22T00:00:00Z", "date_only": false, "value": "2022-11-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-40765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-22T00:00:00Z", "date_only": false, "value": "2022-11-22T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-40765", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-22T01:15:00Z", "date_only": false, "value": "2022-11-22T01:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2W3J-8R4X-F4MG", "record": "GHSA-2W3J-8R4X-F4MG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-22T01:15:00Z", "date_only": false, "value": "2022-11-22T01:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-40765", "record": "GSD-2022-40765", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-22T01:15:31.847Z", "date_only": false, "value": "2022-11-22T01:15:31.847000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-11-22T01:15:31.847Z", "date_only": false, "value": "2022-11-22T01:15:31.847", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-40765", "record": "FKIE_CVE-2022-40765", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-22T03:30:57Z", "date_only": false, "value": "2022-11-22T03:30:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2W3J-8R4X-F4MG", "record": "GHSA-2W3J-8R4X-F4MG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-22T07:12:40Z", "date_only": false, "value": "2022-11-22T07:12:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/53298", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "c78eba23-388a-4827-918e-aff5dff1867e", "content": "\u203c CVE-2022-40765 \u203c\n\nA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/53298"}, {"timestamp": "2022-11-26T03:25:00Z", "date_only": false, "value": "2022-11-26T03:25Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-40765", "record": "GSD-2022-40765", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-26T03:25:35.380Z", "date_only": false, "value": "2022-11-26T03:25:35.380000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-11-28T00:00:00Z", "date_only": false, "value": "2022-11-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-40765", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a6100c10-469c-425a-9b92-69a895a0cd0a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": true, "value": "2023-02-21", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-40765", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-40765", "field": "evidence.0.details.added_date", "uuid": "a6100c10-469c-425a-9b92-69a895a0cd0a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": true, "value": "2023-02-21", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "evidence.0.details.date_added", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-40765", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a6100c10-469c-425a-9b92-69a895a0cd0a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "status.status_updated_at", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-40765", "field": "status.status_updated_at", "uuid": "a6100c10-469c-425a-9b92-69a895a0cd0a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-40765", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-02-21T23:00:00Z", "date_only": false, "value": "2023-02-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-02-21T23:00:00Z", "date_only": false, "value": "2023-02-21T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-02-22T06:49:53Z", "date_only": false, "value": "2023-02-22T06:49:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3079", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "b68167da-e3a5-442c-bc3b-e3fb6262285b", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\n\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html", "url": "https://t.me/thehackernews/3079", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": true, "value": "2023-03-14", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "evidence.0.details.due_date", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "3d63dccf-ac98-476a-8e66-e578c16f98e7"}, {"timestamp": "2023-11-10T00:00:00Z", "date_only": false, "value": "2023-11-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "sources_release_date.data.0.date"}, {"timestamp": "2023-11-10T08:18:00Z", "date_only": false, "value": "2023-11-10T08:18:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-12-05T01:25:42Z", "date_only": false, "value": "2023-12-05T01:25:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1355", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "cc317486-cec5-465f-b228-5916dd45202c", "content": "#ExploitObserverAlert\n\nCVE-2022-40765\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-40765. A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.\n\nFIRST-EPSS: 0.002010000\nNVD-IS: 5.9\nNVD-ES: 0.9", "url": "https://t.me/arpsyndicate/1355"}, {"timestamp": "2023-12-13T01:19:31.052Z", "date_only": false, "value": "2023-12-13T01:19:31.052604Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-40765", "record": "GSD-2022-40765", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T13:11:44.887Z", "date_only": false, "value": "2023-12-18T13:11:44.887000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202211-1679", "record": "VAR-202211-1679", "field": "last_update_date"}, {"timestamp": "2024-08-03T12:28:42.466Z", "date_only": false, "value": "2024-08-03T12:28:42.466Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-40765", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:36:24.194Z", "date_only": false, "value": "2024-08-15T17:36:24.194+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-24T20:33:49.961Z", "date_only": false, "value": "2024-12-24T20:33:49.961340Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971768", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "c04a9921-da6a-46ce-b9e7-01db11880431", "url": "https://feedsin.space/feed/CISAKevBot/items/2971768"}, {"timestamp": "2025-01-28T21:37:20.585Z", "date_only": false, "value": "2025-01-28T21:37:20.585182Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-40765", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-28T21:37:20.585Z", "date_only": false, "value": "2025-01-28T21:37:20.585182Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-40765", "record": "FKIE_CVE-2022-40765", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T02:40:48Z", "date_only": false, "value": "2025-02-06T02:40:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Kilcqj-01hSB61ivOp72hCqX2Z4YcByxZD2e-KVOKoCfiL_p", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "68d78043-8c36-49ac-a38d-f80348a62908"}, {"timestamp": "2025-02-06T02:41:36Z", "date_only": false, "value": "2025-02-06T02:41:36.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/B_s7wUv7NqnF_QxZ0yvH_1oKFsyHKfe56lQgg2pc4E2COeUn", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "defb2b50-5a87-476f-8580-3ae7f3f81c54"}, {"timestamp": "2025-02-23T02:10:38Z", "date_only": false, "value": "2025-02-23T02:10:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "7f8357cf-d197-43a8-a494-677061650eeb"}, {"timestamp": "2025-10-21T23:15:31.091Z", "date_only": false, "value": "2025-10-21T23:15:31.091Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-40765", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:31.091Z", "date_only": false, "value": "2025-10-21T23:15:31.091Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-40765", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:37Z", "date_only": false, "value": "2025-10-22T00:32:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2W3J-8R4X-F4MG", "record": "GHSA-2W3J-8R4X-F4MG", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:04.885Z", "date_only": false, "value": "2026-02-02T12:27:04.885054Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "b3717315-f837-4562-b8b2-3c2691ec6f80", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:02:00.547Z", "date_only": false, "value": "2026-06-17T05:02:00.547", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-40765", "record": "FKIE_CVE-2022-40765", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:59.115Z", "date_only": false, "value": "2026-06-19T12:46:59.115726Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fb02a8a-8213-4bf1-b456-da9fe852968c", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "17ea1e37-bc3d-4a4f-a918-7c4122123179", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fb02a8a-8213-4bf1-b456-da9fe852968c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-40765", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a6100c10-469c-425a-9b92-69a895a0cd0a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:37.307Z", "date_only": false, "value": "2026-06-23T14:05:37.307253Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a6100c10-469c-425a-9b92-69a895a0cd0a", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "f6edd272-7136-4072-a2fb-88a14478ddc7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a6100c10-469c-425a-9b92-69a895a0cd0a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T07:00:58.225Z", "date_only": false, "value": "2026-07-26T07:00:58.225425Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1221", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "8a71e2b9-1ea7-48eb-b30a-f3d1c8827e15", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "url": "https://t.me/EchelonEyes/1221"}, {"timestamp": "2026-09-01T17:00:22.202Z", "date_only": false, "value": "2026-09-01T17:00:22.202400Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6627", "record": "CVE-2022-40765", "field": "creation_timestamp", "uuid": "bad56acf-ea87-4185-a5dd-ffdb025a40c3", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "url": "https://t.me/cissp/6627"}], "metrics": {"as_of": "2026-10-28T16:54:45.363Z", "anchors": {"origin": {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 11325600.0, "hours": 3146.0, "days": 131.08333333333334, "min_seconds": 11325600.0, "max_seconds": 11412000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 11325600.0, "hours": 3146.0, "days": 131.08333333333334, "min_seconds": 11325600.0, "max_seconds": 11412000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 127594485.363891, "hours": 35442.91260108083, "days": 1476.7880250450348, "min_seconds": 127594485.363891, "max_seconds": 127594485.363891, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1706", "record": "WID-SEC-W-2022-1706", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T16:54:45.363Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 116268885.363891, "hours": 32296.912601080836, "days": 1345.7046917117013, "min_seconds": 116182485.363891, "max_seconds": 116268885.363891, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-02-21T00:00:00Z", "date_only": false, "value": "2023-02-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-40765", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3d5fdb6e-ccfe-41ce-b518-ee4b769c88e7", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-28T16:54:45.363Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}