{"vulnerability": "CVE-2021-34730", "sightings": [{"uuid": "225cb35d-1c2c-4458-a35f-261cee75003e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:43.000000Z"}, {"uuid": "93aea3c9-dc34-49f9-a467-dfc94d24070c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:42.000000Z"}, {"uuid": "48bec4b1-cb13-421e-b2c8-6f1fc2f30b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/cKure/7514", "content": "Zero-Day Exploit code: Cisco RV110W UPnP 0day \u5206\u6790.\n\nhttps://github.com/badmonkey7/CVE-2021-34730", "creation_timestamp": "2021-10-07T05:33:26.000000Z"}, {"uuid": "6d4a3a18-9091-4161-a1c4-28ad3ea4bced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/cKure/6662", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: A critical vulnerability in Cisco Small Business Routers will not be patched by the networking equipment giant, since the devices reached end-of-life in 2019.\n\nTracked as\u00a0CVE-2021-34730\u00a0(CVSS score: 9.8), the issue resides in the routers' Universal Plug-and-Play (UPnP) service, enabling an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition.\n\nhttps://thehackernews.com/2021/08/critical-flaw-found-in-older-cisco.html", "creation_timestamp": "2021-08-20T19:05:02.000000Z"}, {"uuid": "04133da0-ff08-4b8d-8ea5-f57ac334536e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/codeby_sec/4855", "content": "\u200b\u200b\u041e\u0442\u043a\u0430\u0437 Cisco \u043e\u0442 \u0441\u0442\u0430\u0440\u044b\u0445 VPN-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432\n\nCisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0432\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 UPnP (Universal Plug-and-Play) \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 VPN-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0451\u043a \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2021-34730 \u0438 \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,8/10) \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e UPnP-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 IoT Inspector.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\"\u041c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Cisco Small Business RV110W, RV130, RV130W \u0438 RV215W \u0432\u044b\u0448\u043b\u0438 \u0438\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\".\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0438\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Cisco Small Business RV132W, RV160 \u0438\u043b\u0438 RV160W, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n#news #cisco #exploit", "creation_timestamp": "2021-08-19T10:15:20.000000Z"}, {"uuid": "d6f22816-eaf8-48ef-b80a-f4edd015795a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/ckuRED/33", "content": "Zero-Day Exploit code: Cisco RV110W UPnP 0day \u5206\u6790.\n\nhttps://github.com/badmonkey7/CVE-2021-34730", "creation_timestamp": "2021-10-07T05:33:20.000000Z"}, {"uuid": "76da8abe-c4e1-47b3-aa2c-8e984b600695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/ics_cert/479", "content": "\u0633\u06cc\u0633\u06a9\u0648 \u0646\u0642\u0635 \u0645\u0647\u0645 CVE-2021-34730 \u0631\u0627 \u062f\u0631 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc EoF \u0648\u0635\u0644\u0647 \u0646\u0645\u06cc \u06a9\u0646\u062f\n\n \u0633\u06cc\u0633\u06a9\u0648 \u0647\u06cc\u0686 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u06cc \u0628\u0631\u0627\u06cc \u0631\u0633\u06cc\u062f\u06af\u06cc \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u060c \u06a9\u0647 \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 CVE-2021-34730 \u062f\u0646\u0628\u0627\u0644 \u0645\u06cc \u0634\u0648\u062f \u060c \u0646\u062f\u0627\u0631\u062f \u0648 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc RV110W \u060c RV130 \u060c RV130W \u0648 RV215W \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f.\n\n \u0646\u0642\u0635 CVE-2021-34730 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Universal Plug-and-Play (UPnP) \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f \u060c \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 root \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f \u060c \u06cc\u0627 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0646\u06a9\u0627\u0631 \u0634\u0631\u0627\u06cc\u0637 \u0633\u0631\u0648\u06cc\u0633 \u0634\u0648\u062f.\n\n \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0639\u062a\u0628\u0627\u0631 \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648\u0631\u0648\u062f\u06cc UPnP \u0627\u0633\u062a \u060c \u0646\u0645\u0631\u0647 CVSS 9.8 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f.\n\n \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Universal Plug-and-Play (UPnP) Cisco Small Business Router RV110W \u060c RV130 \u060c RV130W \u0648 RV215W \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0645\u062c\u0648\u0632 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f \u06cc\u0627 \u0628\u0627\u0639\u062b \u0634\u0648\u062f \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0628\u0647 \u0637\u0648\u0631 \u063a\u06cc\u0631 \u0645\u0646\u062a\u0638\u0631\u0647 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0634\u0648\u062f.  \u0634\u0631\u0637 \u0627\u0646\u06a9\u0627\u0631 \u062e\u062f\u0645\u0627\u062a (DoS). \"  \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0645\u06cc \u062e\u0648\u0627\u0646\u062f.\n\n \"\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0639\u062a\u0628\u0627\u0631 \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648\u0631\u0648\u062f\u06cc UPnP \u0627\u0633\u062a.  \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a UPnP \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.  \u06cc\u06a9 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0648\u0641\u0642 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0631\u06cc\u0634\u0647 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0627\u0635\u0644\u06cc \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f \u06cc\u0627 \u0628\u0627\u0639\u062b \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0645\u062c\u062f\u062f \u062f\u0633\u062a\u06af\u0627\u0647 \u0634\u0648\u062f \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u06cc\u06a9 \u0648\u0636\u0639\u06cc\u062a DoS \u0627\u06cc\u062c\u0627\u062f \u0634\u0648\u062f. \"\n\n \u063a\u0648\u0644 \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 RV110W Wireless-N VPN Firewalls \u060c RV130 Routers VPN \u060c RV130W Wireless-N Multifunction VPN Routers \u0648 RV215W Wireless-N VPN Routers \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u062a\u0627 UPnP \u0631\u0627 \u062f\u0631 \u0631\u0627\u0628\u0637 LAN \u0648 WAN \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u062e\u0648\u062f \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0646\u0646\u062f.  \u0627\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06af\u0648\u06cc\u062f \u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 UPnP \u0628\u0647 \u0637\u0648\u0631 \u067e\u06cc\u0634 \u0641\u0631\u0636 \u062f\u0631 \u0631\u0627\u0628\u0637 \u0647\u0627\u06cc LAN \u0641\u0639\u0627\u0644 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0637\u0648\u0631 \u067e\u06cc\u0634 \u0641\u0631\u0636 \u062f\u0631 \u0631\u0627\u0628\u0637 \u0647\u0627\u06cc WAN \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0627\u0633\u062a.\n\n \u0633\u06cc\u0633\u06a9\u0648 \u0645\u06cc \u0627\u0641\u0632\u0627\u06cc\u062f: \"\u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u06a9\u0627\u0647\u0634 \u0628\u0647 \u06a9\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0634\u062f\u0647 \u0648 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0645\u06cc\u0632 \u0628\u0648\u062f\u0647 \u0627\u0633\u062a \u060c \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0628\u0627\u06cc\u062f \u06a9\u0627\u0631\u0628\u0631\u062f \u0648 \u0627\u062b\u0631\u0628\u062e\u0634\u06cc \u0631\u0627 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062e\u0648\u062f \u0648 \u062a\u062d\u062a \u0634\u0631\u0627\u06cc\u0637 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062e\u0648\u062f \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0646\u0646\u062f.\"\n\n \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u062e\u0627\u0637\u0631\u0646\u0634\u0627\u0646 \u06a9\u0631\u062f \u06a9\u0647 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u0648\u062c\u0648\u062f  \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0642\u0635 CVE-2021-34730 \u0645\u0637\u0644\u0639 \u0646\u06cc\u0633\u062a.\n\n \ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2021-08-19T18:21:36.000000Z"}, {"uuid": "85c1d747-167d-44b1-bdc5-882f013d2fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "Telegram/wOeT14oJYQjsRANmFzyIMqB4Sn5UiQjlcmSxBqaa4meiOt2g", "content": "", "creation_timestamp": "2021-09-13T16:44:16.000000Z"}, {"uuid": "c9457c4f-6dfc-4d37-9d84-e9d8be032043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "Telegram/ekBIkZDI69YkQKmbQJ2DeD6Ol-qu2os8lUwVNq51BtyEAPU", "content": "", "creation_timestamp": "2021-10-05T09:20:59.000000Z"}, {"uuid": "cc5fef79-c392-4c2e-8736-291a1fc629fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/ctinow/38724", "content": "Cisco will not patch critical flaw CVE-2021-34730 in EoF routers\n\nhttps://ift.tt/2WarARL", "creation_timestamp": "2021-08-19T18:36:14.000000Z"}, {"uuid": "b31834d3-3658-4e3f-931f-5cba845b058c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/vPwnd/565", "content": "CVE-2021-34730 : Cisco RV110W UPnP 0day Vulnerability\n\nhttps://github.com/badmonkey7/CVE-2021-34730\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796    \n\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\n\u26d3    PWND PROJECT   \u26d3\n\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\nt.me/vPwnd\nt.me/vPwndCom\nt.me/JStashB\npwndx@mailfence.com\n\u269c\ufe0f \ud835\udc43\ud835\udc5c\ud835\udc64\ud835\udc52\ud835\udc5f\ud835\udc52\ud835\udc51 \ud835\udc35\ud835\udc66 JokerStash \u269c\ufe0f", "creation_timestamp": "2021-10-05T09:17:29.000000Z"}, {"uuid": "6f5cbd1b-abbf-4985-a93a-e2b5baf2bf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/breachdetector/5553", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"Telegram Channel\",\n  \"Threat Actor\": \u201cVPwnd\",\n  \"Content\": \"CVE-2021-34730 : Cisco RV110W UPnP 0day...\u201d,\n  \"Detection Date\": \u201c05 Oct 2021 09:16\u201d,\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "creation_timestamp": "2021-10-05T09:24:01.000000Z"}, {"uuid": "7f594e31-5ddf-425c-9358-b95da0bdf3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/vPwnd/154", "content": "CVE-2021-34730 : Cisco RV110W UPnP 0day Vulnerability\n\nhttps://github.com/badmonkey7/CVE-2021-34730\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796    \n\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\n\u26d3    PWND PROJECT   \u26d3\n\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\u22b1\u2022\u2550\u2022\u22b0\u2749\nt.me/vPwnd\nt.me/vPwndCom\nt.me/JStashB\npwndx@mailfence.com\n\u269c\ufe0f \ud835\udc43\ud835\udc5c\ud835\udc64\ud835\udc52\ud835\udc5f\ud835\udc52\ud835\udc51 \ud835\udc35\ud835\udc66 JokerStash \u269c\ufe0f", "creation_timestamp": "2021-10-05T09:17:29.000000Z"}, {"uuid": "136065f3-3a21-48f8-abac-3a52707fba43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "Telegram/A6O2RlUwY_43WFDZLYpqRXXQ4pEBzBuPVL3VpIqMnF57Mw", "content": "", "creation_timestamp": "2021-10-04T23:37:29.000000Z"}, {"uuid": "c6f51a5f-8790-48b2-8547-a06933297de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/true_secator/3392", "content": "Cisco \u043d\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u043d\u043e\u0432\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e 0-day \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e VPN-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0441\u0441\u044b\u043b\u0430\u044f\u0441\u044c \u043d\u0430 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430 \u0441\u043b\u0443\u0436\u0431\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 EoL.\n\nCVE-2022-20923 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 IPSec VPN.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0440\u043e\u0432\u043d\u0435, \u0447\u0442\u043e \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 PSIRT \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f 0-day \u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\nCisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 RV110W, RV130, RV130W \u0438 RV215W \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438, \u0432\u0435\u0434\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043d\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0435 Cisco, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0441\u043d\u044f\u0442\u044b \u0441 \u043f\u0440\u043e\u0434\u0430\u0436\u0438 \u043d\u0435 \u0442\u0430\u043a \u0434\u0430\u0432\u043d\u043e - 2 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e Cisco \u043f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0430 \u043f\u043e\u0442\u043e\u043a \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0439 \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044e \u043d\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0438.\n\n\u0412\u0435\u0434\u044c CVE-2022-20923 - \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0442\u0430\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 EoL, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 Cisco \u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0430 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b. \n\n\u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2021 \u0433\u043e\u0434\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2021-34730 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 RV, \u0430 \u0432 \u0438\u044e\u043d\u0435 2022 \u0433\u043e\u0434\u0430 - \u0438 \u0441 CVE-2022-20825.\n\n\u0422 - \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0434\u043a\u0430.", "creation_timestamp": "2022-09-08T15:20:10.000000Z"}, {"uuid": "25130ba8-5c1e-42a3-9c14-a9a8635e2c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/NeKaspersky/1146", "content": "Cisco \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043f\u0430\u0442\u0447\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0438\u0445 VPN-\u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445\n\n\u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0447\u0442\u043e\u0431\u044b \u0441\u0442\u0438\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u0430\u0436\u0438 \u043d\u043e\u0432\u044b\u0445. \u0411\u0438\u0437\u043d\u0435\u0441 \u0435\u0441\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441. \u0418 \u0435\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043a\u0443\u043f\u0430\u043b\u0438 \u0440\u043e\u0443\u0442\u0435\u0440\u044b Cisco \u0432 2019 \u0433\u043e\u0434\u0443, \u043c\u043e\u0436\u0435\u0442\u0435 \u0441\u043c\u0435\u043b\u043e \u0438\u0445 \u0432\u044b\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c \u0438 \u043a\u0443\u043f\u0438\u0442\u044c \u0447\u0442\u043e-\u043d\u0438\u0431\u0443\u0434\u044c \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435. \u041f\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u043c\u0435\u0440\u0435 \u0442\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0412 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 RV110W, RV130, RV130W \u0438 RV215W \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. CVE-2021-34730 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u043e\u0432 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e UPnP \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root \u043f\u0440\u0430\u0432\u0430. \n\n\u0412 Cisco \u0436\u0438\u0432\u0443\u0442 \u043f\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443, \u0430\u0432\u043e\u0441\u044c \u043f\u043e\u0432\u0435\u0437\u0451\u0442. \u041e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435\u0442, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0442\u043e\u0436\u0435. \u0422\u043e\u0433\u0434\u0430 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u043e\u0444\u0442 \u043d\u0435 \u043d\u0430\u0434\u043e.", "creation_timestamp": "2021-08-19T17:20:16.000000Z"}, {"uuid": "f8bc387f-7f65-4bb0-bb40-ca45300daf84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "Telegram/0Lor8j98BRWAQnHV_lBGWlNX2kQEkIuA2mipthFRNMDekUg", "content": "", "creation_timestamp": "2021-10-05T09:24:26.000000Z"}, {"uuid": "62b03103-352c-4873-9dac-297109723c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cibsecurity/27569", "content": "\u203c CVE-2021-34730 \u203c\n\nA vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition. Cisco has not released software updates that address this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-19T00:17:06.000000Z"}, {"uuid": "75350ce1-da53-4464-925c-945e14ca3efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/thehackernews/1454", "content": "Cisco has informed its customers that it will not provide a patch for a newly discovered critical vulnerability (CVE-2021-34730) affecting its small business routers as the devices reach the end of their lifecycle.\n\nRead: https://thehackernews.com/2021/08/critical-flaw-found-in-older-cisco.html", "creation_timestamp": "2021-08-20T09:41:24.000000Z"}, {"uuid": "6ebd0669-b953-4d32-8a56-4231d2658367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4418", "content": "#exploit\nCVE-2021-34730:\nA vulnerability (stack overflow) in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, RV215W Routers (0day)\nhttps://github.com/badmonkey7/CVE-2021-34730", "creation_timestamp": "2021-10-01T11:01:01.000000Z"}, {"uuid": "759087b3-2309-4184-bb79-8edd94ff34ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cissp/4483", "content": "Research\n1. OSS-Fuzz vulnerabilities for OSV\n(Open source vulnerability DB)\nhttps://github.com/google/oss-fuzz-vulns\n2. Undetected Azure Active Directory Brute-Force Attacks\ud83d\udc4d\ud83c\udffd\nhttps://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks\n\nOffensive security\nBuilding an offensive RPC interface\nhttps://sensepost.com/blog/2021/building-an-offensive-rpc-interface\n]-> Offensive RPC PoC:\nhttps://github.com/sensepost/offensive-rpc\n\nexploit\nCVE-2021-34730:\nA vulnerability (stack overflow) in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, RV215W Routers (0day)\nhttps://github.com/badmonkey7/CVE-2021-34730\n\nThreat Research\n1. Hijacking iCloud Credentials with Apple Airtags (Stored XSS)\nhttps://medium.com/@bobbyrsec/zero-day-hijacking-icloud-credentials-with-apple-airtags-stored-xss-6997da43a216\n2. Open-sourcing Mariana Trench:\nAnalyzing Android/Java app security in depth\nhttps://github.com/facebook/mariana-trench", "creation_timestamp": "2026-09-01T17:00:39.265630Z"}, {"uuid": "df186c91-e08e-4488-9277-e6fa9c5f9a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cissp/4052", "content": "Cisco has informed its customers that it will not provide a patch for a newly discovered critical vulnerability (CVE-2021-34730) affecting its small business routers as the devices reach the end of their lifecycle.\nRead: https://thehackernews.com/2021/08/critical-flaw-found-in-older-cisco.html", "creation_timestamp": "2026-09-01T17:00:42.269514Z"}, {"uuid": "310b5d53-0520-4383-9041-dbd8bd2e0f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/68348", "content": "Black Hat Ethical Hacking\nCisco won\u2019t fix authentication bypass zero-day in EoL routers\n\nCisco won\u2019t fix authentication bypass zero-day in EoL routersPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Cisco says that a new authentication bypass flaw affecting multiple small business VPN routers will not be patched because the devices have reached end-of-life (EoL).This zero-day bug (CVE-2022-20923) is caused by a faulty password validation algorithm that attackers could exploit to log into the VPN on vulnerable devices using what the company describes as \u201ccrafted credentials\u201d if the IPSec VPN Server feature is enabled.\n\n\u201cA successful exploit could allow the attacker to bypass authentication and access the IPSec VPN network,\u201d Cisco explained in a security advisory issued on Wednesday.\n\n\u201cThe attacker may obtain privileges that are the same level as an administrative user, depending on the crafted credentials that are used.\u201d\n\nTo determine if the IPSec VPN Server is enabled on a router, you have to log in to the web-based management interface and go to VPN > IPSec VPN Server > Setup.\n\nIf the \u201cServer Enable\u201d check box is checked, the device is exposed to CVE-2022-20923 exploitation attempts.\n\nLuckily, Cisco says that its Product Security Incident Response Team (PSIRT) found no evidence of publicly available proof-of-concept exploits for this zero-day or any threat actors exploiting the bug in the wild until the advisory was published.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Upgrade to newer router models for protectionCisco asked customers still using the RV110W, RV130, RV130W, and RV215W routers affected by this security vulnerability\u00a0to upgrade to newer models still receiving security updates.\n\nAccording to an end-of-sale announcement\u00a0on Cisco\u2019s website, the last day these RV Series routers were available for order was December 2, 2019.\n\n\u201cCisco has not released and will not release software updates to address the vulnerability described in this advisory,\u201d the company added.\n\n\u201cCustomers are encouraged to migrate to Cisco Small Business RV132W, RV160, or RV160W Routers.\u201d\nTrending: Security Engineer vs. Software Engineer\nTrending: Recon Tool: ZenBuster\nCVE-2022-20923 is not the first severe security vulnerability affecting these EoL router models that Cisco left unpatched in recent years.\n\nFor instance, in August 2021, the company said it wouldn\u2019t release security patches for a critical vulnerability\u00a0(CVE-2021-34730) in these RV Series routers that enabled unauthenticated attackers to execute arbitrary code remotely as the root user, asking users to migrate to newer models.\n\nIn June 2022, Cisco again advised owners to switch to newer models\u00a0after disclosing a new critical remote code execution (RCE) vulnerability\u00a0(CVE-2022-20825) that wouldn\u2019t get patched. \nTrending: Critical command injection vulnerability discovered in Bitbucket Server and Data Center Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-7-300x150.png New Linux malware evades detection and deploys cryptocurrency minerSeptember 7, 2022\nReading Time:[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.613623Z"}, {"uuid": "d72e6df3-7bc0-485b-ac1e-e6c5f8ebe2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/20857", "content": "Black Hat Ethical Hacking\nCritical Cisco Bug in Small Business Routers to Remain Unpatched\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Cisco Bug in Small Business Routers to Remain UnpatchedPost Views: 58 \nReading Time: 1 Minute\nA critical security vulnerability in Cisco Small Business Routers (RV110W, RV130, RV130W and RV215W models) allows remote code execution (RCE) and denial of service (DoS). \nThe networking giant said that no patch or workaround will be coming for the bug, since the routers reached end-of-life back in 2019.\n\nThe bug (CVE-2021-34730) is one of six addressed by Cisco this week; it also issued an advisory for the critical BlackBerry QNX-2021-001 vulnerability unveiled earlier this week (CVE-2021-22156), which affects multiple vendors, well beyond Cisco. Patch Denied: Critical RCE for EoL GearThe critical router issue, which carries a base CVSS score of 9.8 out of 10, affects the hardware\u2019s Universal Plug-and-Play (UPnP) service, Cisco said. It could allow an unauthenticated attacker to achieve RCE or cause an affected device to restart unexpectedly.\n\n\u201cThis vulnerability is due to improper validation of incoming UPnP traffic,\u201d according to the advisory. \u201cAn attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition.\u201d\n\nThe issue affects a range of Cisco Wireless-N and Wireless-AC VPN routers, which reached end-of-life\u00a0in September of 2019. Cisco stopped issuing bug fixes on Dec. 1 of last year. Affected companies should look to update their hardware to avoid compromise.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets\nThe other critical flaw addressed in the updates has to do with the BlackBerry QNX-2021-001 bug disclosed this week, which allows threat actors to take over or launch DoS attacks on devices and critical infrastructure. Essentially, the known group of BadAlloc bugs tied to BlackBerry\u2019s embedded QNX operating system (OS) now affects older devices.\n\nCisco\u2019s advisory simply states, \u201cCisco is investigating its product line to determine which products and services may be affected by this vulnerability.\u201d So far, no products have been listed. Medium-Severity Security Bugs in Cisco GearThe remaining five patches are all rated medium in severity, and affect products from across Cisco\u2019s portfolio. These bugs are:\n\n* CVE-2021-34749: Server Name Identification (SNI) Data-Exfiltration Vulnerability (Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), Snort Detection Engine)\n* CVE-2021-1561: Spam Quarantine Unauthorized-Access Vulnerability (Cisco Secure Email and Web Manager)\n* CVE-2021-34734: Double-Free Denial-of-Service Vulnerability (Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol)\n* CVE-2021-34715: Image-Verification Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n* CVE-2021-34716: RCE Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n\nThe first bug could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device to execute a command-and-control attack on a compromised host and perform and exfiltrate data from a compromised host. The advisory is an interim one, and Cisco said it was still investigating which product versions are affected.\nSee Also: Offensive Security Tool: Warcannon\n\u201cThis vulnerability is due to inadequate filtering of the SSL [...]", "creation_timestamp": "2026-09-01T20:02:27.663148Z"}, {"uuid": "70cf9901-9934-479a-a0de-7ff6394a522c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/68348", "content": "Black Hat Ethical Hacking\nCisco won\u2019t fix authentication bypass zero-day in EoL routers\n\nCisco won\u2019t fix authentication bypass zero-day in EoL routersPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Cisco says that a new authentication bypass flaw affecting multiple small business VPN routers will not be patched because the devices have reached end-of-life (EoL).This zero-day bug (CVE-2022-20923) is caused by a faulty password validation algorithm that attackers could exploit to log into the VPN on vulnerable devices using what the company describes as \u201ccrafted credentials\u201d if the IPSec VPN Server feature is enabled.\n\n\u201cA successful exploit could allow the attacker to bypass authentication and access the IPSec VPN network,\u201d Cisco explained in a security advisory issued on Wednesday.\n\n\u201cThe attacker may obtain privileges that are the same level as an administrative user, depending on the crafted credentials that are used.\u201d\n\nTo determine if the IPSec VPN Server is enabled on a router, you have to log in to the web-based management interface and go to VPN > IPSec VPN Server > Setup.\n\nIf the \u201cServer Enable\u201d check box is checked, the device is exposed to CVE-2022-20923 exploitation attempts.\n\nLuckily, Cisco says that its Product Security Incident Response Team (PSIRT) found no evidence of publicly available proof-of-concept exploits for this zero-day or any threat actors exploiting the bug in the wild until the advisory was published.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Upgrade to newer router models for protectionCisco asked customers still using the RV110W, RV130, RV130W, and RV215W routers affected by this security vulnerability\u00a0to upgrade to newer models still receiving security updates.\n\nAccording to an end-of-sale announcement\u00a0on Cisco\u2019s website, the last day these RV Series routers were available for order was December 2, 2019.\n\n\u201cCisco has not released and will not release software updates to address the vulnerability described in this advisory,\u201d the company added.\n\n\u201cCustomers are encouraged to migrate to Cisco Small Business RV132W, RV160, or RV160W Routers.\u201d\nTrending: Security Engineer vs. Software Engineer\nTrending: Recon Tool: ZenBuster\nCVE-2022-20923 is not the first severe security vulnerability affecting these EoL router models that Cisco left unpatched in recent years.\n\nFor instance, in August 2021, the company said it wouldn\u2019t release security patches for a critical vulnerability\u00a0(CVE-2021-34730) in these RV Series routers that enabled unauthenticated attackers to execute arbitrary code remotely as the root user, asking users to migrate to newer models.\n\nIn June 2022, Cisco again advised owners to switch to newer models\u00a0after disclosing a new critical remote code execution (RCE) vulnerability\u00a0(CVE-2022-20825) that wouldn\u2019t get patched. \nTrending: Critical command injection vulnerability discovered in Bitbucket Server and Data Center Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-7-300x150.png New Linux malware evades detection and deploys cryptocurrency minerSeptember 7, 2022\nReading Time:[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.947264Z"}, {"uuid": "33d2f292-0acf-47dc-976f-c41e051a384a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/20857", "content": "Black Hat Ethical Hacking\nCritical Cisco Bug in Small Business Routers to Remain Unpatched\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Cisco Bug in Small Business Routers to Remain UnpatchedPost Views: 58 \nReading Time: 1 Minute\nA critical security vulnerability in Cisco Small Business Routers (RV110W, RV130, RV130W and RV215W models) allows remote code execution (RCE) and denial of service (DoS). \nThe networking giant said that no patch or workaround will be coming for the bug, since the routers reached end-of-life back in 2019.\n\nThe bug (CVE-2021-34730) is one of six addressed by Cisco this week; it also issued an advisory for the critical BlackBerry QNX-2021-001 vulnerability unveiled earlier this week (CVE-2021-22156), which affects multiple vendors, well beyond Cisco. Patch Denied: Critical RCE for EoL GearThe critical router issue, which carries a base CVSS score of 9.8 out of 10, affects the hardware\u2019s Universal Plug-and-Play (UPnP) service, Cisco said. It could allow an unauthenticated attacker to achieve RCE or cause an affected device to restart unexpectedly.\n\n\u201cThis vulnerability is due to improper validation of incoming UPnP traffic,\u201d according to the advisory. \u201cAn attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition.\u201d\n\nThe issue affects a range of Cisco Wireless-N and Wireless-AC VPN routers, which reached end-of-life\u00a0in September of 2019. Cisco stopped issuing bug fixes on Dec. 1 of last year. Affected companies should look to update their hardware to avoid compromise.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets\nThe other critical flaw addressed in the updates has to do with the BlackBerry QNX-2021-001 bug disclosed this week, which allows threat actors to take over or launch DoS attacks on devices and critical infrastructure. Essentially, the known group of BadAlloc bugs tied to BlackBerry\u2019s embedded QNX operating system (OS) now affects older devices.\n\nCisco\u2019s advisory simply states, \u201cCisco is investigating its product line to determine which products and services may be affected by this vulnerability.\u201d So far, no products have been listed. Medium-Severity Security Bugs in Cisco GearThe remaining five patches are all rated medium in severity, and affect products from across Cisco\u2019s portfolio. These bugs are:\n\n* CVE-2021-34749: Server Name Identification (SNI) Data-Exfiltration Vulnerability (Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), Snort Detection Engine)\n* CVE-2021-1561: Spam Quarantine Unauthorized-Access Vulnerability (Cisco Secure Email and Web Manager)\n* CVE-2021-34734: Double-Free Denial-of-Service Vulnerability (Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol)\n* CVE-2021-34715: Image-Verification Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n* CVE-2021-34716: RCE Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n\nThe first bug could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device to execute a command-and-control attack on a compromised host and perform and exfiltrate data from a compromised host. The advisory is an interim one, and Cisco said it was still investigating which product versions are affected.\nSee Also: Offensive Security Tool: Warcannon\n\u201cThis vulnerability is due to inadequate filtering of the SSL [...]", "creation_timestamp": "2026-09-02T01:03:01.010205Z"}, {"uuid": "fcddce76-6bbc-4ab8-9e55-ae305fe4c86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cissp/4483", "content": "Research\n1. OSS-Fuzz vulnerabilities for OSV\n(Open source vulnerability DB)\nhttps://github.com/google/oss-fuzz-vulns\n2. Undetected Azure Active Directory Brute-Force Attacks\ud83d\udc4d\ud83c\udffd\nhttps://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks\n\nOffensive security\nBuilding an offensive RPC interface\nhttps://sensepost.com/blog/2021/building-an-offensive-rpc-interface\n]-> Offensive RPC PoC:\nhttps://github.com/sensepost/offensive-rpc\n\nexploit\nCVE-2021-34730:\nA vulnerability (stack overflow) in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, RV215W Routers (0day)\nhttps://github.com/badmonkey7/CVE-2021-34730\n\nThreat Research\n1. Hijacking iCloud Credentials with Apple Airtags (Stored XSS)\nhttps://medium.com/@bobbyrsec/zero-day-hijacking-icloud-credentials-with-apple-airtags-stored-xss-6997da43a216\n2. Open-sourcing Mariana Trench:\nAnalyzing Android/Java app security in depth\nhttps://github.com/facebook/mariana-trench", "creation_timestamp": "2026-09-02T01:04:24.501238Z"}, {"uuid": "f7bb2966-9259-4e3c-b788-f7edc2f53e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cissp/4052", "content": "Cisco has informed its customers that it will not provide a patch for a newly discovered critical vulnerability (CVE-2021-34730) affecting its small business routers as the devices reach the end of their lifecycle.\nRead: https://thehackernews.com/2021/08/critical-flaw-found-in-older-cisco.html", "creation_timestamp": "2026-09-02T01:04:29.057050Z"}, {"uuid": "85f6c32b-7b84-46b4-b916-f0d0207a1f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/68348", "content": "Black Hat Ethical Hacking\nCisco won\u2019t fix authentication bypass zero-day in EoL routers\n\nCisco won\u2019t fix authentication bypass zero-day in EoL routersPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Cisco says that a new authentication bypass flaw affecting multiple small business VPN routers will not be patched because the devices have reached end-of-life (EoL).This zero-day bug (CVE-2022-20923) is caused by a faulty password validation algorithm that attackers could exploit to log into the VPN on vulnerable devices using what the company describes as \u201ccrafted credentials\u201d if the IPSec VPN Server feature is enabled.\n\n\u201cA successful exploit could allow the attacker to bypass authentication and access the IPSec VPN network,\u201d Cisco explained in a security advisory issued on Wednesday.\n\n\u201cThe attacker may obtain privileges that are the same level as an administrative user, depending on the crafted credentials that are used.\u201d\n\nTo determine if the IPSec VPN Server is enabled on a router, you have to log in to the web-based management interface and go to VPN > IPSec VPN Server > Setup.\n\nIf the \u201cServer Enable\u201d check box is checked, the device is exposed to CVE-2022-20923 exploitation attempts.\n\nLuckily, Cisco says that its Product Security Incident Response Team (PSIRT) found no evidence of publicly available proof-of-concept exploits for this zero-day or any threat actors exploiting the bug in the wild until the advisory was published.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Upgrade to newer router models for protectionCisco asked customers still using the RV110W, RV130, RV130W, and RV215W routers affected by this security vulnerability\u00a0to upgrade to newer models still receiving security updates.\n\nAccording to an end-of-sale announcement\u00a0on Cisco\u2019s website, the last day these RV Series routers were available for order was December 2, 2019.\n\n\u201cCisco has not released and will not release software updates to address the vulnerability described in this advisory,\u201d the company added.\n\n\u201cCustomers are encouraged to migrate to Cisco Small Business RV132W, RV160, or RV160W Routers.\u201d\nTrending: Security Engineer vs. Software Engineer\nTrending: Recon Tool: ZenBuster\nCVE-2022-20923 is not the first severe security vulnerability affecting these EoL router models that Cisco left unpatched in recent years.\n\nFor instance, in August 2021, the company said it wouldn\u2019t release security patches for a critical vulnerability\u00a0(CVE-2021-34730) in these RV Series routers that enabled unauthenticated attackers to execute arbitrary code remotely as the root user, asking users to migrate to newer models.\n\nIn June 2022, Cisco again advised owners to switch to newer models\u00a0after disclosing a new critical remote code execution (RCE) vulnerability\u00a0(CVE-2022-20825) that wouldn\u2019t get patched. \nTrending: Critical command injection vulnerability discovered in Bitbucket Server and Data Center Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-7-300x150.png New Linux malware evades detection and deploys cryptocurrency minerSeptember 7, 2022\nReading Time:[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T10:00:04.970323Z"}, {"uuid": "60ac1d3a-b8f0-4d21-a6c5-0f37cf556caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/68348", "content": "Black Hat Ethical Hacking\nCisco won\u2019t fix authentication bypass zero-day in EoL routers\n\nCisco won\u2019t fix authentication bypass zero-day in EoL routersPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Cisco says that a new authentication bypass flaw affecting multiple small business VPN routers will not be patched because the devices have reached end-of-life (EoL).This zero-day bug (CVE-2022-20923) is caused by a faulty password validation algorithm that attackers could exploit to log into the VPN on vulnerable devices using what the company describes as \u201ccrafted credentials\u201d if the IPSec VPN Server feature is enabled.\n\n\u201cA successful exploit could allow the attacker to bypass authentication and access the IPSec VPN network,\u201d Cisco explained in a security advisory issued on Wednesday.\n\n\u201cThe attacker may obtain privileges that are the same level as an administrative user, depending on the crafted credentials that are used.\u201d\n\nTo determine if the IPSec VPN Server is enabled on a router, you have to log in to the web-based management interface and go to VPN > IPSec VPN Server > Setup.\n\nIf the \u201cServer Enable\u201d check box is checked, the device is exposed to CVE-2022-20923 exploitation attempts.\n\nLuckily, Cisco says that its Product Security Incident Response Team (PSIRT) found no evidence of publicly available proof-of-concept exploits for this zero-day or any threat actors exploiting the bug in the wild until the advisory was published.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Upgrade to newer router models for protectionCisco asked customers still using the RV110W, RV130, RV130W, and RV215W routers affected by this security vulnerability\u00a0to upgrade to newer models still receiving security updates.\n\nAccording to an end-of-sale announcement\u00a0on Cisco\u2019s website, the last day these RV Series routers were available for order was December 2, 2019.\n\n\u201cCisco has not released and will not release software updates to address the vulnerability described in this advisory,\u201d the company added.\n\n\u201cCustomers are encouraged to migrate to Cisco Small Business RV132W, RV160, or RV160W Routers.\u201d\nTrending: Security Engineer vs. Software Engineer\nTrending: Recon Tool: ZenBuster\nCVE-2022-20923 is not the first severe security vulnerability affecting these EoL router models that Cisco left unpatched in recent years.\n\nFor instance, in August 2021, the company said it wouldn\u2019t release security patches for a critical vulnerability\u00a0(CVE-2021-34730) in these RV Series routers that enabled unauthenticated attackers to execute arbitrary code remotely as the root user, asking users to migrate to newer models.\n\nIn June 2022, Cisco again advised owners to switch to newer models\u00a0after disclosing a new critical remote code execution (RCE) vulnerability\u00a0(CVE-2022-20825) that wouldn\u2019t get patched. \nTrending: Critical command injection vulnerability discovered in Bitbucket Server and Data Center Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-7-300x150.png New Linux malware evades detection and deploys cryptocurrency minerSeptember 7, 2022\nReading Time:[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:50.996397Z"}, {"uuid": "6b9c1729-fb88-4dbf-ab97-694dd2df38cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/20857", "content": "Black Hat Ethical Hacking\nCritical Cisco Bug in Small Business Routers to Remain Unpatched\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Cisco Bug in Small Business Routers to Remain UnpatchedPost Views: 58 \nReading Time: 1 Minute\nA critical security vulnerability in Cisco Small Business Routers (RV110W, RV130, RV130W and RV215W models) allows remote code execution (RCE) and denial of service (DoS). \nThe networking giant said that no patch or workaround will be coming for the bug, since the routers reached end-of-life back in 2019.\n\nThe bug (CVE-2021-34730) is one of six addressed by Cisco this week; it also issued an advisory for the critical BlackBerry QNX-2021-001 vulnerability unveiled earlier this week (CVE-2021-22156), which affects multiple vendors, well beyond Cisco. Patch Denied: Critical RCE for EoL GearThe critical router issue, which carries a base CVSS score of 9.8 out of 10, affects the hardware\u2019s Universal Plug-and-Play (UPnP) service, Cisco said. It could allow an unauthenticated attacker to achieve RCE or cause an affected device to restart unexpectedly.\n\n\u201cThis vulnerability is due to improper validation of incoming UPnP traffic,\u201d according to the advisory. \u201cAn attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition.\u201d\n\nThe issue affects a range of Cisco Wireless-N and Wireless-AC VPN routers, which reached end-of-life\u00a0in September of 2019. Cisco stopped issuing bug fixes on Dec. 1 of last year. Affected companies should look to update their hardware to avoid compromise.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets\nThe other critical flaw addressed in the updates has to do with the BlackBerry QNX-2021-001 bug disclosed this week, which allows threat actors to take over or launch DoS attacks on devices and critical infrastructure. Essentially, the known group of BadAlloc bugs tied to BlackBerry\u2019s embedded QNX operating system (OS) now affects older devices.\n\nCisco\u2019s advisory simply states, \u201cCisco is investigating its product line to determine which products and services may be affected by this vulnerability.\u201d So far, no products have been listed. Medium-Severity Security Bugs in Cisco GearThe remaining five patches are all rated medium in severity, and affect products from across Cisco\u2019s portfolio. These bugs are:\n\n* CVE-2021-34749: Server Name Identification (SNI) Data-Exfiltration Vulnerability (Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), Snort Detection Engine)\n* CVE-2021-1561: Spam Quarantine Unauthorized-Access Vulnerability (Cisco Secure Email and Web Manager)\n* CVE-2021-34734: Double-Free Denial-of-Service Vulnerability (Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol)\n* CVE-2021-34715: Image-Verification Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n* CVE-2021-34716: RCE Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n\nThe first bug could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device to execute a command-and-control attack on a compromised host and perform and exfiltrate data from a compromised host. The advisory is an interim one, and Cisco said it was still investigating which product versions are affected.\nSee Also: Offensive Security Tool: Warcannon\n\u201cThis vulnerability is due to inadequate filtering of the SSL [...]", "creation_timestamp": "2026-09-07T19:00:04.939882Z"}, {"uuid": "bb7e5400-c765-4947-8b94-f177b25ab86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/hacking_Attack/20857", "content": "Black Hat Ethical Hacking\nCritical Cisco Bug in Small Business Routers to Remain Unpatched\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Cisco Bug in Small Business Routers to Remain UnpatchedPost Views: 58 \nReading Time: 1 Minute\nA critical security vulnerability in Cisco Small Business Routers (RV110W, RV130, RV130W and RV215W models) allows remote code execution (RCE) and denial of service (DoS). \nThe networking giant said that no patch or workaround will be coming for the bug, since the routers reached end-of-life back in 2019.\n\nThe bug (CVE-2021-34730) is one of six addressed by Cisco this week; it also issued an advisory for the critical BlackBerry QNX-2021-001 vulnerability unveiled earlier this week (CVE-2021-22156), which affects multiple vendors, well beyond Cisco. Patch Denied: Critical RCE for EoL GearThe critical router issue, which carries a base CVSS score of 9.8 out of 10, affects the hardware\u2019s Universal Plug-and-Play (UPnP) service, Cisco said. It could allow an unauthenticated attacker to achieve RCE or cause an affected device to restart unexpectedly.\n\n\u201cThis vulnerability is due to improper validation of incoming UPnP traffic,\u201d according to the advisory. \u201cAn attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition.\u201d\n\nThe issue affects a range of Cisco Wireless-N and Wireless-AC VPN routers, which reached end-of-life\u00a0in September of 2019. Cisco stopped issuing bug fixes on Dec. 1 of last year. Affected companies should look to update their hardware to avoid compromise.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets\nThe other critical flaw addressed in the updates has to do with the BlackBerry QNX-2021-001 bug disclosed this week, which allows threat actors to take over or launch DoS attacks on devices and critical infrastructure. Essentially, the known group of BadAlloc bugs tied to BlackBerry\u2019s embedded QNX operating system (OS) now affects older devices.\n\nCisco\u2019s advisory simply states, \u201cCisco is investigating its product line to determine which products and services may be affected by this vulnerability.\u201d So far, no products have been listed. Medium-Severity Security Bugs in Cisco GearThe remaining five patches are all rated medium in severity, and affect products from across Cisco\u2019s portfolio. These bugs are:\n\n* CVE-2021-34749: Server Name Identification (SNI) Data-Exfiltration Vulnerability (Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), Snort Detection Engine)\n* CVE-2021-1561: Spam Quarantine Unauthorized-Access Vulnerability (Cisco Secure Email and Web Manager)\n* CVE-2021-34734: Double-Free Denial-of-Service Vulnerability (Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol)\n* CVE-2021-34715: Image-Verification Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n* CVE-2021-34716: RCE Vulnerability (Cisco Expressway Series and TelePresence Video Communication Server)\n\nThe first bug could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device to execute a command-and-control attack on a compromised host and perform and exfiltrate data from a compromised host. The advisory is an interim one, and Cisco said it was still investigating which product versions are affected.\nSee Also: Offensive Security Tool: Warcannon\n\u201cThis vulnerability is due to inadequate filtering of the SSL [...]", "creation_timestamp": "2026-09-08T00:00:28.415365Z"}, {"uuid": "e1e711cf-f074-455b-a61e-42ca7bf82fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4483", "content": "Research\n1. OSS-Fuzz vulnerabilities for OSV\n(Open source vulnerability DB)\nhttps://github.com/google/oss-fuzz-vulns\n2. Undetected Azure Active Directory Brute-Force Attacks\ud83d\udc4d\ud83c\udffd\nhttps://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks\n\nOffensive security\nBuilding an offensive RPC interface\nhttps://sensepost.com/blog/2021/building-an-offensive-rpc-interface\n]-> Offensive RPC PoC:\nhttps://github.com/sensepost/offensive-rpc\n\nexploit\nCVE-2021-34730:\nA vulnerability (stack overflow) in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, RV215W Routers (0day)\nhttps://github.com/badmonkey7/CVE-2021-34730\n\nThreat Research\n1. Hijacking iCloud Credentials with Apple Airtags (Stored XSS)\nhttps://medium.com/@bobbyrsec/zero-day-hijacking-icloud-credentials-with-apple-airtags-stored-xss-6997da43a216\n2. Open-sourcing Mariana Trench:\nAnalyzing Android/Java app security in depth\nhttps://github.com/facebook/mariana-trench", "creation_timestamp": "2026-09-10T19:00:06.161295Z"}, {"uuid": "3a57c86e-43ca-44a1-b1fd-603540e58707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cissp/4052", "content": "Cisco has informed its customers that it will not provide a patch for a newly discovered critical vulnerability (CVE-2021-34730) affecting its small business routers as the devices reach the end of their lifecycle.\nRead: https://thehackernews.com/2021/08/critical-flaw-found-in-older-cisco.html", "creation_timestamp": "2026-09-10T22:00:03.415943Z"}, {"uuid": "977d004b-de9b-4e14-b1ce-b4e7521e3776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "seen", "source": "https://t.me/cissp/4052", "content": "Cisco has informed its customers that it will not provide a patch for a newly discovered critical vulnerability (CVE-2021-34730) affecting its small business routers as the devices reach the end of their lifecycle.\nRead: https://thehackernews.com/2021/08/critical-flaw-found-in-older-cisco.html", "creation_timestamp": "2026-09-11T00:00:11.162366Z"}, {"uuid": "8088e9c2-a88d-41b1-b33d-d52c80aa5ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34730", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4483", "content": "Research\n1. OSS-Fuzz vulnerabilities for OSV\n(Open source vulnerability DB)\nhttps://github.com/google/oss-fuzz-vulns\n2. Undetected Azure Active Directory Brute-Force Attacks\ud83d\udc4d\ud83c\udffd\nhttps://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks\n\nOffensive security\nBuilding an offensive RPC interface\nhttps://sensepost.com/blog/2021/building-an-offensive-rpc-interface\n]-> Offensive RPC PoC:\nhttps://github.com/sensepost/offensive-rpc\n\nexploit\nCVE-2021-34730:\nA vulnerability (stack overflow) in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, RV215W Routers (0day)\nhttps://github.com/badmonkey7/CVE-2021-34730\n\nThreat Research\n1. Hijacking iCloud Credentials with Apple Airtags (Stored XSS)\nhttps://medium.com/@bobbyrsec/zero-day-hijacking-icloud-credentials-with-apple-airtags-stored-xss-6997da43a216\n2. Open-sourcing Mariana Trench:\nAnalyzing Android/Java app security in depth\nhttps://github.com/facebook/mariana-trench", "creation_timestamp": "2026-09-11T00:00:30.842739Z"}]}