Trusted Design

Scans for Ciscos IKEv1 and IKEv2 UDP RCE (CVE-2016-1287)

概要

A short dissection on who's scanning for CVE-2016-1287, the latest IKEv1 and IKEv2 Buffer Overflow Vulnerability. vulgo: CISCO-UDP-RCE-Vuln Since Scanning is expected (and startet short after the Advisory became public) we wanted to know (and publish) who's scanning and the ressults seems to be quite interesting.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability (score: 0.64)
Dynamoo 2015-12-15: Tainted network Dmitry Shestakov / vds24.net (score: 0.53)
Angler, Nuclear Exploit Kits Integrate Pawn Storm Flash Exploit (score: 0.52)
ISC 2016-04-23: Angler Exploit Kit, Bedep, and CryptXXX (score: 0.52)
Exploring CVE-2015-2545 and its users (score: 0.51)

このPulseに関連する脅威アクター (事実ベース)

Sandworm Team

Score: 5.31

Matched TTPs:

T1588.006 - Vulnerabilities
T1190 - Exploit Public-Facing Application

MITREへのリンク →

Volt Typhoon

Score: 5.31

Matched TTPs:

T1588.006 - Vulnerabilities
T1190 - Exploit Public-Facing Application

MITREへのリンク →

Storm-0501

Score: 5.31

Matched TTPs:

T1588.006 - Vulnerabilities
T1190 - Exploit Public-Facing Application

MITREへのリンク →

APT28

Score: 6.01

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1137.002 - Office Test

MITREへのリンク →

Medusa Group

Score: 4.22

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.79

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1137.002 - Office Test

MITREへのリンク →

Storm-0501

Score: 0.74

Matched TTPs:

T1588.006 - Vulnerabilities
T1190 - Exploit Public-Facing Application

MITREへのリンク →

Volt Typhoon

Score: 0.73

Matched TTPs:

T1588.006 - Vulnerabilities
T1190 - Exploit Public-Facing Application

MITREへのリンク →

Sandworm Team

Score: 0.71

Matched TTPs:

T1588.006 - Vulnerabilities
T1190 - Exploit Public-Facing Application

MITREへのリンク →

Medusa Group

Score: 0.57

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Related CVEs

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る