{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1608 Stage Capabilities","home_page_url":"https://patchfirst.co/technique/T1608/","feed_url":"https://patchfirst.co/feed/technique/T1608.json","description":"New and newly exploited CVEs that lead to ATT&CK T1608 Stage Capabilities, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2019-16009","url":"https://patchfirst.co/cve/CVE-2019-16009/","title":"CVE-2019-16009: Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability","content_text":"Cisco · Cisco IOS 12.2(15)B. Not in CISA KEV. EPSS 1.0% (higher than 62% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 19.9 of 100.","summary":"Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability","date_published":"2020-09-23T00:00:00.000Z","date_modified":"2024-11-13T18:04:10.000Z","tags":["T1204.001","T1608"],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.00975,"percentile":0.62045},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco IOS 12.2(15)B","techniqueIds":["T1204.001","T1608"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3379","url":"https://patchfirst.co/cve/CVE-2020-3379/","title":"CVE-2020-3379: Cisco SD-WAN Solution Software Privilege Escalation Vulnerability","content_text":"Cisco · Cisco SD-WAN Solution. Not in CISA KEV. EPSS 0.4% (higher than 28.7% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078 Valid Accounts; T1608 Stage Capabilities. Priority 9.5 of 100.","summary":"Cisco SD-WAN Solution Software Privilege Escalation Vulnerability","date_published":"2020-07-16T00:00:00.000Z","date_modified":"2024-11-15T16:53:01.000Z","tags":["T1078","T1608"],"_patchfirst":{"reason":"published","priority":9.5,"kev":null,"epss":{"score":0.00351,"percentile":0.28742},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco SD-WAN Solution","techniqueIds":["T1078","T1608"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-15288","url":"https://patchfirst.co/cve/CVE-2019-15288/","title":"CVE-2019-15288: Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability","content_text":"Cisco · Cisco TelePresence TC Software. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services; T1608 Stage Capabilities. Priority 21.7 of 100.","summary":"Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability","date_published":"2019-11-26T00:00:00.000Z","date_modified":"2024-11-20T17:04:36.000Z","tags":["T1078","T1133","T1608"],"_patchfirst":{"reason":"published","priority":21.7,"kev":null,"epss":{"score":0.01746,"percentile":0.77776},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco TelePresence TC Software","techniqueIds":["T1078","T1133","T1608"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1768","url":"https://patchfirst.co/cve/CVE-2019-1768/","title":"CVE-2019-1768: Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 1.0% (higher than 61.5% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1608 Stage Capabilities; T1059 Command and Scripting Interpreter. Priority 17.0 of 100.","summary":"Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability","date_published":"2019-05-16T00:00:00.000Z","date_modified":"2024-11-20T17:18:02.000Z","tags":["T1078","T1608","T1059"],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00959,"percentile":0.61466},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":["T1078","T1608","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1781","url":"https://patchfirst.co/cve/CVE-2019-1781/","title":"CVE-2019-1781: Cisco FXOS and NX-OS Software Command Injection Vulnerability","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 40.2% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1608 Stage Capabilities; T1059 Command and Scripting Interpreter. Priority 12.7 of 100.","summary":"Cisco FXOS and NX-OS Software Command Injection Vulnerability","date_published":"2019-05-15T00:00:00.000Z","date_modified":"2024-11-20T17:20:46.000Z","tags":["T1078","T1608","T1059"],"_patchfirst":{"reason":"published","priority":12.7,"kev":null,"epss":{"score":0.00463,"percentile":0.40158},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":["T1078","T1608","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1857","url":"https://patchfirst.co/cve/CVE-2019-1857/","title":"CVE-2019-1857: Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability","content_text":"Cisco · Cisco HyperFlex HX-Series. Not in CISA KEV. EPSS 0.6% (higher than 48.3% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 15.3 of 100.","summary":"Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability","date_published":"2019-05-03T00:00:00.000Z","date_modified":"2024-11-21T19:32:04.000Z","tags":["T1204.001","T1608"],"_patchfirst":{"reason":"published","priority":15.3,"kev":null,"epss":{"score":0.00592,"percentile":0.48256},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco HyperFlex HX-Series","techniqueIds":["T1204.001","T1608"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15466","url":"https://patchfirst.co/cve/CVE-2018-15466/","title":"CVE-2018-15466: Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability","content_text":"Cisco · Cisco Policy Suite (CPS) Software. Not in CISA KEV. EPSS 1.9% (higher than 80% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1608 Stage Capabilities; T1005 Data from Local System. Priority 19.7 of 100.","summary":"Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability","date_published":"2019-01-11T00:00:00.000Z","date_modified":"2024-11-19T19:17:55.000Z","tags":["T1608","T1005"],"_patchfirst":{"reason":"published","priority":19.7,"kev":null,"epss":{"score":0.01933,"percentile":0.80013},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Policy Suite (CPS) Software","techniqueIds":["T1608","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15401","url":"https://patchfirst.co/cve/CVE-2018-15401/","title":"CVE-2018-15401: Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability","content_text":"Cisco · Cisco Hosted Collaboration Mediation Fulfillment. Not in CISA KEV. EPSS 0.5% (higher than 42.9% of CVEs). ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 9.9 of 100.","summary":"Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability","date_published":"2018-10-05T00:00:00.000Z","date_modified":"2024-11-26T14:32:26.000Z","tags":["T1204.001","T1608"],"_patchfirst":{"reason":"published","priority":9.9,"kev":null,"epss":{"score":0.005,"percentile":0.4287},"cvss":null,"vendor":"Cisco","product":"Cisco Hosted Collaboration Mediation Fulfillment","techniqueIds":["T1204.001","T1608"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}