{"vulnerability": "cve-2021-3772", "sightings": [{"uuid": "669e9155-537d-4989-93f1-a0b2ab707290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37728", "type": "seen", "source": "https://t.me/ics_cert/500", "content": "\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0635\u0646\u0639\u062a\u06cc: \nSCALANCE \u0632\u06cc\u0645\u0646\u0633\n1. \u062e\u0644\u0627\u0635\u0647 \u0627\u062c\u0631\u0627\u06cc\u06cc\n    CVSS \u0646\u0633\u062e\u0647 3 9.8\n    \u062a\u0648\u062c\u0647: \u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc \u062d\u0645\u0644\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0633\u062a\n    \u0641\u0631\u0648\u0634\u0646\u062f\u0647: \u0632\u06cc\u0645\u0646\u0633\n    \u062a\u062c\u0647\u06cc\u0632\u0627\u062a: SCALANCE\n    \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627: \u062c\u0639\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc\u060c \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644\u060c \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u06a9\u0644\u0627\u0633\u06cc\u06a9\u060c \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646\u060c \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631\u060c \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0647\n\n2. \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0631\u06cc\u0633\u06a9\n\u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0645\u06cc\u0632 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u062a\u0632\u0631\u06cc\u0642 \u06a9\u0646\u062f \u06cc\u0627 \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u0631\u0627 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u062f.\n\n3. \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc\n3.1 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631\n\u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0632\u06cc\u0631 SCALANCE W1750D\u060c \u06cc\u06a9 \u067e\u0644\u062a \u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u060c \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f:\n    SCALANCE W1750D: \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u0646\u0633\u062e\u0647 8.7.1.3\n    SCALANCE W1750D: \u0646\u0633\u062e\u0647 8.7.1.3 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 (\u0641\u0642\u0637 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 CVE-2019-5318\u060c CVE-2020-37719\u060c CVE-2021-37717\u060c CVE-2021-37718\u060c CVE-2021-33720\u060c CVE-2021-33720\u060c CVE-2021-33720 -2021-37722\u060c CVE-2021-37728)\n3.2 \u067e\u0633 \u0632\u0645\u06cc\u0646\u0647\n\n\u2022 \u0628\u062e\u0634 \u0647\u0627\u06cc     \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062d\u06cc\u0627\u062a\u06cc: \u0645\u0648\u0627\u062f \u0634\u06cc\u0645\u06cc\u0627\u06cc\u06cc\u060c \u0627\u0646\u0631\u0698\u06cc\u060c \u063a\u0630\u0627 \u0648 \u06a9\u0634\u0627\u0648\u0631\u0632\u06cc\u060c \u0645\u0631\u0627\u0642\u0628\u062a \u0647\u0627\u06cc \u0628\u0647\u062f\u0627\u0634\u062a\u06cc \u0648 \u0628\u0647\u062f\u0627\u0634\u062a \u0639\u0645\u0648\u0645\u06cc\u060c \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u062d\u0645\u0644 \u0648 \u0646\u0642\u0644\u060c \u0648 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0622\u0628 \u0648 \u0641\u0627\u0636\u0644\u0627\u0628\n\u2022 \u06a9\u0634\u0648\u0631\u0647\u0627     /\u0645\u0646\u0627\u0637\u0642 \u0645\u0633\u062a\u0642\u0631: \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u062c\u0647\u0627\u0646\n\u2022     \u0645\u062d\u0644 \u062f\u0641\u062a\u0631 \u0645\u0631\u06a9\u0632\u06cc \u0634\u0631\u06a9\u062a: \u0622\u0644\u0645\u0627\u0646\n\n4. \u06a9\u0627\u0647\u0634 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\n\u0632\u06cc\u0645\u0646\u0633 \u0627\u0631\u062a\u0642\u0627 SCALANCE W1750 \u0631\u0627 \u0628\u0647 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc 8.7.1.3 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f.\n\u0632\u06cc\u0645\u0646\u0633 \u0631\u0627\u0647\u200c\u062d\u0644\u200c\u0647\u0627 \u0648 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u06a9\u0627\u0647\u0634\u06cc \u0648\u06cc\u0698\u0647 \u0632\u06cc\u0631 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f:\n1-    \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0628\u0647 \u0631\u0627\u0628\u0637 \u062e\u0637 \u0641\u0631\u0645\u0627\u0646 ArubaOS \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f.\n2-    \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0628\u0647 \u0631\u0627\u0628\u0637 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0648\u0628 ArubaOS \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f.\n3-    \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0628\u0647 \u0631\u0627\u0628\u0637 \u062e\u0637 \u0641\u0631\u0645\u0627\u0646 Mobility Conductor \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f.\n4-    \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0648\u06cc\u0698\u06af\u06cc Enhanced PAPI Security \u062f\u0631 \u0635\u0648\u0631\u062a \u0648\u062c\u0648\u062f\u060c \u0627\u0632 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n 5-   \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u062f\u0627\u0631\u062f. \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0647\u0627 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0647\u0627\u06cc \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u06a9\u0627\u0645\u0644\u0627\u064b \u06a9\u0646\u062a\u0631\u0644 \u0634\u062f\u0647 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u06a9\u0645 \u0647\u0633\u062a\u0646\u062f.\n6-    \u0628\u0631\u0627\u06cc \u0628\u0647 \u062d\u062f\u0627\u0642\u0644 \u0631\u0633\u0627\u0646\u062f\u0646 \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u060c \u0622\u0631\u0648\u0628\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u06cc\u0646 Controller/Gateways \u0648 Access-Points \u06cc\u0627 \u0628\u0627 \u062f\u0627\u0634\u062a\u0646 \u06cc\u06a9 \u0633\u06af\u0645\u0646\u062a/VLAN \u0627\u062e\u062a\u0635\u0627\u0635\u06cc \u0644\u0627\u06cc\u0647 2 \u0645\u062d\u062f\u0648\u062f \u0634\u0648\u062f\u060c \u06cc\u0627 \u0627\u06af\u0631 Controller/Gateways \u0648 Access-Points \u0627\u0632 \u0645\u0631\u0632\u0647\u0627\u06cc \u0644\u0627\u06cc\u0647 3 \u0639\u0628\u0648\u0631 \u06a9\u0646\u0646\u062f. \u062f\u0627\u0634\u062a\u0646 \u062e\u0637\u200c\u0645\u0634\u06cc\u200c\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u06a9\u0647 \u0627\u0631\u062a\u0628\u0627\u0637 \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0648\u06cc\u0698\u06af\u06cc Enhanced PAPI Security \u0627\u0632 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0627\u0635 PAPI \u062f\u0631 \u0628\u0627\u0644\u0627 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n7-    \u0635\u0641\u062d\u0647 \u0627\u0635\u0644\u06cc RAPConsole \u06cc\u0627 Local Debug (LD) \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u0646\u0642\u0634 \u062a\u0642\u0633\u06cc\u0645 \u06cc\u0627 \u067e\u0644 \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a. \u0628\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06cc\u06a9 ACL \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0635\u0641\u062d\u0647 \u0627\u0635\u0644\u06cc LD\u060c \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0648\u062b\u0631 \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0645\u06cc \u06a9\u0646\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u0627\u06cc\u0646 \u0627\u0645\u0631 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0631\u062f. \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644 \u0647\u0627\u06cc \u062f\u0642\u06cc\u0642 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc ACL \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.\n\n\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0627\u0642\u062f\u0627\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0644\u06cc\u060c \u0632\u06cc\u0645\u0646\u0633 \u0642\u0648\u06cc\u0627\u064b \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u0628\u0627 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645\u200c\u0647\u0627\u06cc \u0645\u0646\u0627\u0633\u0628 \u0631\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0647 \u0645\u0646\u0638\u0648\u0631 \u06a9\u0627\u0631 \u0628\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 IT \u0645\u062d\u0627\u0641\u0638\u062a \u0634\u062f\u0647\u060c \u0632\u06cc\u0645\u0646\u0633 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0645\u062d\u06cc\u0637 \u0631\u0627 \u0628\u0631 \u0627\u0633\u0627\u0633 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644 \u0647\u0627\u06cc \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0632\u06cc\u0645\u0646\u0633 \u0628\u0631\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0635\u0646\u0639\u062a\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u062f \u0648 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0645\u0646\u062f\u0631\u062c \u062f\u0631 \u062f\u0641\u062a\u0631\u0686\u0647 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u0645\u062d\u0635\u0648\u0644 \u0631\u0627 \u062f\u0646\u0628\u0627\u0644 \u06a9\u0646\u06cc\u062f.\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u060c \u0644\u0637\u0641\u0627\u064b \u0628\u0647 \u0645\u0634\u0627\u0648\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0632\u06cc\u0645\u0646\u0633 SSA-280624 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f\n\n\u062f\u0631 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc @ICS_CERT  \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062f\u0641\u0627\u0639\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647 \u062d\u062f\u0627\u0642\u0644 \u0631\u0633\u0627\u0646\u062f\u0646 \u062e\u0637\u0631 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f. \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627\u06cc\u062f:\n1-    \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u062f\u0631 \u0645\u0639\u0631\u0636 \u0634\u0628\u06a9\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u0645\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627 \u0648/\u06cc\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0628\u0647 \u062d\u062f\u0627\u0642\u0644 \u0628\u0631\u0633\u0627\u0646\u06cc\u062f \u0648 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u0646\u0647\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u06cc\u0633\u062a\u0646\u062f .\n2-    \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0648 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u0627 \u062f\u0631 \u067e\u0634\u062a \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0647\u0627 \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f \u0648 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u062a\u062c\u0627\u0631\u06cc \u062c\u062f\u0627 \u06a9\u0646\u06cc\u062f.\n3-    \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a\u060c \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0627\u06cc\u0645\u0646 \u0645\u0627\u0646\u0646\u062f \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc (VPN) \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f \u0648 \u0645\u062a\u0648\u062c\u0647 \u0634\u0648\u06cc\u062f \u06a9\u0647 VPN\u200c\u0647\u0627 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f \u0648 \u0628\u0627\u06cc\u062f \u0628\u0647 \u062c\u062f\u06cc\u062f\u062a\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0645\u0648\u062c\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u0648\u0646\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u062f\u0627\u0646\u06cc\u062f \u06a9\u0647 VPN \u0641\u0642\u0637 \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0645\u062a\u0635\u0644 \u0627\u0645\u0646 \u0627\u0633\u062a.\n\n\u062f\u0631 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc @ICS_CERT  \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0647\u0627 \u06cc\u0627\u062f\u0622\u0648\u0631\u06cc \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0642\u0628\u0644 \u0627\u0632 \u0628\u0647 \u06a9\u0627\u0631\u06af\u06cc\u0631\u06cc \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062f\u0641\u0627\u0639\u06cc\u060c \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u062a\u0623\u062b\u06cc\u0631 \u0648 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0631\u06cc\u0633\u06a9 \u0645\u0646\u0627\u0633\u0628 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f.\n\u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0647\u0631\u06af\u0648\u0646\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a \u0645\u0634\u06a9\u0648\u06a9 \u0645\u062e\u0631\u0628 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0628\u0627\u06cc\u062f \u0627\u0632 \u0631\u0648\u06cc\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc \u062a\u0639\u06cc\u06cc\u0646\u200c\u0634\u062f\u0647 \u062e\u0648\u062f \u067e\u06cc\u0631\u0648\u06cc \u06a9\u0646\u0646\u062f.\n\n\u0647\u06cc\u0686 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0639\u0645\u0648\u0645\u06cc \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u06cc \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc \u062f\u0647\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\nhttps://t.me/ics_cert", "creation_timestamp": "2021-11-20T18:31:08.000000Z"}, {"uuid": "50835049-2c95-4d3c-b1dc-87744e5dcb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37727", "type": "seen", "source": "https://t.me/cibsecurity/30421", "content": "\u203c CVE-2021-37727 \u203c\n\nA remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-12T18:25:47.000000Z"}, {"uuid": "8979b064-cac4-4e7c-bfd1-9cd4d78cd11f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37726", "type": "seen", "source": "https://t.me/cibsecurity/30414", "content": "\u203c CVE-2021-37726 \u203c\n\nA remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-12T18:25:40.000000Z"}, {"uuid": "9359340c-f270-409a-8988-000803a387cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37725", "type": "seen", "source": "https://t.me/cibsecurity/28345", "content": "\u203c CVE-2021-37725 \u203c\n\nA remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T16:17:30.000000Z"}, {"uuid": "1d71e800-9a7d-45c0-a8a3-f0691b671f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37722", "type": "seen", "source": "https://t.me/cibsecurity/28336", "content": "\u203c CVE-2021-37722 \u203c\n\nA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T16:17:20.000000Z"}, {"uuid": "14c59f0e-155e-4248-8a16-3e5b2b2c8e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37721", "type": "seen", "source": "https://t.me/cibsecurity/28338", "content": "\u203c CVE-2021-37721 \u203c\n\nA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T16:17:23.000000Z"}, {"uuid": "0fc2110b-01a5-462d-9030-02d965149005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37724", "type": "seen", "source": "https://t.me/cibsecurity/28333", "content": "\u203c CVE-2021-37724 \u203c\n\nA remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T16:17:17.000000Z"}, {"uuid": "4e185607-cab5-46c7-8579-cfe3801be072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37723", "type": "seen", "source": "https://t.me/cibsecurity/28331", "content": "\u203c CVE-2021-37723 \u203c\n\nA remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T16:17:14.000000Z"}]}