diff --git a/misp_modules/modules/expansion/vulnerability_lookup.py b/misp_modules/modules/expansion/vulnerability_lookup.py index a6315a94..7dcc683e 100644 --- a/misp_modules/modules/expansion/vulnerability_lookup.py +++ b/misp_modules/modules/expansion/vulnerability_lookup.py @@ -194,8 +194,13 @@ class VulnerabilityLookupParser(VulnerabilityParser): cveMetaData = lookup_result['cveMetadata'] for field, relation in self.mapping.cve_mapping().items(): misp_object.add_attribute(relation, cveMetaData[field]) - for reference in lookup_result['containers']['cna']['references']: + containers = lookup_result['containers'] + for reference in containers.get('cna', {}).get('references', []): misp_object.add_attribute('references', reference['url']) + for adp in containers.get('adp', []): + for affected in adp.get('affected', []): + for cpe in affected.get('cpes', []): + misp_object.add_attribute('vulnerable-configuration', cpe) misp_object.add_reference(self.misp_attribute.uuid, 'related-to') vulnerability_object = self.misp_event.add_object(misp_object) return vulnerability_object.uuid