Details and Analytics for zoho_manageengine_rce / CVE-2020-11518
The lists are generated based on combined shodan/OSINT-Queries.
If we detect a certain CVE with ( CVSS > 8 AND Remote AND Unauthenticated AND (RCE OR PriviledgeEscalation OR FileAccess) or exploits going around, we check if there is a posibility to catch all effected hosts/IPs that could be prone of attacks/exploitation, via shodan and OSINT.
in a second step we analyse affected IPs and generate ASN/Country-Attribution that will be placed in data
Detail - Format (file and content)
- files are plaintext
- file_names are generated by CVE + country [CN]
-> CVE-20202-XXXX/CVE-2020-XXXXX-[CN].list
file_content:
Remarks
please note:
-
found IPs might contain False-Positives and miss False Negatives
-
Country/ASN-Attribution might not be correct