{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1542.004 ROMMONkit","home_page_url":"https://patchfirst.co/technique/T1542.004/","feed_url":"https://patchfirst.co/feed/technique/T1542.004.json","description":"New and newly exploited CVEs that lead to ATT&CK T1542.004 ROMMONkit, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2020-3416","url":"https://patchfirst.co/cve/CVE-2020-3416/","title":"CVE-2020-3416: Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities","content_text":"Cisco · Cisco IOS XE Software. Not in CISA KEV. EPSS 0.3% (higher than 25.2% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1542.004 ROMMONkit. Priority 9.7 of 100.","summary":"Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities","date_published":"2020-09-24T00:00:00.000Z","date_modified":"2024-11-13T17:55:48.000Z","tags":["T1078","T1542.004"],"_patchfirst":{"reason":"published","priority":9.7,"kev":null,"epss":{"score":0.00322,"percentile":0.25231},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Cisco IOS XE Software","techniqueIds":["T1078","T1542.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3513","url":"https://patchfirst.co/cve/CVE-2020-3513/","title":"CVE-2020-3513: Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities","content_text":"Cisco · Cisco IOS XE Software. Not in CISA KEV. EPSS 0.3% (higher than 25.2% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1542.004 ROMMONkit. Priority 9.7 of 100.","summary":"Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities","date_published":"2020-09-24T00:00:00.000Z","date_modified":"2024-11-13T18:00:59.000Z","tags":["T1078","T1542.004"],"_patchfirst":{"reason":"published","priority":9.7,"kev":null,"epss":{"score":0.00322,"percentile":0.25231},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Cisco IOS XE Software","techniqueIds":["T1078","T1542.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}