T1602Collection
Data from Configuration Repository
Adversaries may collect data related to managed devices from configuration repositories. Configuration repositories are used by management systems in order to configure, manage, and control data on remote systems. Configuration repositories may also facilitate remote access and administration of devices. Adversaries may target these repositories in order to collect large quantities of sensitive…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
CVEs linked to Data from Configuration Repository
1 CVE, by priority. Each link shows its badge.- CVE-2025-31324SAP NetWeaver Unrestricted File Upload VulnerabilitySAP · NetWeaverKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1505.003Web Shell+2 more · 1 reportMITRE CTID mapping of the KEV entry · follow-on activity99.5%Top 0.06%83.7priority