Preus públics per a l'any 2020 i successius: regulació general i preus públics de diversos serveis [text refós 2020]

(1)

Butlletí Oficial de la Província de Barcelona

Data 9-3-2020

CVE 2020007492

Pàg. 1-58

https://bop.diba.cat

A

$181&,

$-817$0(17'(%$5&(/21$

/D&RPLVVLyGH*RYHUQPXQLFLSDOHQGDWD GHIHEUHU GHKDDGRSWDWHOVHJHQWDFRUG

$3529$5ODPRGLILFDFLyGHODUHJXODFLyJHQHUDOGHOVSUHXVS~EOLFVPXQLFLSDOVDL[tFRPHOVSUHXVS~EOLFVSHU D O¶DQ\ L VXFFHVVLXV SHOV VHUYHLV GH SUpVWHF LQWHUELEOLRWHFDUL GHO 6HUYHL GH 'RFXPHQWDFLy L $FFpV DO &RQHL[HPHQW6('$&G¶DFRUGDPEODSURSRVWDGHWH[WTXHV¶DFRPSDQ\D

38%/,&$5DTXHVWDFRUGLHOWH[WtQWHJUHGHODUHJXODFLyJHQHUDOLGHOVSUHXVS~EOLFVDO%XWOOHWt2ILFLDOGHOD 3URYtQFLDGH%DUFHORQD

&RQWUDO¶HVPHQWDW DFRUGHOV LQWHUHVVDWVSRGUDQ LQWHUSRVDUGLUHFWDPHQW UHFXUVFRQWHQFLyV DGPLQLVWUDWLX HQ HO WHUPLQLGHGRVPHVRVFRPSWDGRUVGHVGHO GLDVHJHQWDOGHODSXEOLFDFLyGHOSUHVHQWDQXQFLDO%XWOOHWt2ILFLDO GHOD3URYtQFLDGH%DUFHORQD

%DUFHORQD GH IHEUHU GH

(/6(&5(7$5,*(1(5$/-RUGL&DVHVL3DOODUqV

5(*8/$&,Ï*(1(5$/'(/635(863Ò%/,&6

$UW U 1DWXUDOHVD GH OD UHJXODFLy 'DFRUG DPE DOOz TXH GLVSRVD ODUWLFOH GHO WH[W UHIyV GH OD /OHL UHJXODGRUDGHOHVKLVHQGHVORFDOVLODUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDO$MXQWDPHQWHVWDEOHL[ OD SUHVHQW UHJXODFLy JHQHUDO GHOV SUHXV S~EOLFV TXH FRQWp OHV QRUPHV FRPXQHV WDQW VXEVWDQWLYHV FRP SURFHGLPHQWDOV TXH FDO FRQVLGHUDU DPE FDUjFWHU JHQHUDO SDUWV LQWHJUDQWV GH OD UHJXODFLy GH FDGDVFXQ GDTXHOOVHQWRWDOOzTXHDTXHVWHVQRUHJXOLQH[SUHVVDPHQW

/D FRQFUHFLy GH FDGD SUHX S~EOLF QRPpV FRQWLQGUj HOV HOHPHQWV LQGLVSHQVDEOHV SHU D OD IL[DFLy GH OD TXDQWLD FRUUHVSRQHQW DL[t FRP VL HVFDX DTXHOOV FULWHULV HVSHFtILFV GH JHVWLy OLTXLGDFLy R UHFDSWDFLy TXH VLJXLQQHFHVVDULVGDFRUGDPEODQDWXUDOHVDGHODFWXDFLyRGHOVHUYHLGHTXqHVWUDFWL/DSUHVHQW UHJXODFLy JHQHUDOSHUWDQWpVGLUHFWDPHQWDSOLFDEOHHQODUHVWDGDVSHFWHV

$UW Q &RQFHSWH 7HQHQ OD FRQVLGHUDFLy GH SUHXV S~EOLFV OHV FRQWUDSUHVWDFLRQV SHFXQLjULHV TXH HV VDWLVIDFLQSHUOHVSUHVWDFLRQVGHVHUYHLVLODUHDOLW]DFLyGDFWLYLWDWVHIHFWXDGHVHQUqJLPGHGUHWS~EOLFTXDQ HVSURGXHL[LTXDOVHYROGHOHVFLUFXPVWjQFLHVVHJHQWV

D4XHVLJXLQGHVROāOLFLWXGRGHUHFHSFLyYROXQWjULDSHUOHVSHUVRQHVVROāOLFLWDQWV E4XHVLJXLQSUHVWDWVRUHDOLW]DWVSHOVHFWRUSULYDW

$OHIHFWHGDOOzTXHHVWDEOHL[ODSDUWDWOOHWUDDQRHVFRQVLGHUDYROXQWjULDODVROāOLFLWXG D4XDQYLQJXLLPSRVDGDSHUGLVSRVLFLRQVOHJDOVRUHJODPHQWjULHV

E4XDQHOVHUYHLRODFWLYLWDWVROāOLFLWDGDVLJXLQHVVHQFLDOVRLPSUHVFLQGLEOHVSHUDODYLGDSULYDGDRVRFLDOGH OHVSHUVRQHVVROāOLFLWDQWV

(2)

Data 9-3-2020

CVE 2020007492

Pàg. 2-58

A

&HVVLyGHWHUUHQ\VG¶DFDPSDGDGHOD*UDQMD(VFROD&DQ*LURQD

6HUYHLVGHOVFHQWUHVREHUWVPXQLFLSDOVSHUDFULDWXUHVDGROHVFHQWVLIDPtOLHV &HVVLyG¶~VWHPSRUDOGHVDOHVGHO&HQWUHG¶LQIRUPDFLyLDWHQFLySHUDMRYHV

6HUYHLVL&HQWUHG¶$OORWMDPHQW)DPLOLDU1DYDV

6HUYHLVDOVDOORWMDPHQWVLQGLYLGXDOVDPEVHUYHLVFROāOHFWLXV7jQJHU 6HUYHLVDOVDOORWMDPHQWVWHPSRUDOV$3523

6HUYHLGHOSURMHFWH³7HPSVGHEDUULWHPSVSHUDWX´

$FWXDFLRQVGHODVHFFLyFDQLQDLGHODXQLWDWPXQWDGDGHOD*XjUGLD8UEDQDLVHUYHLVGHODJDOHULDGHWLUGH OD*XjUGLD8UEDQD

&XUVRVGHIRUPDFLySROLFLDOLGHVHJXUHWDWUHDOLW]DWVSHUOD*XjUGLD8UEDQD

&XUVRVGHIRUPDFLyUHDOLW]DWVSHO6HUYHLGH3UHYHQFLyL([WLQFLyG¶,QFHQGLVL6DOYDPHQW

3UHVWDFLyGHVHUYHLVGHUHFROOLGDGH UHVLGXVFRPHUFLDOVLGHSUHVWDFLyVHUYHLVHVSHFLDOVGHQHWHMDLUHFROOLGD GHUHVLGXVPXQLFLSDOV

$FWLYLWDWV G¶HGXFDFLy DPELHQWDO GH O¶¬UHD G¶(FRORJLD 8UEDQD L DOWUHV SUHVWDFLRQV GH VHUYHLV L FHVVLRQV G¶HVSDLVGHOVHFWRUGHPHGLDPELHQW

6HUYHLVFXOWXUDOVLOORJXHUG¶HVSDLVGHO3DYHOOy0LHVYDQGHU5RKH

6HUYHLGHWUDQVSRUWLQGLYLGXDOLW]DWPLWMDQoDQWELFLFOHWHVFRPSDUWLGHV%LFLQJ

$FWLYLWDWV FXOWXUDOV GH FXUVRV VHPLQDULV L FRQJUHVVRV SUHVWDGHV SHU O¶$U[LX PXQLFLSDO DGPLQLVWUDWLX HOV DU[LXVPXQLFLSDOVGHGLVWULFWHLHOVDU[LXVFHQWUDOVGHOVVHFWRUVLSHOVVHUYHLVGHUHSURGXFFLyLFRPXQLFDFLyGH GRFXPHQWVVHQVHFDUjFWHUG¶H[SHGLHQWDGPLQLVWUDWLXSURGXwWVSHUO¶$MXQWDPHQWGH%DUFHORQDLSUHVWDWVSHU O¶$U[LXPXQLFLSDODGPLQLVWUDWLXHOVDU[LXVPXQLFLSDOVGHGLVWULFWHLHOVDU[LXVFHQWUDOVGHOVVHFWRUV

6HUYHLVGHSUpVWHFLQWHUELEOLRWHFDULGHO6HUYHLGH'RFXPHQWDFLyL$FFpVDO&RQHL[HPHQW6('$& 7RWVHOVDOWUHVVHUYHLVTXHDFRPSOHL[LQHOVFRQFHSWHVH[SUHVVDWVDOSXQWGDTXHVWDUWLFOH

$UW U 2EOLJDWV DO SDJDPHQW 6yQ REOLJDGHV DO SDJDPHQW GHOV SUHXV S~EOLFV OHV SHUVRQHV ItVLTXHV R MXUtGLTXHVTXHHVEHQHILFLwQGHOVVHUYHLVROHVDFWLYLWDWVSHOVTXDOVV¶KDJLQGHVDWLVIHU

$UW W 4XDQWLD /LPSRUW GHOV SUHXV S~EOLFV SHU SUHVWDFLy GH VHUYHLV R UHDOLW]DFLy GDFWLYLWDWV KDXUj GH FREULUFRPDPtQLPHOFRVWGHOVHUYHLSUHVWDWRGHODFWLYLWDWUHDOLW]DGD

4XDQ KL KDJL UDRQV VRFLDOV EHQqILTXHV FXOWXUDOV R GLQWHUqV S~EOLF TXH DL[t KR DFRQVHOOLQ O$MXQWDPHQW SRGUjIL[DUFRQWUDSUHVWDFLRQVSHUVRWDGHOVOtPLWVIL[DWVHQO¶DSDUWDWDQWHULRU

$UWq1DL[HPHQWGHOREOLJDFLyGHSDJDPHQW/REOLJDFLyGHSDJDUHOVSUHXVS~EOLFVQHL[GHVGHTXqV¶LQLFLD ODSUHVWDFLyGHOVHUYHLRODUHDOLW]DFLyGHODFWLYLWDWWRWLTXHO$MXQWDPHQWSRWH[LJLUHOGLSzVLWSUHYLGHOLPSRUW WRWDORSDUFLDO

$UW q *HVWLy GH OHV FRQWUDSUHVWDFLRQV /$GPLQLVWUDFLy SRW H[LJLU GH OHV SHUVRQHV XVXjULHV WRWHV OHV GHFODUDFLRQV R DSRUWDFLRQV GH GDGHV TXH FRQVLGHUL QHFHVVjULHV SHU FRQqL[HU HO JUDX UHDO GXWLOLW]DFLy GHO VHUYHLLSRWDL[tPDWHL[IHUOHVFRPSURYDFLRQVRSRUWXQHV

(Q HOFDV TXH OHV SHUVRQHV XVXjULHVQR IDFLOLWLQOHV GDGHVVROāOLFLWDGHVR LPSHGHL[LQ OHVFRPSURYDFLRQV HVPHQWDGHVDQWHULRUPHQWO$GPLQLVWUDFLyPXQLFLSDOSRGUjSUDFWLFDUOHVOLTXLGDFLRQVSHUHVWLPDFLySDUWLQWGH OHVGDGHVTXHSRVVHHL[L

(3)

Data 9-3-2020

CVE 2020007492

Pàg. 3-58

A

$UWq/OLVWDGHFREUDPHQW(OVSUHXVS~EOLFVHVSRGUDQFREUDUPLWMDQoDQWOOLVWHVGHFREUDPHQWTXDQOHV

DFWLYLWDWVRVHUYHLVSUHVWDWVWLQJXLQFDUjFWHUSHULzGLFLDL[tHVGHWHUPLQLSHUODVHYDUHVSHFWLYDUHJXODFLy /HV OOLVWHV GH FREUDPHQW HV IRUPDUDQ DQXDOPHQW L HVWDUDQ FRQVWLWXwGHV SHU FHQVRV FRPSUHQVLXV GHOV REOLJDWVDOSDJDPHQWGHILQLWVDO¶DUWLFOHUG¶DTXHVWDUHJXODFLy

/HVDOWHVSHUGHFODUDFLyRDXWROLTXLGDFLyGHOVREOLJDWVDOSDJDPHQWRGHVFREHUWHVSHUO¶DFFLyLQYHVWLJDGRUD GH O¶DGPLQLVWUDFLy PXQLFLSDO WHQHQ HIHFWHV D SDUWLU GH OD GDWD HQ TXq QHL[ O¶REOLJDFLy GH SDJDPHQW L VyQ LQFRUSRUDGHVGHILQLWLYDPHQWDODOOLVWDGHFREUDPHQWGHO¶DQ\VHJHQW

/HV EDL[HV R DOWHUDFLRQV KDQ GH VHU IRUPXODGHV SHOV REOLJDWV DO SDJDPHQW GHO SUHX S~EOLF L FRPSRUWHQ O¶HOLPLQDFLyRODUHFWLILFDFLyGHODOOLVWDGHFREUDPHQWDSDUWLUGHOSHUtRGHVHJHQWDDTXHOOHQTXqKDJLQHVWDW SUHVHQWDGHVLQGHSHQGHQWPHQWGHODFRPSURYDFLySHUSDUWGHODLQVSHFFLy

$UWq3URFHGLPHQWGHUHFDSWDFLy(OSUHXS~EOLFHVUHFDSWDUj D(QSHUtRGHYROXQWDUL

(OVSHUtRGHVGHSDJDPHQWGHFDUjFWHUYROXQWDULVHUDQHOVTXHVDVVHQ\DOLQHQOHVUHVSHFWLYHVUHJXODFLRQV RVLHVFDXVHJRQVHOTXHHVWDEOHL[O¶RUGHQDQoDILVFDOJHQHUDO

(OV UHEXWV GH FREUDPHQW SHULzGLF G¶DFRUG DPE HO TXH HVWDEOHL[L HO FDOHQGDUL GH FREUDPHQWV DSURYDW DQXDOPHQWSHUO¶$MXQWDPHQW

E(QSHUtRGHH[HFXWLX

7UDQVFRUUHJXWV HOV WHUPLQLV GH SDJDPHQW HVWDEOHUWV SHU D FDGDVFXQD GH OHV GLIHUHQWV FRQWUDSUHVWDFLRQV VHQVH TXH VKDJL DFUHGLWDW HO SDJDPHQW TXH FRUUHVSRQJXL O$MXQWDPHQW SRGUj H[LJLU DTXHVWV GHXWHV SHO SURFHGLPHQWDGPLQLVWUDWLXGHFRQVWUHQ\LPHQW

(OSURFHGLPHQWUHFDSWDGRUQRPpVHVVXVSHQGUjSHUOHVUDRQVLHQHOVFDVRVH[SUHVVDPHQWSUHYLVWRVSHU OD/OHL

4XDQSHUUDRQVQRLPSXWDEOHVDOREOLJDWDOSDJDPHQWGHOSUHXS~EOLFQRHVUHDOLW]LODFWLYLWDWRHVSUHVWLHO VHUYHL SURFHGLUjODGHYROXFLyGHOLPSRUWFRUUHVSRQHQW

$UW q ,QWHUHVVRV GH GHPRUD (OV SUHXV S~EOLFV GHV GHO GLD VHJHQW D OD ILQDOLW]DFLy GHO WHUPLQL GH SDJDPHQWHQSHUtRGHYROXQWDULVHQVHTXHVHQ¶KDJLIHWO¶LQJUpVPHULWDUDQLQWHUHVVRVGHGHPRUD

$UW q 'RPLFLOLDFLy HQ HQWLWDW ILQDQFHUD /¶REOLJDW DO SDJDPHQW SRW RUGHQDU OD GRPLFLOLDFLy GHOV UHEXWV GHOVSUHXVS~EOLFVGHFREUDPHQWSHULzGLFHQHOFRPSWHGHOTXDOpVWLWXODURHQHOFRPSWHG¶XQDOWUHWLWXODUTXH QRHVVHQWO¶REOLJDWDXWRULW]LHOSDJDPHQW

/HVGRPLFLOLDFLRQVIHWHVSHOVREOLJDWVDOSDJDPHQWWLQGUDQYDOLGHVDGXUDQWHOWHPSVTXHGXULODSUHVWDFLy GHOVHUYHLILQVTXHHOPDWHL[LQWHUHVVDWQROHVDQXOāOLRLQGLTXLHOWUDVOODWDXQDOWUHFRPSWHRHQWLWDW

$UWq(QWRWDOOzQRSUHYLVW DODSUHVHQWUHJXODFLyVHUjG¶DSOLFDFLyO¶RUGHQDQoDILVFDOJHQHUDO

$UWq'DWDGHYLJqQFLD/DSUHVHQWUHJXODFLyFRPHQoDUjDUHJLUO¶GHJHQHUGHLFRQWLQXDUjYLJHQW PHQWUHQRVHQDFRUGLODPRGLILFDFLyRGHURJDFLy

$11(;, ¬5($'('5(7662&,$/6

35(86 3Ò%/,&6 3(5 $ 5(6,'Ê1&,(6 +$%,7$7*(6 787(/$76 &(175(6 '( ',$ , (67$'(6 5(6,'(1&,$/6'(&$5¬&7(57(0325$/3(5*(17*5$1

(4)

Data 9-3-2020

CVE 2020007492

Pàg. 4-58

A

'¶DFRUGDPEDOOzTXHGLVSRVDO¶DUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDLO¶DUWLFOHGHOWH[WUHIyVGH

OD/OHLUHJXODGRUDGHOHVKLVHQGHVORFDOVLGHFRQIRUPLWDWDPEHOVDUWLFOHVDGHOPDWHL[WH[WUHIyVHVIL[HQ HOV SUHXV SHU OD SUHVWDFLy GH VHUYHLV HQ UHVLGqQFLHV DSDUWDPHQWV WXWHODWV L FHQWUHV GHGLD PXQLFLSDOV SHUD JHQW JUDQ

$UWQ2EMHFWH

(V UHJXOD OD FRQWUDSUHVWDFLy SHFXQLjULD SHU OD SUHVWDFLy GHOV VHUYHLV GH UHVLGqQFLHV DSDUWDPHQWV WXWHODWV L FHQWUHVGHGLDSHUDJHQWJUDQDL[tFRPHOVjSDWVHQFRPSDQ\LDRIHUWDWVSHOVGLIHUHQWVHTXLSDPHQWV

$UWU2EOLJDFLy GHSDJDPHQW

(VWDQREOLJDWVDOSDJDPHQWGHOHVFRUUHVSRQHQWVWDULIHVOHVSHUVRQHVTXHXWLOLW]LQTXDOVHYROGHOVVHUYHLVTXH VyQREMHFWHG¶DTXHVWDUHJXODFLyG¶DFRUGDPEDOOzTXHV¶HVWDEOHL[HQHOGHFUHWGHOD*HQHUDOLWDWGH &DWDOXQ\D SHO TXH HV UHJXOHQ OHV FRQWUDSUHVWDFLRQV GHOVXVXDULVL XVXjULHV GHVHUYHLVVRFLDOV DL[t FRP OHV JDUDQWLHVPtQLPHVSHUDDTXHVWHVSHUVRQHV

$UWW4XDQWLD

/HVWDULIHVPHQVXDOVDSOLFDEOHVVyQOHVVHJHQWV $5HVLGqQFLHVSHUDODJHQWJUDQ

/HV UHVLGqQFLHV PXQLFLSDOV WHQHQ O¶DFUHGLWDFLy G¶HQWLWDWV FROāODERUDGRUHV SHU SDUW GH OD *HQHUDOLWDW GH &DWDOXQ\D G¶DFRUG DPE HO SURJUDPD GH VXSRUW D O¶$FROOLPHQW 5HVLGHQFLDO SHU D JHQW JUDQ TXH TXHGHQ HVWDEOHUWHV HQ O¶DFRUG *29 GH GH PDLJ L SHO TXDO HV FUHHQ SUHVWDFLRQV VRFLDOV GH FDUjFWHU HFRQzPLFGHGUHWGHFRQFXUUqQFLDHQHO'HSDUWDPHQWGH%HQHVWDU6RFLDOL/OHLGHOGHMXOLROGH SUHVWDFLRQVVRFLDOVGHFDUjFWHUHFRQzPLF3HUDTXHVWPRWLXHOVSUHXVS~EOLFVGHOHVUHVLGqQFLHVPXQLFLSDOV V¶HVWDEOHL[HQ HQIXQFLyGHODGHSHQGqQFLDGHODSHUVRQDXVXjULD

/HV UHVLGqQFLHV PXQLFLSDOV WHQHQO¶DFUHGLWDFLy G¶HQWLWDWV FROODERUDGRUHV GH OD *HQHUDOLWDW GH &DWDOXQ\D G¶DFRUGDPEHOSURJUDPDGHVXSRUWDO¶$FROOLPHQW5HVLGHQFLDOSHUDJHQWJUDQTXHTXHGHQHVWDEOHUWHVHQ O¶DFRUG*29GHGH0DLJLSHOTXDOHVFUHHQSUHVWDFLRQVVRFLDOVGHFDUjFWHUHFRQzPLFGHGUHW GH FRQFXUUqQFLD HQ HO 'HSDUWDPHQW GH %HQHVWDU 6RFLDO L /OHL GHO GH MXOLRO GH SUHVWDFLRQV VRFLDOV GH FDUjFWHU HFRQzPLF SHU DTXHVW PRWLX HOV SUHXV S~EOLFV PXQLFLSDOV V¶HVWDEOHL[HQ VHJRQV OD GHSHQGqQFLDGHODSHUVRQDXVXjULD

(OVSUHXVS~EOLFVSHUDSHUDOHVUHVLGqQFLHVPXQLFLSDOV)UDQFHVF/D\UHW3DUFGHO*XLQDUGy-RVHS 0LUDFOHL)RUW3LHQFVyQ

1LYHOOGHGHSHQGqQFLDDOW *UDX,,,

¼SODoDPHV

(OSUHXPj[LPDSOLFDWSHUOD*HQHUDOLWDWpVGH¼ 1LYHOOGHGHSHQGqQFLDPLWMj

*UDX,,

¼SODoDPHV

(OSUHXPj[LPDSOLFDWSHUOD*HQHUDOLWDWpVGH¼

/D FRUUHVSRQGqQFLD HQWUH HOV JUDXV L QLYHOOV GH OD /OHL GH GH GHVHPEUH GH 3URPRFLy GH O¶$XWRQRPLD3HUVRQDOL$WHQFLyDOHVSHUVRQHVHQVLWXDFLyGHGHSHQGqQFLDDPEOHVSODFHVFROāODERUDGRUHV pVODVHJHQW

/OHL 'HSHQGqQFLDSHUSODoDFROāODERUDGRUD *UDX,,,QLYHOOL 'HSHQGqQFLDDOWD

(5)

Data 9-3-2020

CVE 2020007492

Pàg. 5-58

A

(OFjOFXOGHODFRQWUDSUHVWDFLyTXHDERQDUjODSHUVRQDXVXjULDHQIXQFLyGHODVHYDFDSDFLWDWHFRQzPLFD

pVHOGHWHUPLQDWDO¶2UGUHGH%HQHVWDU6RFLDOL)DPtOLD%6)SHUDODYDORUDFLyGHODFDSDFLWDW HFRQzPLFD L HO FjOFXO GH O¶DSRUWDFLy GH OD SHUVRQD XVXjULD G¶XQ VHUYHL VRFLDO VXEMHFWH GH SUHX S~EOLF 6¶KDXUDQGHWHQLUHQFRPSWHOHVVHJHQWVUHJOHV

D 3HUVRQHV XVXjULHV VHQVH SHUVRQHV DO VHX FjUUHF 'HOV LQJUHVVRV WRWDOV GH O¶XVXDUL R XVXjULD HV GHGXLUj HO SUHXSODoDPHV GHO FHQWUH FRUUHVSRQHQW UHVSHFWDQWQH VHPSUH OD JDUDQWLD GHO GH O¶LQGLFDGRUGHUHQGDGHVXILFLqQFLDSHUDODOOLXUHGLVSRVLFLyGHO¶XVXDULRXVXjULD

E 3HUVRQHVXVXjULHVDPESHUVRQHVDOVHXFjUUHF'HOVLQJUHVVRVWRWDOVHVGHGXLUjO¶LQGLFDGRUGHUHQGD GHVXILFLqQFLDPXOWLSOLFDWSHOFRHILFLHQWSHUVRQDOSRQGHUDFLyGHOHVSHUVRQHVDFjUUHFGHO¶XVXDULR XVXjULDLHVJDUDQWLUjDODSHUVRQDEHQHILFLjULDHOGHO¶LQGLFDGRUGHUHQGDGHVXILFLqQFLD F 6LODSHUVRQDDFjUUHFWDPEppVEHQHILFLjULDG¶XQVHUYHLVRFLDORILFLDO'HOWRWDOG¶LQJUHVVRVHVGHGXLUj

HO GH O¶LQGLFDGRU GH UHQGD GH VXILFLqQFLD L HV JDUDQWLUj LJXDOPHQW D OD SHUVRQD EHQHILFLjULD HO GHO¶LQGLFDGRUGHUHQGDGHVXILFLqQFLD

6HUYHLGHWDOOHUVGHO¶(VSDLGHOD*HQW*UDQGHOD5HVLGqQFLD3DUFGHO*XLQDUGy(OFHQWUHUHVLGHQFLDO3DUF GHO*XLQDUGySUHVWDHOVHUYHLGHGLQDPLW]DFLySHUDO¶HQYHOOLPHQWDFWLXLVDOXGDEOHDGUHoDWDOHVSHUVRQHV JUDQVGHO¶HQWRUQFRPXQLWDULSURSHU(OVWDOOHUVTXHRIHUHL[HQDTXHVWSXQWGHGLQDPLW]DFLyHVWDEOHL[HQOD WDULIDVHJHQWSHUDO¶RIHUWDGHWDOOHUVWULPHVWUDOV

R ¼WDOOHUDOWULPHVWUHSHUDSHUVRQHVJUDQVDPE7DUJHWD5RVD*UDWXwWD R ¼ WDOOHUWULPHVWUDOSHUDSHUVRQHVJUDQVDPE7DUJHWD5RVD5HGXwGD R ¼WDOOHUWULPHVWUDOSHUDSHUVRQHVVHQVH7DUJHWD5RVD

%+DELWDWJHVWXWHODWVSHUDJHQWJUDQ

(OSUHXPHQVXDOG¶DTXHVWVHTXLSDPHQWVVHUjGH¼

(O FjOFXO GHO FRSDJDPHQW GH O¶XVXDUL VHUj HQ IXQFLy GH OD VHYD FDSDFLWDW HFRQzPLFD L TXHGD GHWHUPLQDWDO¶2UGUHGH%HQHVWDU6RFLDOL)DPtOLD%6)

¬SDW(VSRUjGLF$SDUWDPHQWV3DX&DVDOV¼SHUjSDW

&&HQWUHVGHGLD

(O SUHX S~EOLF GHOVFHQWUHVGHGLD DMRUQDGDFRPSOHUWDVHUj GH¼PHVLGHODPLWMD MRUQDGDpVGH¼PHV$O¶DFWXDOLWDWOD*HQHUDOLWDWDSOLFDXQWRSDOOGHSUHXPj[LPGH ¼-RUQDGDFRPSOHUWDLGH¼ODPLWMDMRUQDGD

/DMRUQDGDFRPSOHUWDpVGHGLOOXQVDGLYHQGUHVGHLOHVKPHVRVGHO¶DQ\LLQFORXHO VHUYHL GH PHQMDGRU /D PLWMD MRUQDGD SRW VHU GH PDWt D K R WDUGD D K L QR LQFORXHOPHQMDGRUTXHHVSRGUjDERQDUDSDUW(OSUHXGHOPHQMDGRUpVGH¼GLDDSOLFDW PHQVXDOPHQWDOSUHXGH¼VHUYHLV$TXHVWSUHXHVUHGXLUjHQODPDWHL[DSURSRUFLy GHUHGXFFLyTXHWpO¶XVXDULHQHOFRSDJDPHQWGHO&HQWUHGH'LD

(OFjOFXOGHOFRSDJDPHQWHVIDUjHQIXQFLyGHODVHYDFDSDFLWDWHFRQzPLFDGHODSHUVRQD XVXjULD L HVWj GHWHUPLQDW D O¶2UGUH GH %HQHVWDU 6RFLDO L )DPtOLD %6) SHU D OD YDORUDFLy GH OD FDSDFLWDW HFRQzPLFD L HO FjOFXO GH O¶DSRUWDFLy GH OD SHUVRQD XVXjULD G¶XQ VHUYHLVRFLDOVXEMHFWHDSUHXS~EOLF

6HUYHLVFRPSOHPHQWDULVGHOV&HQWUHVGH'LD

(6)

Data 9-3-2020

CVE 2020007492

Pàg. 6-58

A

([HPSFLy /HV SHUVRQHV XVXjULHV GHOV VHUYHLV GHO 7HPSV SHU D WX GHO &HQWUH GH GLD &DVD %ORF

HVWDUDQH[HPSWVDOSDJDPHQWHQHOVVHJHQWVVXSzVLWV

4XDQHOVLQJUHVVRVGHODXQLWDWIDPLOLDURODSHUVRQDFXLGDGRUDQRVXSHULQO¶,56&

4XDQODSHUVRQDFXLGDGRUDVLJXLWLWXODUGH7DUJHWD5RVD*UDWXwWD

4XDQKDJLQHVWDWGHULYDWVSHOVFHQWUHVGHVHUYHLVVRFLDOVLQIRUPDQWQHFHVVLWDWVVRFLDOV HQUHODFLyDOHVDFWLYLWDWVGHOSURMHFWH

5HGXFFLRQV /HVSHUVRQHVXVXjULHVGHOVHUYHLJDXGLUDQG¶XQDUHGXFFLyGHOGHOSUHXS~EOLFTXDQ ODSHUVRQDFXLGDGRUDVLJXLWLWXODUGH7DUJHWD5RVD5HGXwGD

(OSUHXGHOPHQMDGRUGHOVHUYHL7(0363(5$78pVGH¼jSDW

$FWLYLWDWVSVLFRHVWLPXODWLYHVLSVLFRPRWULXVREHUWHVDSHUVRQHVJUDQVQRXVXjULHVGHO&HQWUHGH'LD /¶LPSRUWSHUDDTXHVWHVDFWLYLWDWVpVGH¼SHUKRUDG¶DWHQFLy

(5HVLGqQFLHV HVWDGHVWHPSRUDOVSHUXUJqQFLD6$89

/D TXRWD tQWHJUD GH OD SODoD UHVLGHQFLDO WHPSRUDO GHO 6HUYHL G¶8UJqQFLHV D OD 9HOOHVD UHVXOWD GHOV VHJHQWVLPSRUWV

¼GLD

¼PHV

/D TXRWD OtTXLGD HV GHWHUPLQDUj WHQLQW HQ FRPSWH OD FDSDFLWDW HFRQzPLFD GLVSRQLEOH HQ FzPSXW PHQVXDOG¶DFRUGDPEODVHJHQWIyUPXOD

4XRWDOtTXLGDPHQVXDO >FDSDFLWDWHFRQzPLFD± UHGXFFLRQV@ GHFREHUWXUD TXRWDOtTXLGDTXRWDtQWHJUD[

/DFDSDFLWDWHFRQzPLFDHVFDOFXODUjWHQLQWHQFRPSWHGRVFULWHULV

D $ODFDSDFLWDWHFRQzPLFDGHODXQLWDWIDPLOLDU8)7LQGUjODFRQVLGHUDFLyG¶8)GHODSHUVRQDXVXjULD GHO6$89HOODFzQMXJHRFRQYLYHQWHVWDEOHHQSDUHOODHOVILOOVLOHVILOOHVPHQRUVGHDQ\VLHOVILOOVLOHV ILOOHV PDMRUV GH DQ\V LQFDSDFLWDWV OHJDOPHQW VL HOV SDUHV RVWHQWHQ OD WXWHOD /D FRQYLYqQFLD HV FRPSURYDUjDWUDYpVGHOSDGUyG¶KDELWDQWV

/D FDSDFLWDW HFRQzPLFD GH OD 8) V¶REWLQGUj DPE OD VXPD GHOV LQJUHVVRV GHULYDWV GH OHV SHQVLRQV FRQWULEXWLYHVLQRFRQWULEXWLYHVGHOVLQWHUHVVRVGHOFDSLWDOPRELOLDULLLPPRELOLDULLGHPpVLQJUHVVRVGHWRWV HOVPHPEUHVTXHFRPSRQHQOD8)7DPEpHVFRPSXWDUjHOFDSLWDOPRELOLDULDGLVSRVLFLyGHOVPHPEUHVGH OD8)

E /HVQHFHVVLWDWVHFRQzPLTXHVGHODXQLWDWHFRQzPLFDGHFRQYLYqQFLD8(&

7LQGUDQ OD FRQVLGHUDFLy GH PHPEUHV GH OD 8(& GH OD SHUVRQD XVXjULD GHO 6$89 DTXHOOV DVFHQGHQWV JHUPDQVRGHVFHQGHQWVILQVDWHUFHUJUDXGHSDUHQWLXTXHQRSHUWDQ\HQDODXQLWDWIDPLOLDULTXHGHSHQHQ HFRQzPLFDPHQWGHOD8)/DFRQYLYqQFLDHVFRPSURYDUjDWUDYpVGHOSDGUyG¶KDELWDQWV

4XHGHQH[FORVRVGHOD8(&HOVIDPLOLDUVSHUOtQLDFROāODWHUDORQFOHVRWLHWVDYLVRSHUDILQLWDWVRJUHVR JHQGUHVMRYHV

5HGXFFLRQV

(7)

Data 9-3-2020

CVE 2020007492

Pàg. 7-58

A

3HU 8) OHV UHGXFFLRQV TXH FRUUHVSRQJXLQ D FDGD PHPEUH HQ IXQFLy GHO Q~PHUR GH SHUVRQHV TXH OD

FRPSRVLQ

8QLWDWIDPLOLDU8) ËQGH[GHUHGXFFLy

DSHUVRQDDFjUUHF8)8)GHGRVPHPEUHV GHO¶,56&

DRPpVSHUVRQHVDFjUUHF8)8)GHRPpVPHPEUHV GHO¶,56&

3HU 8(& QRPpV V¶DSOLFDUj OHV UHGXFFLRQV SHU D DTXHOOV PHPEUHV TXH WLQJXLQ XQV LQJUHVVRV LQIHULRUV D O¶,56&'HSHQHQWGHOQ~PHURGHSHUVRQHVDFjUUHFGHOD8(&V¶HVWDEOLUjXQLPSRUWPj[LPGHFREHUWXUD pV D GLU V¶HVWDEOLUj TXLQ SHUFHQWDWJH GH O¶,56& TXHGDUj JDUDQWLW SHU D FDGD SHUVRQD TXH GHSHQJXL HFRQzPLFDPHQWGHOD8)(OVtQGH[VGHUHGXFFLyTXHV¶DSOLFDUDQVHUDQHOVVHJHQWV

8QLWDWHFRQzPLFDGHFRQYLYqQFLD8(& ËQGH[GHUHGXFFLy

DSHUVRQDDFjUUHF8(& 'LIHUqQFLD HQWUH HO GH O¶,56& L HOV VHXV LQJUHVVRV

D SHUVRQDRGHPpVSHUVRQHVDFjUUHF8(& 'LIHUqQFLD HQWUH HO GH O¶,56& L HOV VHXV LQJUHVVRV

3HU JDXGLU GH OD ERQLILFDFLy FDOGUj OD SUHVHQWDFLy GHO FHUWLILFDW G¶LQJUHVVRV FRQWULEXWLXV L QR FRQWULEXWLXV GH FDGDPHPEUHGHOD8)LR8(&VXVFHSWLEOHGHJHQHUDUXQDERQLILFDFLy

F 3HUDOPDQWHQLPHQWGHODOODU

+LKDGHILQLGHVGRVSRVVLEOHVUHGXFFLRQVTXHQRPpVHVWLQGUDQHQFRPSWHHQHOFDVTXHHVMXVWLILTXLOD QHFHVVLWDWGHPDQWHQLUHOGRPLFLOLSHUTXqODSHUVRQDXVXjULDGHO6$89WpSRVVLELOLWDWVGHIHUXQUHWRUQR Ep SHUTXq KL VHJXHL[ YLYLQW DOJXQPHPEUHGHOD 8) LR GHOD 8(& 1RPpV HV SRGUjDSOLFDU XQDGHOHV GXHV

/ORJXHUGHO¶KDELWDWJHKDELWXDOLGHVSHVHVGHVXEPLQLVWUDPHQWEjVLFV

+LSRWHFD GH O¶KDELWDWJH KDELWXDO DVVHJXUDQoD GH OD OODU YLQFXODGD REOLJDWzULDPHQW D OD KLSRWHFD L GHVSHVHVGHVXEPLQLVWUDPHQWVEjVLFV

3HUJDXGLUGHODERQLILFDFLyFDOGUjSUHVHQWDUHOUHEXWGHOOORJXHURGHODKLSRWHFDGHO¶DVVHJXUDQoDGHODOODU YLQFXODGDREOLJDWzULDPHQWDODKLSRWHFDLHOVUHEXWVGHOVVXEPLQLVWUDPHQWVEjVLFVDLJXDOOXPLJDV

G /HVSHQVLRQVG¶DOLPHQWVLODFRPSHQVDWzULDHQFDVGHVHSDUDFLyRGLYRUFLDOHVTXHKDJLGHIHUIURQW OD SHUVRQD XVXjULD GHO 6$89 R HOV PHPEUHV GH OD 8) LR 8(& WLQGUDQ FDUjFWHU GH ERQLILFDFLy L UHGXLUDQ OD FDSDFLWDW HFRQzPLFD GH OD SHUVRQD 3HU JDXGLU GH OD UHGXFFLy FDOGUj SUHVHQWDU HO GRFXPHQWDFUHGLWDWLX

6REUHOD4XRWDOtTXLGDUHVXOWDQWV¶HVWDEOHL[HQOHVOLPLWDFLRQVVHJHQWV D /¶LPSRUWPj[LPUHVXOWDQWQRSRWVXSHUDUO¶LPSRUWGHODTXRWDtQWHJUDPj[LPD

E 6LODFDSDFLWDWHFRQzPLFDpVLQIHULRUDOHVUHGXFFLRQVTXHVHOLHVFDLJXLQVHJRQVODVLWXDFLyGHFDGD XVXDULODTXRWDOtTXLGDVHUj]HUR

$UWq1DL[HPHQWGHO¶REOLJDFLyGHSDJDPHQW

(8)

Data 9-3-2020

CVE 2020007492

Pàg. 8-58

A

$UWq'DWDGHYLJqQFLD

$TXHVWDUHJXODFLyFRPHQoDUjDUHJLUDSDUWLUGHO¶GHJHQHUGHLFRQWLQXDUjYLJHQWPHQWUHQRVHQ¶DFRUGL ODPRGLILFDFLyRGHURJDFLy

35(863Ò%/,&63(/66(59(,6'¶$7(1&,Ï'20,&,/,¬5,$

$UWLFOHU'LVSRVLFLRQVJHQHUDOV

'DFRUG DPE DOOz TXH GLVSRVD O¶DUWLFOH P GH OD &DUWD 0XQLFLSDO GH %DUFHORQD ODUWLFOH GH OD /OHL GH GDEULO UHJXODGRUD GH OHV EDVHV GH UqJLP ORFDO L ODUWLFOH GHO 7H[W UHIyV GH OD /OHL UHJXODGRUDGHOHVKLVHQGHVORFDOVDSURYDWSHO5HLDO'HFUHW/HJLVODWLXGHGHPDUFLGHFRQIRUPLWDW DPE HOV DUWLFOHV D GHO PDWHL[ WH[W UHIyV HV IL[HQ HOV SUHXV S~EOLFV SHU OD SUHVWDFLy GH VHUYHLV G¶DWHQFLyGRPLFLOLjULDGHO¶$MXQWDPHQWGH%DUFHORQD

$UWLFOHQ2EMHFWHGHOVHUYHL

/¶REMHFWHG¶DTXHVWVHUYHLpVODSUHVWDFLyGHO6HUYHLG¶$WHQFLy3HUVRQDOL1HWHMDGHOD/ODUDOHVSHUVRQHV GHULYDGHVGHVGHOV6HUYHLV6RFLDOV%jVLFVGHO¶$MXQWDPHQWGH%DUFHORQD(VWUDFWDG¶XQFRQMXQWG¶DFWLYLWDWV TXHHVUHDOLW]HQEjVLFDPHQWDODOODUGHODSHUVRQDLRIDPtOLDGLULJLGHVDSURSRUFLRQDUDWHQFLySHUVRQDOL FRPSOHPHQWjULDPHQW HQ GHWHUPLQDWV FDVRV VXSRUW HQ OD QHWHMD L PDQWHQLPHQW GH OD OODU D SHUVRQHV LR IDPtOLHVUHVLGHQWVD%DUFHORQDLYDORUDGHVGHVGHOV6HUYHLV6RFLDOV%jVLFVGHO¶$MXQWDPHQWGH%DUFHORQDL GHVG¶DOWUHVVHUYHLVTXHDTXHVWGHWHUPLQLDPEGLILFXOWDWVSHUGHVHQYROXSDUOHVDFWLYLWDWVGHODYLGDGLjULD GLILFXOWDWVG¶LQWHJUDFLyVRFLDORDPEPDQFDG¶DXWRQRPLDSHUVRQDO

/¶REMHFWLXEjVLFGHOVHUYHLpVPLOORUDUODTXDOLWDWGHYLGDGHOHVSHUVRQHVDXJPHQWDQWOHVSRVVLELOLWDWVGH SHUPDQqQFLDGHODSHUVRQDXVXjULDHQHOVHXGRPLFLOLLLQFUHPHQWDQWRPDQWHQLQWO¶DXWRQRPLDGHODSHUVRQD DWHVDLGHODVHYDIDPtOLDRXQLWDWGHFRQYLYqQFLD

(OVREMHFWLXVHVSHFtILFVGHOVHUYHLVyQ

 3RVVLELOLWDU TXH OHV SHUVRQHV L IDPtOLHV SXJXLQ URPDQGUH HQ HO VHX GRPLFLOL L HQ HO VHX HQWRUQ KDELWXDOHOPj[LPGHWHPSVSRVVLEOHLDPEODPj[LPDTXDOLWDWGHYLGD

 'RQDUVXSRUWDDTXHOOHVIDPtOLHVTXHWHQHQDOVHXFjUUHFSHUVRQHVHQVLWXDFLyGHGHSHQGqQFLD R GHULVFVRFLDO

 &RPSHQVDUODSqUGXDG¶DXWRQRPLDLSUHYHQLUHOVHXGHWHULRUDPHQWGRQDQWVXSRUWSHUUHDOLW]DUOHV DFWLYLWDWVGHODYLGDGLjULDLPDQWHQLUO¶HQWRUQGRPqVWLFHQFRQGLFLRQVDGHTXDGHVG¶KDELWDELOLWDW  3RWHQFLDU O¶DXWRQRPLD SHUVRQDO L IDPLOLDU SHU D OD LQWHJUDFLy HQ O¶HQWRUQ KDELWXDO HVWLPXODQW

O¶DGTXLVLFLyGHFRPSHWqQFLHVSHUVRQDOVLIDPLOLDUV

 6HUHOHPHQWGHGHWHFFLyGHVLWXDFLRQVGHQHFHVVLWDWTXHSXJXLQUHTXHULUDOWUHVLQWHUYHQFLRQV (OVHUYHLV¶DGUHoDDSHUVRQHVRIDPtOLHVTXHHVWURELQHQDOJXQDG¶DTXHVWHVVLWXDFLRQV

D 3HUVRQHVHQVLWXDFLyGHGHSHQGqQFLDSHUODUHDOLW]DFLyGHOHVDFWLYLWDWVEjVLTXHVGHODYLGDGLjULD LRDPEGHWHULRUDPHQWFRJQLWLXTXH

 9LXHQVROHVLQRWHQHQVXSRUWVRFLRIDPLOLDUSHUPDQHQWSHUDWHQGUHOHVVHYHVQHFHVVLWDWV EjVLTXHV

 9LXHQ DPE DOWUHV SHUVRQHV TXH QR SRGHQ DWHQGUH OD WRWDOLWDW GH OHV VHYHV QHFHVVLWDWV EjVLTXHVRHOVKLFDOXQVXSRUW

E 3HUVRQHVLIDPtOLHVHQVLWXDFLyGHULVFVRFLDOSHU

 0DQFDGHFDSDFLWDWRKjELWVSHUO¶DXWRFXUDLHQODUHODFLyDPEO¶HQWRUQ

(9)

Data 9-3-2020

CVE 2020007492

Pàg. 9-58

A

$WHQFLySHUVRQDOGRPLFLOLjULD

/¶DWHQFLySHUVRQDOpVHOVHUYHLTXHHVGLULJHL[IRQDPHQWDOPHQWDODFXUDGHODSHUVRQDRSHUVRQHVDWHVHVL HOVXSRUWDO¶HQWRUQFXLGDGRU

7DVTXHVDUHDOLW]DU

/HVWDVTXHVDUHDOLW]DUHVGHWHUPLQDUDQHQFDGDFDV$TXHVWHVWDVTXHVHVGXUDQDWHUPHVHJRQVHOSHUILOL OHV QHFHVVLWDWV GH OD SHUVRQD EHQHILFLjULD DL[t FRP GHOV REMHFWLXV PDUFDWV HQ FDGD FDV SHO FROāOHFWLX SURIHVVLRQDOGHVHUYHLVVRFLDOVEjVLFVHQHOSODGHWUHEDOO

/HV WDVTXHV D UHDOLW]DU SRGHQ VHU GH WLSXV DVVLVWHQFLDO HGXFDWLYHV L VRFLDOLW]DGRUHV $PE FDUjFWHU DFFHVVRULLFRPSOHPHQWDULHVUHDOLW]DUDQWDVTXHVGHWLSXVSUHYHQWLX

7DVTXHVDVVLVWHQFLDOV

 6XSRUWHQODKLJLHQHLFXUDSHUVRQDO$L[zLQFORXUHQWDWFRUSRUDOFRPSOHWHQEDQ\RGXW[DUHQWDW GHSDUWVFRUSRUDOVUHQWDWGHFDSDMXGDDOEDQ\RGXW[DDL[tFRPDOWUHVWDVTXHVUHODFLRQDGHVDPE ODKLJLHQHSHUVRQDODMXGDDYHVWLUVHDIDLWDWDSOLFDFLyGHFUHPHVLDOWUHVWDVTXHVUHODFLRQDGHV DPEODFXUDSHUVRQDO

 &XUD L FRQWURO GH O¶DOLPHQWDFLy O¶RUJDQLW]DFLy GHOV jSDWV OD SUHSDUDFLy L HO FXLQDW GHOV DOLPHQWV O¶DMXWDODLQJHVWLyG¶DOLPHQWVHQHOFDVRVTXHVLJXLQQHFHVVDUL

 6XSRUWSHUDODUHDOLW]DFLyGHSHWLWHVFRPSUHV

 &XUD GH OD VDOXW LFRQWUROGH OD PHGLFDFLy DGPLQLVWUDFLy GH OD PHGLFDFLy L UHDOLW]DFLy GHSHWLWHV FXUHVG¶DFRUGDPEOHVSUHVFULSFLRQVPqGLTXHVLVHPSUHTXHQRH[LVWHL[LFDSULVFSHUO¶HYROXFLyGH ODPDODOWLDH[FHSWHHQDTXHOOVFDVRVHQTXqVLJXLH[LJLEOHXQWtWROVDQLWDUL

 0RELOLW]DFLy GLQWUH GH OD OODU DMXGDU D DL[HFDUVH L ILFDUVH DO OOLW FDPLQDU L DVVHXUH¶V DL[t FRP UHDOLW]DUPRELOLW]DFLRQVLFDQYLVSRVWXUDOVHQVLWXDFLRQVGHGHSHQGqQFLDGHODSHUVRQDEHQHILFLjULD SHUFROāODERUDUHQODVHYDPRELOLW]DFLyLDOWUHVDMXGHVItVLFRPRWULXV

 8WLOLW]DFLyG¶DSDUHOOVWqFQLFVLGHPRELOLW]DFLyJUXHVFDGLUHVGHURGHVFDGLUHVGHEDQ\HWFVLOD SHUVRQDOHVUHTXHUHL[

 2UGUHLPDQWHQLPHQWGHODQHWHMDTXRWLGLDQDGHO¶KDELWDWJHHQFRQGLFLRQVDFFHSWDEOHVG¶KLJLHQHL VDOXEULWDW5HQWDWSODQ[DWLUHSjVGHODUREDGLQWUHGHODOODU

 $FWLYLWDWVUHODFLRQDGHVDPEODFRPXQLFDFLyLODUHODFLyDPEO¶H[WHULRUDFRPSDQ\DPHQWVWDQWHQHO GRPLFLOL FRP IRUD SHU HYLWDU VLWXDFLRQV GH VROHGDW L DwOODPHQW R IDFLOLWDFLy GH SHWLWHV JHVWLRQV DFRPSDQ\DPHQWVPqGLFVLVXSRUWHQOHV UHODFLRQVDPEODIDPtOLDOHVDPLVWDWVLHOYHwQDW  6XSRUWDOSHUVRQDOFXLGDGRUHQOHVVHYHVWDVTXHV

 4XDQDOJXQDGHOHVWDVTXHVDQWHULRUPHQWHVPHQWDGHV±KLJLHQHSHUVRQDODMXGDUDDL[HFDUVHGHO OOLWDMXGDUHQHOVjSDWVHWF KRUHTXHUHL[LV¶HQWpQTXHV¶LQFORXHQWDVTXHVFRPSOHPHQWjULHVFRP SHUH[HPSOHGHL[DUHQFRQGLFLRQVFRUUHFWHVGHQHWHMDLRUGUHHOEDQ\ODFXLQDRIHUHOOOLW$TXHVWD WDVFD HV UHDOLW]DUj DPE LQGHSHQGqQFLD TXH H[LVWHL[L HO VHUYHL G¶DX[LOLDU GH OD OODU HQ HO PDWHL[ GRPLFLOL

7DVTXHVHGXFDWLYHVLVRFLDOLW]DGRUHV

 7DVTXHV HGXFDWLYHV UHIHULGHV D SURFHVVRV G¶DGTXLVLFLy LR UHFXSHUDFLy G¶KjELWV GH OD YLGD TXRWLGLDQDLGHUHODFLyHQWUHHOVPHPEUHVGHODIDPtOLDKLJLHQHDOLPHQWDFLyVDOXWRUJDQLW]DFLyGH OD OODU RUJDQLW]DFLy GH O¶HFRQRPLD IDPLOLDU DFRPSDQ\DPHQW HVFRODU GHXUHV UHXQLRQV SXQWXDOLWDWVXSRUWDFRPSDQ\DPHQWLRUJDQLW]DFLyGHOWHPSVGHOOHXUH

 $VVHVVRUDPHQWLHQVLQLVWUDPHQWHQO¶DSUHQHQWDWJHG¶KjELWVUHODFLRQDWVDPEO¶DWHQFLyDODLQIjQFLD SHUVRQHVPDMRUVRSHUVRQHVDPEVLWXDFLyGHGHSHQGqQFLDODFXUDSHUVRQDOLODFXUDGHODOODUL O¶RUJDQLW]DFLyGRPqVWLFD

 'RQDUFRQVHOOVLSDXWHVSHUDXQDQXWULFLyFRUUHFWDSHUH[HPSOHGLDEHWLVLKjELWVVDOXGDEOHV  )DFLOLWDUSDXWHVG¶DXWRREVHUYDFLyGHOSURSLHVWDWGHVDOXWL DWHQFLyDOVFRQWUROPqGLFVSHULzGLFV  $VVHVVRUDPHQWWqFQLFSHOVFDQYLVSRVWXUDOVHQHOOOLWLQFORHQWKLHOFRQVHOOHQLQVWUXPHQWVLDMXGHV

(10)

Data 9-3-2020

CVE 2020007492

Pàg. 10-58

A

 (QVLQLVWUDPHQWV HQ O¶~V G¶HOHFWURGRPqVWLFV L GLVSRVLWLXV WHFQROzJLFV FRP SRGHQ VHU PLFURRQHV

YLWURFHUjPLFDWHOHDVVLVWqQFLDHVWULVLSURGXFWHVDSURSLDWVSHUDODQHWHMD

 0RWLYDFLyGHODSHUVRQDPLWMDQoDQWODSDUWLFLSDFLyHQGLYHUVHVDFWLYLWDWVFHQWUHVGHGLDFDVDOV HVWLPXODFLyGHOHVFDSDFLWDWVGHODSHUVRQDSHUDDOHQWLUODVHYDGHSHQGqQFLDLSRWHQFLDUODVHYD DXWRQRPLDSHUVRQDO

 7DVTXHVHGXFDWLYHVDPEHOFXLGDGRUIDPLOLDUSHUDMXGDUORDPLOORUDUODVHYDFDSDFLWDWGHFXUD  $SUHQHQWDWJHGHJHVWLRQVDGPLQLVWUDWLYHVPqGLTXHV

 7DVTXHVVRFLDOLW]DGRUHVIDFLOLWDUODSDUWLFLSDFLyHQDFWLYLWDWVGHSURPRFLyVRFLDODFWLYLWDWVGHEDUUL OXGRWHTXHVFHQWUHVGHGLDLGHUHODFLyDPEOD[DU[DYHwQDOLFRPXQLWjULD

7RWV HOV VHUYHLV G¶DWHQFLy SHUVRQDO KDQ G¶LQFORXUH DPE FDUjFWHU FRPSOHPHQWDUL WDVTXHV SUHYHQWLYHV G¶REVHUYDFLyGHODVLWXDFLyLVHJXLPHQWGHO¶HVWDWGHODSHUVRQDXVXjULDLGHOVHXHQWRUQHQODPHVXUDTXH ODVHYDSUHVqQFLDDOGRPLFLOLKRSHUPHWL$TXHVWHVWDVTXHVSUHYHQWLYHVLQFORXUDQ

 O¶REVHUYDFLyODGHWHFFLyGHVLWXDFLRQVGHULVF

 ODGHWHFFLyGHFDQYLVLQHFHVVLWDWVHQODVLWXDFLyGHOHVSHUVRQHVXVXjULHVLGHOVHXHQWRUQ 1HWHMDGHODOODU

/DQHWHMDGHODOODUpVHOVHUYHLGHVXSRUWGHVWLQDWDPDQWHQLUHQFRQGLFLRQVG¶RUGUHLG¶KLJLHQHODOODUGHOD SHUVRQD EHQHILFLjULD L OHV VHYHV SHUWLQHQFHV G¶~V TXRWLGLj LQFORHQW OD QHWHMD RUGLQjULD GH PDQWHQLPHQW JHQHUDO GH O¶KDELWDWJH 1RPpV HV SUHVFULXUj DTXHVW VHUYHL FRP D FRPSOHPHQWDUL G¶XQ VHUYHL G¶DWHQFLy SHUVRQDO

7DVTXHVDUHDOLW]DU

1HWHMDRDMXWDODQHWHMDTXRWLGLDQDGHO¶KDELWDWJHLDOVHXPDQWHQLPHQWHQFRQGLFLRQVDFFHSWDEOHVG¶KLJLHQH LVDOXEULWDW

/DSHUVRQDEHQHILFLjULDGHOVHUYHLKDXUjGHGLVSRVDUHQHOVHXGRPLFLOLGHOVHVWULVLSURGXFWHVQHFHVVDULV SHU D OD UHDOLW]DFLy GHOV WUHEDOOV GH QHWHMD (Q TXDOVHYRO FDV HOV HVWULV L SURGXFWHV QHFHVVDULV DQLUDQ D FjUUHFGHODSHUVRQDEHQHILFLjULD

$UWLFOHU2EOLJDFLyGHSDJDPHQW

(VWDUDQREOLJDWVDOSDJDPHQWOHVSHUVRQHVItVLTXHVTXHVROāOLFLWLQHOVVHUYHLVDQWHULRUV 6¶H[FHSWXHQG¶DTXHVWDREOLJDFLy

 /HV SHUVRQHVXVXjULHV TXH FRQVWLQ FRP DH[HPSWV GHO SUHX S~EOLF HQ OD SUHVFULSFLy GHO VHUYHL SHUTXqHVWUDFWLGHVHUYHLVVRFLRHGXFDWLXVTXHUHVSRQJXLQDVLWXDFLRQVGHULVFJUHXRSHUTXqOD SUHVFULSFLyV¶KDJLIHWDPEFDUjFWHUQRSOHQDPHQWYROXQWDUL

 /HV SHUVRQHV XVXjULHV TXH WLQJXLQ XQD FDSDFLWDW HFRQzPLFD GLVSRQLEOH PHQVXDO LQIHULRU D O¶LQGLFDGRUGHUHQGDGHVXILFLqQFLDGH&DWDOXQ\D

(QFDVRVXUJHQWVHQTXqQRHVSXJXLHVSHUDUHOSHUtRGHGHWUDPLWDFLyQRUPDOHOVHUYHLHVSRGUjLQLFLDU VHQVHGHWHUPLQDUSUqYLDPHQWODTXDQWLDGHOSUHX

$UWLFOHW4XDQWLD

/DTXRWDtQWHJUDUHVXOWDGHOVLPSRUWVVHJHQWVSHUKRUDGHVHUYHL 6HUYHLG¶DWHQFLySHUVRQDO

6HUYHLGHQHWHMDGHODOODU

¼KRUD ¼KRUD

/D TXRWD OtTXLGD HV GHWHUPLQDUj WHQLQW HQ FRPSWH OD FDSDFLWDW HFRQzPLFD GLVSRQLEOH HQ FzPSXW PHQVXDOG¶DFRUGDPEODVHJHQWIyUPXOD

4XRWDOtTXLGD

FDSDFLWDWHFRQzPLFDGLVSRQLEOH

(11)

Data 9-3-2020

CVE 2020007492

Pàg. 11-58

A

$OVHIHFWHVGHGHWHUPLQDUODTXRWDOLTXLGDV¶KDXUjG¶HVWDUDOHVGHILQLFLRQVVHJHQWV

D &DSDFLWDW HFRQzPLFD GLVSRQLEOH eV OD GLIHUqQFLD HQWUH HOV LQJUHVVRV L OD VXPD GH OHV GHVSHVHV L OHV UHGXFFLRQVDSOLFDEOHV

E,QJUHVVRVFRPSXWDEOHV6yQHOVTXHV¶HVWDEOHL[HQDO¶DUWLFOHWLqGHO¶RUGUHGHOD*HQHUDOLWDW GH&DWDOXQ\D(QFDVTXHKDJLFzQMXJHHOVEHQHILFLDULVSRGUDQRSWDUSHUVXPDUHOVLQJUHVVRVG¶DPEGyV FzQMXJHVLGLYLGLUORVSHUGRVRSHUFRQVLGHUDUHOVLQJUHVVRVLQGLYLGXDOV6LHOVFzQMXJHVIDQGHFODUDFLyGHOD UHQGDFRQMXQWDHVFRQVLGHUDUDQHOVLQJUHVVRVGHWRWVGRVFzQMXJHVGLYLGLWVSHUGRV

F'HVSHVHVFRPSXWDEOHV6yQGHVSHVHVFRPSXWDEOHVOHVFRUUHVSRQHQWVD

/¶KDELWDWJH HQWHVHV FRP O¶LPSRUW GH OD KLSRWHFD R OORJXHU D FjUUHF GH OD SHUVRQD XVXjULD LR FzQMXJHDPEXQPj[LPGHOGHO¶,56&LQFORHQWKLHOIDFWRUFRUUHFWRUGH%DUFHORQD

/HVFRUUHVSRQHQWVDOVVHUYHLVG¶DWHQFLyDFDXVDGHODGHSHQGqQFLD&HQWUHGHGLD

G 5HGXFFLRQV (V FRQVLGHUHQ UHGXFFLRQV UHODWLYHV DOV ILOOV L ILOOHV PHQRUV GH DQ\V HQ OD GDWD GH OD SUHVHQWDFLyGHODVROāOLFLWXGTXHFRQYLVTXLQHQHOGRPLFLOLLDPEUHQGHVLQIHULRUVDO¶,56&DPEHOFRHILFLHQW FRUUHFWRU %DUFHORQD L OHV ILOOHV L ILOOV GLVFDSDFLWDWV DPE XQ JUDX GH GLVFDSDFLWDW PtQLP GHO TXH FRQYLVTXLQ DO GRPLFLOL DPE FRHILFLHQWV GH L UHVSHFWLYDPHQW 6¶LQFORXUj WDPEp XQD UHGXFFLy HTXLYDOHQW D OD G¶XQ ILOO GLVFDSDFLWDW DPE XQ JUDX PtQLP GHO TXDQ O¶XVXDUL SUHVHQWL DTXHVW JUDX GH GLVFDSDFLWDW

H 5HFXUVRV ILQDOV PtQLPV HOV TXH GLVSRVD OD SHUVRQD XVXjULD HV FRQVLGHUDUj O¶,QGLFDGRU GH 5HQGD GH 6XILFLqQFLDGH&DWDOXQ\D,56&PHQVXDOTXHV¶HVWDEOHL[FDGDDQ\LVREUHDTXHVWDTXDQWLWDWV¶DSOLFDUjXQ FRHILFLHQWFRUUHFWRUSHUYLXUHD%DUFHORQDTXHV¶DFWXDOLW]DUjDQXDOPHQW

6REUHO¶LPSRUWGHODTXRWDOtTXLGDUHVXOWDQWV¶HVWDEOHL[HQOHVVHJHQWVOLPLWDFLRQV D/¶LPSRUWPj[LPQRVXSHUDUjHOGHOFRVWGHOVHUYHL

E6LODFDSDFLWDWHFRQzPLFDGLVSRQLEOHpVLQIHULRUDOVUHFXUVRVILQDOVPtQLPVODTXRWDOtTXLGDVHUj]HUR F1RHVOLTXLGDUjHOSUHXS~EOLFVLODTXRWDOtTXLGDUHVXOWDQWpVLQIHULRUD¼

G6LODFDSDFLWDWHFRQzPLFDGHODSHUVRQDXVXjULDXQFRSPLQRUDGDDPEODTXRWDOtTXLGDUHVXOWpVLQIHULRU DOVUHFXUVRVILQDOVPtQLPV~QLFDPHQWHVOLTXLGDUjODGLIHUqQFLDHQWUHODFDSDFLWDWHFRQzPLFDGLVSRQLEOHL HOVUHFXUVRVILQDOVPtQLPV

$UWLFOHq0HULWDFLyGHO¶REOLJDFLyGHSDJDPHQW

(OSUHXS~EOLFHVPHULWDHQHOPRPHQWHQTXqHVSUHVWDHOVHUYHLG¶DWHQFLyGRPLFLOLjULD

$UWLFOHq1RUPHVGHJHVWLyOLTXLGDFLRQVLWUDPLWDFLy

6HJRQV OHV QRUPHV GH FjOFXO GHO SUHX S~EOLF HVWDEOHUWHV D O¶DUWLFOH W L q G¶DTXHVWD RUGHQDQoD O¶$GPLQLVWUDFLyPXQLFLSDOQRWLILFDUjXQDOLTXLGDFLyPHQVXDODODSHUVRQDXVXjULDGHOVHUYHLDPEO¶LPSRUWGHO SUHXS~EOLFTXHKDXUjG¶DERQDUSHOVPLWMDQVGHSDJDPHQWKDELOLWDWV

/HVSHUVRQHVXVXjULHVKDXUDQGHSRVDUHQFRQHL[HPHQWGHO¶$GPLQLVWUDFLyPXQLFLSDOTXDOVHYROFDQYLHQOD VHYDVLWXDFLyHFRQzPLFDRSHUVRQDOTXHSXJXLDIHFWDUDOFjOFXOGHODTXRWDGHOSUHXS~EOLF/DFRPXQLFDFLy V¶KDG¶HIHFWXDUHQHOWHUPLQLPj[LPG¶XQPHVGHVGHODGDWDHQTXqV¶KDJLSURGXwWDTXHVWDDOWHUDFLy /DFRPXQLFDFLyGHTXDOVHYROFDQYLHQODVLWXDFLyHFRQzPLFDRSHUVRQDOGHODSHUVRQDXVXjULDTXHSXJXL UHSHUFXWLUVREUHODVHYDDSRUWDFLyDOSDJDPHQWGHOSUHXS~EOLFVRUWLUjHIHFWHVDSDUWLUGHODPDWHL[DGDWDGH FRPXQLFDFLyGHOFDQYLDH[FHSFLyG¶DTXHOOTXHFRPSRUWLXQDXJPHQWGHOSUHXS~EOLFHOTXDOO¶$GPLQLVWUDFLy SRGUjH[LJLUDODSHUVRQDXVXjULDWHQLQWHQFRQVLGHUDFLyODGDWDG¶HVGHYHQLPHQWGHOPDWHL[

(12)

Data 9-3-2020

CVE 2020007492

Pàg. 12-58

A

SUHVHQWDGD GLQV HO WHUPLQL Pj[LP G¶XQ PHV GHV GH OD GDWD GH QRWLILFDFLy D OD SHUVRQD XVXjULD GH OD

UHVROXFLyDGPLQLVWUDWLYDHVPHQWDGD

/¶LQFRPSOLPHQWGHOGHXUHGHFRPXQLFDFLyGLQVGHWHUPLQLSHUSDUWGHODSHUVRQDXVXjULDGHOVFDQYLVHQOD VHYDVLWXDFLyHFRQzPLFDRSHUVRQDOFRPSRUWDUjTXHQRHVUHFWLILTXLQOHVOLTXLGDFLRQVPHQVXDOVPHULWDGHVL QRWLILFDGHVHQWRWDOOzTXHDTXHVWFDQYLHOSXJXLEHQHILFLDU

$UWLFOHq'DWDGHYLJqQFLD

$TXHVWD UHJXODFLy FRPHQoDUj D UHJLU O¶ GH JHQHU GH L FRQWLQXDUj YLJHQW PHQWUH QR VH Q¶DFRUGL OD PRGLILFDFLyRGHURJDFLy

35(863Ò%/,&63(/6(59(,'¶¬3$76(1&203$1<,$3(5$/$*(17*5$1

$UWU'LVSRVLFLRQVJHQHUDOV

'DFRUGDPEDOOzTXHGLVSRVDO¶DUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDODUWLFOHGHOD/OHL GHGDEULOUHJXODGRUDGHOHVEDVHVGHUqJLPORFDOLODUWLFOHGHOWH[WUHIyVGHOD/OHLG¶+LVHQGHV/RFDOV DSURYDWSHO5HLDO'HFUHW/HJLVODWLXGHGHPDUoLGHFRQIRUPLWDWDPEHOVDUWLFOHVDGHOPDWHL[ WH[WUHIyVHVIL[HQHOVSUHXVSHUODSUHVWDFLyGHVHUYHLVG¶jSDWVHQFRPSDQ\LDSHUDODJHQWJUDQ

$UWQ2EMHFWH

(V UHJXOD OD FRQWUDSUHVWDFLy SHFXQLjULD SHU D OD XWLOLW]DFLy GHOV VHUYHLV G¶jSDWV HQ FRPSDQ\LD SHU D OD JHQW JUDQ eVXQVHUYHLGLUQG¶DVVLVWqQFLDDOHVDFWLYLWDWVGHODYLGDGLjULDGHOHVSHUVRQHVJUDQVHQVLWXDFLyGH IUDJLOLWDW(OVGHVWLQDWDULVVyQSHUVRQHVPDMRUVGHDQ\VTXHUHTXHUHL[HQVXSRUWSHUFREULUOHVQHFHVVLWDWV G¶XQDDOLPHQWDFLyDGHTXDGDGLHWqWLFDRFRQGLFLRQDOPHQWLG¶XQHVSDLUHODFLRQDODFROOLGRUIDFLOLWDGRUGHYLQFOHV G¶DPLVWDWLGHFRQQH[LyDPEODFRPXQLWDW

3HUVRQHVJUDQVVROHVHQULVFG¶DwOODPHQWVRFLDO

3HUVRQHVJUDQVTXHYLXHQHQKDELWDWJHVVHQVHFRQGLFLRQVSHUFXLQDU

3HUVRQHV TXH WRW L YLXUH HQ KDELWDWJHV HQ ERQHV FRQGLFLRQV UHTXHUHL[HQ XQ VHJXLPHQW GHOV KjELWV G¶DOLPHQWDFLyUHODFLRQDOVG¶KLJLHQHRGHVDOXWIRUDGHOVHXGRPLFLOL

$UWU2EOLJDFLyGHSDJDPHQW

(VWDQREOLJDWVDOSDJDPHQWGHOHVFRUUHVSRQHQWVWDULIHVOHVSHUVRQHVTXHXWLOLW]LQHOVVHUYHLVTXHVyQREMHFWH G¶DTXHVWDUHJXODFLy

$UWW4XDQWLD

3UHXjSDWSHUDOHVSHUVRQHVXVXjULHVDPE31&RVLPLODUV ¼ 3UHXjSDWSHUDOHVSHUVRQHVXVXjULHVDPE7DUJHWD5RVD*UDWXwWD ¼ 3UHXjSDWSHUDOHVSHUVRQHVXVXjULHVDPE7DUJHWD5RVD5HGXwGD ¼

3UHXjSDWSHUDOHVSHUVRQHVXVXjULHVVHQVH7DUJHWD5RVD ¼

4XDQ H[FHSFLRQDOPHQW KL KDJL SHUVRQHV TXH SHU PDQFD GH FDSDFLWDW HFRQzPLFD WHPSRUDO L WUDQVLWzULD QR SXJXLQ DVVXPLU HO FRSDJDPHQW FRUUHVSRQHQW HO SHUVRQDO SURIHVVLRQDO UHIHUHQW GHOV VHUYHLV VRFLDOV EjVLFV FRUUHVSRQHQWKDXUjG¶DFRPSDQ\DUODVROOLFLWXGGHOVHUYHLG¶XQLQIRUPHVRFLDOHQHOTXHHVSHFLILTXLHOVPRWLXV GHO¶H[HPSFLySUHX]HURDL[tFRPODGXUDGDDSUR[LPDGDGHODPDWHL[D

/¶REOLJDFLyGHSDJDPHQWFRPHQoDHQHOPRPHQWHQTXqHVSUHVWHQHOVVHUYHLVTXHV¶KLUHJXOHQ

(13)

Data 9-3-2020

CVE 2020007492

Pàg. 13-58

A

$UWq'DWDGHYLJqQFLD

/D SUHVHQW UHJXODFLy FRPHQoDUj D UHJLU O¶ GH JHQHU GH L FRQWLQXDUj YLJHQW PHQWUH QR V¶DFRUGL OD PRGLILFDFLyRGHURJDFLy

35(863Ò%/,&6'(/$*5$1-$(6&2/$&$1*,521$

'DFRUGDPEHOTXHGLVSRVDODUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDLODUWLFOHGHOWH[WUHIyVGH OD /OHL UHJXODGRUD GH OHV KLVHQGHV ORFDOVDSURYDW SHO 5HLDO 'HFUHW /HJLVODWLX GH GHPDUo LGH FRQIRUPLWDWDPEHOVDUWLFOHVDGHOPDWHL[WH[WUHIyVHVIL[HQHOVSUHXVTXHUHJLUDQSHUODFHVVLyGH WHUUHQ\VG¶DFDPSDGDGHO¶HTXLSDPHQWPXQLFLSDO*UDQMD(VFROD&DQ*LURQD

$UWQ2EMHFWH

(VUHJXODODFRQWUDSUHVWDFLySHFXQLjULDSHUDO~VGHOHVLQVWDOāODFLRQVLODSUHVWDFLyGHVHUYHLV

(VWDQREOLJDGHVDOSDJDPHQWGHOSUHXS~EOLFWRWHVOHVSHUVRQHVItVLTXHVLMXUtGLTXHVTXHXWLOLW]LQHOVVHUYHLV TXHRIHUHL[OD*UDQMD(VFROD&DQ*LURQD

$UWW4XDQWLD

$FWLYLWDWG¶DFDPSDGD ¼SHUSHUVRQDLGLD

$TXHVWLPSRUWLQFORXO¶,9$

$UWq1DL[HPHQWGHOREOLJDFLyGHSDJDPHQW

/REOLJDFLyGHSDJDPHQWQHL[HQHOPRPHQWHQTXqV¶XWLOLW]DHOVHUYHL $UWq5HJXODFLyDSOLFDEOH

(OVSUHXVS~EOLFVGHOD*UDQMD(VFROD&DQ*LURQDHVUHJLUDQHQWRWHOTXHQRHVWjUHJXODWSHUODUHJXODFLy JHQHUDOGHOVSUHXVS~EOLFVPXQLFLSDOV

$UWq'DWDGHYLJqQFLD

35(86 3Ò%/,&6 3(5 6(59(,6 '(/6 &(175(6 2%(576 081,&,3$/6 3(5 $ ,1)$176 $'2/(6&(176,)$0Ë/,(6

'DFRUGDPEHOTXHGLVSRVDODUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDLODUWLFOHGHOWH[WUHIyVGHOD /OHL UHJXODGRUD GH OHV KLVHQGHV ORFDOV DSURYDW SHO 5HLDO 'HFUHW /HJLVODWLX GH GH PDUo L GH FRQIRUPLWDWDPEHOVDUWLFOHVDGHOPDWHL[WH[WUHIyVHVIL[HQHOVSUHXVS~EOLFVSHUODSUHVWDFLyGHVHUYHLV DOV&HQWUHV2EHUWVPXQLFLSDOVSHUDLQIDQWVDGROHVFHQWVLIDPtOLHV

$UWQ2EMHFWH

(VUHJXODODFRQWUDSUHVWDFLyHFRQzPLFDSHUODSUHVWDFLyGHOVHUYHLDOVGH&HQWUH2EHUWLG¶(VSDL)DPLOLDU $UWU2EOLJDFLyGHSDJDPHQW

(14)

Data 9-3-2020

CVE 2020007492

Pàg. 14-58

A

(OV XVXDULVHV GHULYDWVGHV SHOV 6HUYHLV 6RFLDOV TXH SHU O¶LQIRUPH UHODWLX D OD VHYD VLWXDFLy HFRQzPLFD HV

FRQVLGHULTXHQRSRGHQSDJDUHOSUHXS~EOLFJDXGLUDQG¶XQDUHGXFFLyGHOHQHOSUHX $UWW4XDQWLD

/HVWDULIHVDSOLFDEOHVVyQOHVVHJHQWV (VSDLIDPLOLDULWDOOHUV

(VSDLIDPLOLDUSHUWULPHVWUH ¼

7DOOHUVSHUWDOOHU ¼

/HVSHUVRQHVXVXjULHVGHULYDGHVSHOV6HUYHLV6RFLDOVTXHSHUO¶LQIRUPHUHODWLXDODVHYDVLWXDFLyHFRQzPLFD HVFRQVLGHULTXHQRSRGHQSDJDUHOSUHXS~EOLFJDXGLUDQG¶XQDUHGXFFLyGHOHQ HOSUHX

&HQWUHREHUWFDVDOGHYDFDQFHVG¶HVWLXLFDVDOGHYDFDQFHVGH1DGDOLR6HWPDQD6DQWD &XUV&HQWUH2EHUW

3HUFXUV ¼

3HUPHV ¼

&DVDOGHYDFDQFHV

(VWLXVHWPDQHV ¼

6HWPDQD6DQWDR1DGDO ¼

/HVSHUVRQHVXVXjULHVGHULYDGHVSHOV6HUYHLV6RFLDOVTXHSHUO¶LQIRUPHUHODWLXDODVHYDVLWXDFLyHFRQzPLFD HVFRQVLGHULTXHQRSRGHQSDJDUHOSUHXS~EOLFJDXGLUDQG¶XQDUHGXFFLyGHOHQHOSUHX

/¶REOLJDFLyGHSDJDPHQWFRPHQoDHQHOPRPHQWHQTXqV¶LQLFLDODSUHVWDFLyGHOVHUYHLTXHV¶KLUHJXOD

3HOTXHIDUHIHUqQFLDDOSDJDPHQWGHOVHUYHLDPEFDUjFWHUJHQHUDODTXHVWV¶HIHFWXDUjHOGDUUHUGLDGHOPHVHQ FXUVDOGHODSUHVWDFLyGHOVHUYHL(QFDVGHTXqODILQDOLW]DFLyGHOVHUYHLHVSURGXHL[LDEDQVG¶DTXHVWDGDWDHO SDJDPHQWV¶KDXUjG¶HIHFWXDUHOGLDDEDQVGHGLWDILQDOLW]DFLy

$UWq'DWDGHYLJqQFLD

35(86 3Ò%/,&6 3(5 /$ &(66,Ï '( 6$/(6 '(/ &(175( '¶,1)250$&,Ï , $7(1&,Ï 3(5 $ -29(6

'DFRUGDPEHOTXHGLVSRVDODUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDLODUWLFOHGHOWH[WUHIyVGHOD /OHL UHJXODGRUD GH OHV KLVHQGHV ORFDOV DSURYDW SHO 5HLDO 'HFUHW /HJLVODWLX GH GH PDUo L GH FRQIRUPLWDWDPEHOVDUWLFOHVDGHOPDWHL[WH[WUHIyVHVIL[HQHOVSUHXVS~EOLFVSHUODFHVVLyGHVDOHVGHO &HQWUHG¶,QIRUPDFLyL$VVHVVRUDPHQWSHUD-RYHV

$UW Q2EMHFWH

(VUHJXODODFRQWUDSUHVWDFLySHFXQLjULDSHUODFHVVLyGHOHVVDOHVGHO&HQWUHG¶,QIRUPDFLyL$VVHVVRUDPHQWSHU D-RYHV

(15)

Data 9-3-2020

CVE 2020007492

Pàg. 15-58

A

$UWW4XDQWLD

/HVWDULIHVVyQOHVVHJHQWV

3UHXKRUD (QWLWDWVRJUXSV

MXYHQLOV &LXWDW9HOOD(QWLWDWVGH $OWUHVHQWLWDWV (PSUHVHV 6DODJUDQ

&DSDFLWDWSHUVRQHV ¼ ¼ ¼ ¼

6DOHVSHWLWHV

&DSDFLWDWSHUVRQHV ¼ ¼ ¼ ¼

$DTXHVWHVWDULIHVVH¶OVDSOLFDUjHOUqJLPG¶,9$TXHVHJRQVQRUPDWLYDYLJHQWFRUUHVSRQJXL

/¶REOLJDFLyGHSDJDPHQWFRPHQoDHQHOPRPHQWHQTXqHVSUHVWHQHOVVHUYHLVTXHV¶KLUHJXOHQ $UWq'DWDGHYLJqQFLD

35(83Ò%/,&3(5/$35(67$&,Ï'('(7(50,1$766(59(,6'(/&(175('(5(&85626 3(5$/(6$662&,$&,216-89(1,/6'(%$5&(/21$

/DSUHVHQWQRUPDWLYDGHSUHXVS~EOLFVV¶LQVFULXHQDOOzTXHGLVSRVHQO¶DUWLFOHPGHOD/OHLGH GHGHVHPEUHGH&DUWD0XQLFLSDOGH%DUFHORQDLHOVDUWVDLGHOWH[WUHIyVGHOD/OHLUHJXODGRUDGH OHVKLVHQGHVORFDOVDSURYDWSHO5HLDO'HFUHW/HJLVODWLXGHGHPDUo

$UWQ2EMHFWH

/¶REMHFWH GH OD SUHVHQW QRUPDWLYD pV UHJXODU OD FRQWUDSUHVWDFLy SHFXQLjULD SHU OD SUHVWDFLy GH VHUYHLV TXH

RIHUHL[HO&HQWUHGH5HFXUVRVSHUDOHV$VVRFLDFLRQV-XYHQLOVGH%DUFHORQD&5$-$UWU6HUYHLVGHO&HQWUHGH5HFXUVRVSHUDOHV$VVRFLDFLRQV-XYHQLOVVXEMHFWHVDSUHXS~EOLF 7RWVHOVVHUYHLVTXHRIHUHL[HO&5$-VyQJUDWXwWVDH[FHSFLyGHOVVHJHQWV

/ORJXHUGHVDOHVGHO¶(VSDL-RYH/D)RQWDQD /ORJXHUGHPDWHULDO

$UWW3HUVRQHVEHQHILFLjULHVGHOVHUYHL /ORJXHUGHVDOHV

3RGUDQIHU~VGHOVVHUYHLVWRWHVOHVHQWLWDWVMXYHQLOVJUXSVIRUPDOVRLQIRUPDOVLDTXHOOHVHQWLWDWVLHPSUHVHV TXH KR GHVLWJLQ VHPSUH TXH HOV VHXV REMHFWLXV QR FRQWUDGLJXLQ OD ILORVRILD QL HO FRQYHQL VLJQDW HQWUH O¶$MXQWDPHQW GH %DUFHORQD L HO &RQVHOO GH OD -RYHQWXW GH %DUFHORQD L TXH OHV VHYHV DFWLYLWDWV VLJXLQ FRPSDWLEOHVDPEODSURJUDPDFLyGHO¶HTXLSDPHQW

/ORJXHUGHPDWHULDO

(16)

Data 9-3-2020

CVE 2020007492

Pàg. 16-58

A

$UWq'HILQLFLy

(QWLWDWMXYHQLODVVRFLDFLRQVMXYHQLOVFROāOHFWLXVRJUXSVGHMRYHV8QDDVVRFLDFLyMXYHQLOpVDTXHOODRQHOVVHXV FRPSRQHQWV VyQ EjVLFDPHQW MRYHV L RQ OD GLUHFFLy L JHVWLy HV SRUWD D WHUPH PDMRULWjULDPHQW SHOV PDWHL[RV MRYHV

$VVRFLDFLRQV MXYHQLOV DVVRFLDFLRQV G¶DOXPQHV JUXSV GH IHW FROāOHFWLXV GH MRYHV SODWDIRUPHV MXYHQLOV GH WHUULWRULIHGHUDFLRQVMXYHQLOVFRRUGLQDGRUHVMXYHQLOVFDVDOVGHMRYHVHVSDLVMRYHV

(QWLWDWVHQVHjQLPGHOXFUHDJUXSDFLyHVWDEOHGHSHUVRQHVFRQVWLWXwGHVIRUPDGDSHUWUHVRPpVPHPEUHVTXH V¶XQHL[HQ GH PDQHUD YROXQWjULD OOLXUHL VROLGjULD SHU DFRQVHJXLUVHQVH DIDQ\ GH OXFUH XQD ILQDOLWDWFRPXQD G¶LQWHUqV JHQHUDO R SDUWLFXODU V¶RUJDQLW]D GHPRFUjWLFDPHQW SHU WDO G¶DVVROLU XQ REMHFWLX FRP~ PLWMDQoDQW OD UHDOLW]DFLyG¶DFWLYLWDWVFROāOHFWLYHV

$VVRFLDFLRQV[DU[HVGHSDUWLFLSDFLyPRYLPHQWVVRFLDOVFROāOHFWLXVG¶jPELWWHUULWRULDOGHFLXWDW

(QWLWDW OXFUDWLYD L DGPLQLVWUDFLRQV R RUJDQLW]DFLy DPE SHUVRQDOLWDW MXUtGLFD GHILQLGD D OHVFULSWXUD OD TXDO GLVSRVDGHOVPLWMDQVQHFHVVDULVSHUDODSURGXFFLyLHVGHGLFDDFRPELQDUORVSHUREWHQLUEpQVRVHUYHLV

$UWq2EOLJDFLyGHSDJDPHQW

(VWDQREOLJDGHVDOSDJDPHQWGHOHVFRUUHVSRQHQWVWDULIHVDEDQVGHO~VGHOVHUYHLOHVSHUVRQHVXVXjULHVGHO VHUYHLREMHFWHTXHYXOJXLQIHU~VGHOVVHUYHLVGHSDJDPHQWTXHGLVSRVDHO&5$-VHJRQVDTXHVWDUHJXODFLy

$UWq4XDQWLD D /ORJXHUGHVDOHV

7LSXVGHSUHVWDFLy/ORJXHUG¶HVSDLV

6¶HVWDEOHL[ OD PDWHL[D TXDQWLD TXH V¶DSOLFD HQ HOV SUHXV S~EOLFV GH O¶(VSDL -RYH /D )RQWDQD DSURYDWV DQXDOPHQWSHOGLVWULFWHGH*UjFLD

$L[tPDWHL[HOVFULWHULVLQRUPDWLYHVGXVRVHVUHJLUDQSHUODQRUPDWLYDGHOHTXLSDPHQWLHOVDFRUGVSUHVRVHQ OD&RPLVVLy7qFQLFDL&RQVHOOGH &HQWUH

6¶HVWDEOHL[HQ JUXSV SRVVLEOHV G¶XVXDULV GHO VHUYHL GH OORJXHU GH VDOHV GHO &HQWUH GH 5HFXUVRV SHU D OHV $VVRFLDFLRQV-XYHQLOVGH%DUFHORQDVHJRQVOHVTXDOVHVGHWHUPLQHQOHVWDULIHVGHSUHXV

 7DULID$(QWLWDW-XYHQLO  7DULID%(QWLWDWGH*UjFLD  7DULID&(QWLWDW

 7DULID'(PSUHVD

/ORJXHUGHVDOHV 7DULID$ 7DULID% 7DULID& 7DULID'

6DOHVYLYHUVLVDOHVWDOOHU +RUD ¼ ¼ ¼ ¼

'LD ¼ ¼ ¼ ¼

6DODSROLYDOHQW +RUD ¼ ¼ ¼ ¼

'LD ¼ ¼ ¼ ¼

(17)

Data 9-3-2020

CVE 2020007492

Pàg. 17-58

A

6DODDXGLWRUL

VLFDOWqFQLFGHVRHVYRO IHU~VGHODEDUUDLR FREUDUHQWUDGDVDSOLFDUDQ

HQOHVWDULIHV

0DWt ¼ ¼ ¼ ¼

7DUGDL FDSGH

VHWPDQD ¼ ¼ ¼ ¼

7DUGD

YHVSUH ¼ ¼ ¼ ¼

E /ORJXHUGHPDWHULDO

7LSXVGHSUHVWDFLy/ORJXHUG¶LQIUDHVWUXFWXUHV

6¶HVWDEOHL[HQJUXSVSRVVLEOHVG¶XVXDULVGHOVHUYHLGHOORJXHUGHPDWHULDOVGHO&HQWUHGH5HFXUVRVSHUDOHV $VVRFLDFLRQV-XYHQLOVGH%DUFHORQDVHJRQVOHVTXDOVHVGHWHUPLQHQOHVWDULIHVGHSUHXV

 7DULID$(QWLWDW-XYHQLO

 7DULID%(QWLWDWVHQVHjQLPGHOXFUH  7DULID&$GPLQLVWUDFLyLHPSUHVHV

/ORJXHUGHPDWHULDO 7DULID$ 7DULID% 7DULID& 0DWHULDOVHVWjQGDUG

3DQWDOODSRUWjWLO ¼ ¼ ¼

3URMHFWRUGHGLDSRVLWLYHV ¼ ¼ ¼

5HWURSURMHFWRUGHWUDQVSDUqQFLHV ¼ ¼ ¼

(TXLSGHVRSRUWjWLO ¼ ¼ ¼

(TXLSGHVRPLWMj ¼ ¼ ¼

(TXLSGHVRJUDQ ¼ ¼ ¼

$OWDYHX ¼ ¼ ¼

0LFUzIRQSHWDFD ¼ ¼ ¼

)UHVQHO ¼ ¼ ¼

([SRVLWRU5HL[DW ¼ ¼ ¼

([SRVLWRU6HPLFHUFOH ¼ ¼ ¼

&DUSD ¼ ¼ ¼

0RVWUDGRU ¼ ¼ ¼

:DONLH¶V ¼ ¼ ¼

7DXOHV ¼ ¼ ¼

0jTXLQDGH[DSHV ¼ ¼ ¼

*UDYDGRUDGHYHX ¼ ¼ ¼

)RFXV ¼ ¼ ¼

(18)

Data 9-3-2020

CVE 2020007492

Pàg. 18-58

A

0jTXLQDWURTXHODGRUD ¼ ¼ ¼

0DWHULDOG~VLQWHQVLX

3DQWDOOD'% ¼ ¼ ¼

9LGHRSURMHFWRU ¼ ¼ ¼

0HJjIRQ ¼ ¼ ¼

0LFUzIRQVHQVHILO ¼ ¼ ¼

7RUUHGHOOXPV ¼ ¼ ¼

7DULPD ¼ ¼ ¼

7HODGHSDQFDUWHV ¼ ¼ ¼

0DWHULDOVIXQJLEOHV

;DSHVGHSDTXHWGH ¼ ¼ ¼

;DSHVLPDQGHSDTXHWGH ¼ ¼ ¼

$ DTXHVWHVWDULIHVVH¶OVDSOLFDUjHOUqJLPG¶,9$TXHVHJRQVQRUPDWLYDYLJHQWFRUUHVSRQJXL

/¶REOLJDFLyGHSDJDPHQWFRPHQoDHQHOPRPHQWHQTXqHVSUHVWHQHOVVHUYHLVTXHV¶KLUHJXOHQ (VSUHYHXHOSDJDPHQWDQWLFLSDWGHOSUHXS~EOLFHQHOPDWHL[OORFGHODSUHVWDFLyGHOVHUYHL

$UWq'DWDGHYLJqQFLD

/DSUHVHQWUHJXODFLyFRPHQoDUjDUHJLUDSDUWLUGHO¶GHJHQHUGHLFRQWLQXDUjYLJHQWPHQWUHQRV¶DFRUGL ODPRGLILFDFLyRGHURJDFLy

35(83Ò%/,&3(535(67$&,216'(6(59(,6'(/&(175('¶$//27-$0(17)$0,/,$51$9$6

'¶DFRUGDPEDOOzTXHGLVSRVHQO¶DUWLFOHPGHOD/OHLGHGHGHVHPEUHGH&DUWD0XQLFLSDOGH %DUFHORQDLHOVDUWVDLGHOWH[WUHIyVGHOD/OHLUHJXODGRUDGHOHVKLVHQGHVORFDOVDSURYDWSHO5HLDO 'HFUHW /HJLVODWLX GH GH PDUo HV IL[HQ HOV SUHXV S~EOLFV SHU OD SUHVWDFLy GH VHUYHLV GHO &HQWUH G¶$OORWMDPHQW)DPLOLDU1DYDV

$UWQ2EMHFWH

(VUHJXODODFRQWUDSUHVWDFLySHFXQLjULDSHUODSUHVWDFLyGHOVHUYHLGHO&HQWUHG¶$OORWMDPHQW)DPLOLDU1DYDV

(19)

Data 9-3-2020

CVE 2020007492

Pàg. 19-58

A

$UWW4XDQWLD

(OVSUHXVS~EOLFVSHOVHUYHLGHO&HQWUHG¶$OORWMDPHQW)DPLOLDU1DYDVVyQ

3UHXXQLWDWG¶DOORWMDPHQWGLD ¼

6¶HQWpQ SHU XQLWDW G¶DOORWMDPHQW O¶~V SHU SDUW G¶XQD XQLWDW IDPLOLDU GH FRQYLYqQFLD GHO VHUYHL TXH RIHUHL[ HO &HQWUHDO¶DSDUWDPHQWRDSDUWDPHQWVTXHOLFRUUHVSRQJXLVHJRQVDFRUGG¶HVWDGDDL[tFRPGHOVHVSDLVFRPXQV GHO&HQWUH

/HVSHUVRQHVXVXjULHVTXHSHUO¶LQIRUPHUHODWLXDODVHYDVLWXDFLyVRFLRHFRQzPLFDHVFRQVLGHULTXHQRSRGHQ SDJDUHOSUHXS~EOLFJDXGLUDQG¶XQDH[HPSFLyWRWDOGHOPDWHL[

$PEFDUjFWHUJHQHUDOHOSDJDPHQWGHOVHUYHLV¶HIHFWXDUjHOGDUUHUGLDGHOPHVHQFXUVDOGHODSUHVWDFLyGHO VHUYHL (Q FDV GH TXq OD ILQDOLW]DFLy GHO VHUYHL HV SURGXHL[L DEDQV G¶DTXHVWD GDWD HO SDJDPHQW V¶KDXUj G¶HIHFWXDUHOGLDDEDQVGHGLWDILQDOLW]DFLy

$UWq'DWDGHYLJqQFLD

35(83Ò%/,&3(535(67$&,216'(6(59(,6$/6$//27-$0(176,1',9,'8$/6$0%6(59(,6 &2/ā/(&7,867¬1*(5

'DFRUGDPEDOOzTXHGLVSRVHQODUWLFOHPGHOD/OHLGHGHGHVHPEUHGH&DUWD0XQLFLSDOGH %DUFHORQDLHOVDUWVDLGHOWH[WUHIyVGHOD/OHLUHJXODGRUDGHOHVKLVHQGHVORFDOVDSURYDWSHO5HLDO 'HFUHW/HJLVODWLXGHGHPDUoHVIL[HQHOVSUHXVS~EOLFVSHUODSUHVWDFLyGHVHUYHLVGHLV$OORWMDPHQWV OQGLYLGXDOVDPE6HUYHLV&ROOHFWLXV7jQJHU

$UWQ2EMHFWH

(V UHJXOD OD FRQWUDSUHVWDFLy SHFXQLjULD SHU OD SUHVWDFLy GHO VHUYHL DOV $OORWMDPHQWV OQGLYLGXDOV DPE 6HUYHLV&ROāOHFWLXV7jQJHU

(VWDQREOLJDWVDOSDJDPHQWGHOHVFRUUHVSRQHQWVWDULIHVHOVTXLXWLOLW]LQHOVHUYHLGHLV$OORWMDPHQWVOQGLYLGXDOV DPE6HUYHLV&ROāOHFWLXV7jQJHUTXHpVREMHFWHGDTXHVWDUHJXODFLy

$UWW4XDQWLD

(OV SUHXV S~EOLFV SHU D ODQ\ SHO VHUYHL GHOV $OORWMDPHQWV OQGLYLGXDOV DPE 6HUYHLV &ROāOHFWLXV 7jQJHU VHUDQ

(20)

Data 9-3-2020

CVE 2020007492

Pàg. 20-58

A

6HQWpQSHUXQLWDWGDOORWMDPHQWO~VGXQDSODoDGHOVHUYHLGDOORWMDPHQWLDFRPSDQ\DPHQWVRFLDOTXHRIHUHL[

HO&HQWUHDODSDUWDPHQWTXHOLFRUUHVSRQJXLVHJRQV$FRUGGHVWDGDDL[tFRPGHOVHVSDLVFRPXQVGHO&HQWUH G¶DFRUGDPEODQRUPDWLYDTXHUHVXOWLG¶DSOLFDFLy

/HV SHUVRQHV XVXjULHV VDWLVIDUDQ HO SDJDPHQW GHO SUHX S~EOLF TXDQWLILFDWV HQ UHODFLy DOV VHXV LQJUHVVRV GDFRUGDPEHOVVHJHQWVOtPLWV

(QWUH,56&L,56&SRQGHUDWV LQJUHVVRV (QWUH,56&L,56&SRQGHUDWV LQJUHVVRV

/HVSHUVRQHVXVXjULHVTXHSHUO¶LQIRUPHUHODWLXDODVHYDVLWXDFLyVRFLRHFRQzPLFDHVFRQVLGHULTXHQRSRGHQ SDJDUHOSUHXS~EOLFJDXGLUDQG¶XQDH[HPSFLyWRWDOGHOPDWHL[

'¶DFRUGDO'HFUHWGHO3ODSHUDOGUHWDO¶KDELWDWJHHOVLQJUHVVRVHVSRQGHUHQHQIXQFLyGHOVLQJUHVVRV IDPLOLDUVVHJRQVOD]RQDJHRJUjILFDLVHJRQV HOQRPEUHGHPHPEUHVG¶DFRUGDGRVFRHILFLHQWVHOFRHILFLHQW G¶XELFDFLy SHU %DUFHORQD ±=RQD $ L HO GH FRPSRVLFLy GH OD XQLWDW SHU PHPEUH SHU PHPEUHVSHUPHPEUHVSHURPpVPHPEUHV

'¶DFRUG DO PDWHL[ 'HFUHW HOV DOORWMDPHQWV WHPSRUDOV DPE VHUYHLV FROOHFWLXV 7$1*(5 SRGHQ TXDOLILFDUVH G¶DOORWMDPHQWV FROāOHFWLXV SURWHJLWV L HQ DTXHVW VHQWLW HO SUHX Pj[LP GH YHQGD L OORJXHU G¶KDELWDWJHVGHSURWHFFLyRILFLDOpVGH¼PSHU%DUFHORQD

$UWp1DL[HPHQWGH OREOLJDFLyGHSDJDPHQW

3HOTXHIDUHIHUqQFLDDOSDJDPHQWGHOVHUYHLDPEFDUjFWHUJHQHUDODTXHVWV¶HIHFWXDUjPLWMDQoDQWOLTXLGDFLRQV PHQVXDOV TXH V¶H[LJLUDQ HO GDUUHU GLD GHO PHV HQ FXUV DO GH OD SUHVWDFLy GHO VHUYHL (Q FDV GH TXq OD ILQDOLW]DFLy GHO VHUYHL HV SURGXHL[L DEDQV G¶DTXHVWD GDWD OHV OLTXLGDFLRQV FRPSUHQGUDQ HO Q~PHUR GH GLHV G¶XWLOLW]DFLyGHOVHUYHLLHOSDJDPHQWV¶KDXUjG¶HIHFWXDUHOGLDDEDQVGHGLWDILQDOLW]DFLy

$UWp'DWDGHYLJqQFLD

35(83Ò%/,&3(535(67$&,216'(6(59(,6$/6$//27-$0(1767(0325$/6$3523

'DFRUG DPE DOOz TXH GLVSRVHQ O DUWLFOH P GH OD /OHL GH GH GHVHPEUH GH &DUWD 0XQLFLSDOGH%DUFHORQDLHOVDUWVDLGHOWH[WUHIyVGHOD/OHLUHJXODGRUDGHOHVKLVHQGHVORFDOV DSURYDWSHO5HLDO'HFUHW/HJLVODWLXGHGHPDUFHVIL[HQHOVSUHXVS~EOLFVSHUODSUHVWDFLyGHVHUYHLV GHLV$OORWMDPHQWVWHPSRUDOV$3523

$UWQ2EMHFWH

(VUHJXODODFRQWUDSUHVWDFLySHFXQLjULDSHUODSUHVWDFLyGHOVHUYHLDOV$,,RWMDPHQWVWHPSRUDOV$3523

(21)

Data 9-3-2020

CVE 2020007492

Pàg. 21-58

A

$UWW4XDQWLD

(OVSUHXVS~EOLFVSHUDODQ\SHUODSUHVWDFLyGHVHUYHLVDOVDOORWMDPHQWVWHPSRUDOV$3523VHUDQ 3UHXXQLWDWGDOORWMDPHQWGLD¼

6HQWpQSHUXQLWDWGDOORWMDPHQW XQ GHOV WLSXV G¶DOORWMDPHQWDPE XQD KDELWDFLy R DPEGXHVKDELWDFLRQVTXH SRGHQVHUXWLOLW]DWVSHUXQDXQLWDWIDPLOLDU$TXHVWDXQLWDWIDPLOLDUJDXGLUjGHOHVLQVWDOāODFLRQVGHO¶DOORWMDPHQW DPEOHVFRQGLFLRQVLQIUDHVWUXFWXUDOVLGHVXSRUWVRFLDODPEODWHPSRUDOLWDWTXHV¶HVWDEOHL[LHQHOFRUUHVSRQHQW DFRUGG¶HVWDGDGRFXPHQWVLJQDWHQWUHOHVSDUWVSHUDUWLFXODUOHVFRQGLFLRQVG¶~VGHO¶DOORWMDPHQW

/HV SHUVRQHV XVXjULHV VDWLVIDUDQ HO SDJDPHQW GHO SUHX S~EOLF TXDQWLILFDWV HQ UHODFLy DOV VHXV LQJUHVVRV GDFRUGDPEHOVVHJHQWVOtPLWV

(QWUH,56&L,56&SRQGHUDWVLQJUHVVRV (QWUH,56&L,56&SRQGHUDWVLQJUHVVRV

/HVSHUVRQHVXVXjULHVTXHSHUOLQIRUPHUHODWLXDODVHYDVLWXDFLyVzFLRHFRQzPLFDHVFRQVLGHULTXHQRSRGHQ SDJDUHOSUHXS~EOLFJDXGLUDQGXQDH[HPSFLyWRWDOGHOPDWHL[

'DFRUGDO'HFUHWGHO3ODSHUDOGUHWDOKDELWDWJHO¶DSRUWDFLyGHFDGDXQLWDWIDPLOLDUHVIDUjHQEDVHD ODSRQGHUDFLyGHOVLQJUHVVRVIDPLOLDUVVHJRQVOD]RQDJHRJUjILFDLVHJRQVHOQRPEUHGHPHPEUHVGDFRUG DGRVFRHILFLHQWVHOFRHILFLHQWGXELFDFLySHU%DUFHORQD=RQD$LHOGHFRPSRVLFLyGHODXQLWDWSHU PHPEUHSHUPHPEUHVSHUPHPEUHVSHURPpVPHPEUHV

'DFRUG DO PDWHL[ 'HFUHW HOV DOORWMDPHQWV GH SUR[LPLWDW SURYLVLRQDOV $3523 SRGHQ TXDOLILFDUVH GDOORWMDPHQWV FROāOHFWLXV SURWHJLWV L HQ DTXHVW VHQWLW HO SUHX Pj[LP GH YHQGD L OORJXHU GKDELWDWJHV GH SURWHFFLyRILFLDOpVGH¼PSHU%DUFHORQD$TXHVWDTXDQWLWDWVHULDSHUWDQWHOPj[LPDFREUDUSHUPD FDGDXQLWDWIDPLOLDU

$UWq1DL[HPHQWGHOREOLJDFLyGHSDJDPHQW

/REOLJDFLyGHSDJDPHQWFRPHQoDHQHOPRPHQWHQTXHVLQLFLDODSUHVWDFLyGHOVHUYHLTXHVKLUHJXOD

3HOTXHIDUHIHUqQFLDDOSDJDPHQWGHOVHUYHLDPEFDUjFWHUJHQHUDODTXHVWV¶HIHFWXDUjPLWMDQoDQWOLTXLGDFLRQV PHQVXDOV TXH V¶H[LJLUDQ HO GDUUHU GLD GHO PHV HQ FXUV DO GH OD SUHVWDFLy GHO VHUYHL (Q FDV GH TXq OD ILQDOLW]DFLy GHO VHUYHL HV SURGXHL[L DEDQV G¶DTXHVWD GDWD OHV OLTXLGDFLRQV FRPSUHQGUDQ HO Q~PHUR GH GLHV G¶XWLOLW]DFLyGHOVHUYHLLHOSDJDPHQWV¶KDXUj G¶HIHFWXDUHOGLDDEDQVGHGLWDILQDOLW]DFLy

$UWH'DWDGHYLJqQFLD

35(8 3Ò%/,& 3(5 /$ 35(67$&,Ï '(/ 6(59(, '(/ 352-(&7( 7(036 '( %$55, 7(036 3(578

/DSUHVHQWQRUPDWLYDGHSUHXVS~EOLFVV¶LQVFULXHQDOOzTXHGLVSRVHQO¶DUWLFOHPGHOD/OHLGH GHGHVHPEUHGH&DUWD0XQLFLSDOGH%DUFHORQDLHOVDUWVDLGHOWH[WUHIyVGHOD/OHLUHJXODGRUDGH OHVKLVHQGHVORFDOVDSURYDWSHO5HLDO'HFUHW/HJLVODWLXGHGHPDUo

$UWQ2EMHFWH

(22)

Data 9-3-2020

CVE 2020007492

Pàg. 22-58

A

$UWU'HILQLFLRQV

6¶HQWpQSHU

,QIDQWVLDGROHVFHQWVDPEGLVFDSDFLWDW(QODIUDQMDG¶HGDWILQVHOVDQ\VTXHG¶DFRUGDPEODOHJLVODFLy DSOLFDEOH WHQHQ UHFRQHJXW XQ JUDX GH GLVFDSDFLWDW LJXDO RVXSHULRU DO MD VLJXL ItVLFD SVtTXLFD LR VHQVRULDO

-RYHV3HUVRQHVGHRPpVDQ\VDPEXQJUDXGHGLVFDSDFLWDWLJXDORVXSHULRUDOMDVLJXLItVLFD SVtTXLFDLRVHQVRULDO

$UWW2EOLJDFLyGHSDJDPHQW

(VWDQREOLJDWVDOSDJDPHQWGHOHVFRUUHVSRQHQWVWDULIHVHOVXVXDULVGHOVHUYHLREMHFWHG¶DTXHVWDUHJXODFLy

$UWq4XDQWLD /DWDULIDpVODVHJHQW

7HPSVSHUWXSHULQIDQWVLDGROHVFHQWVDPEGLVFDSDFLWDWLJHUPDQVHV

SHUSHUVRQDDWHVDLVHVVLy ¼

$UWq1RVXEMHFFLy

(OVXVXDULVGHOVHUYHLQRVXEMHFWHVDOSDJDPHQWHQHOVVHJHQWVVXSzVLWV D 7HPSVSHU7XSHUDLQIDQWVLMRYHVDPEGLVFDSDFLWDW

4XDQ HOV LQJUHVVRV GH OD XQLWDW IDPLOLDU QR VXSHULQ O¶,QGLFDGRU 3~EOLF GH 5HQGD G¶(IHFWHV P~OWLSOHV ,35(0

4XDQKDJLQHVWDWGHULYDWVSHOVFHQWUHVGHVHUYHLVVRFLDOVDGGXLQWQHFHVVLWDWVVRFLDOVHQUHODFLyDOHV DFWLYLWDWVGHOSURMHFWH

$UWq5HGXFFLRQV

(OVXVXDULVGHOVHUYHLJDXGLUDQG¶XQDUHGXFFLyGHOHOSUHXS~EOLF

D (QWDOOHUVSHULQIDQWVLMRYHVDPEGLVFDSDFLWDWLOOXUVJHUPDQVHVTXDQHVWUDFWLGHPHPEUHVGH IDPtOLDQRPEURVDRGHIDPtOLDPRQRSDUHQWDOLTXDQWLQJXLQXQRPpVJHUPDQVLQVFULWV

$UWq'RFXPHQWDFLyUHTXHULGD

$OV HIHFWHV GH VROāOLFLWDU OHV LQVFULSFLRQV DO VHUYHL GHO SURMHFWH ³7HPSV GH EDUUL WHPSV SHU WX´ L VROOLFLWDU OD UHGXFFLyRH[FHSFLyGHOSUHXS~EOLFFDOGUjDSRUWDUODVHJHQWGRFXPHQWDFLySHUDFUHGLWDUODFRQGLFLy

D 3HUWDOOHUVSHULQIDQWVDGROHVFHQWVLMRYHVDPEGLVFDSDFLWDW &HUWLILFDWGH5HQGDGHOD8QLWDW)DPLOLDU

&HUWLILFDWGHGLVFDSDFLWDW &DUQHWGHIDPtOLDQRPEURVD &HUWLILFDWG¶HPSDGURQDPHQW

(QHOFDVTXHODIDPtOLDKDJLHVWDWGHULYDGDSHU6HUYHLV6RFLDOVLHVYDORULODH[FHSFLyRUHGXFFLyGHO SUHXS~EOLFFDOGUjDSRUWDUXQ,QIRUPH6RFLDOYDORUDQWODVLWXDFLyVRFLRHFRQzPLFGHODIDPtOLD

/¶REOLJDFLyGHSDJDPHQWFRPHQoDHQHOPRPHQWHQTXqHVSUHVWHQHOVVHUYHLVTXHV¶KLUHJXOHQ(VSUHYHXHO SDJDPHQWDQWLFLSDWGHOSUHXS~EOLFHQHOPDWHL[OORFGHODSUHVWDFLyGHOVHUYHL

$UWq'DWDGHYLJqQFLD

(23)

Data 9-3-2020

CVE 2020007492

Pàg. 23-58

A

$11(;,,¬5($'(35(9(1&,Ï6(*85(7$7

'¶DFRUGDPEDOOzTXHGLVSRVDO¶DUWLFOHPGHOD&DUWD0XQLFLSDOGH%DUFHORQDLO¶DUWLFOHGHOWH[WUHIyV GHOD/OHLUHJXODGRUDGHOHVKLVHQGHVORFDOVLGHFRQIRUPLWDWDPEHOVDUWLFOHVDGHOPDWHL[WH[WUHIyV HV IL[HQ HOV SUHXV S~EOLFV SHU OD SUHVWDFLy GH GHWHUPLQDWV VHUYHLV GH O¶jUHD GH 6HJXUHWDW L 3UHYHQFLy D VROāOLFLWXGGHOHVSHUVRQHVLQWHUHVVDGHV

$UWLFOHQ2EMHFWH

(VUHJXODODFRQWUDSUHVWDFLySHFXQLjULDSHUODSUHVWDFLyGH

D 6HUYHLVGHODXQLWDWPXQWDGDLGHODVHFFLyFDQLQDGHOD*XjUGLDXUEDQD E 6HUYHLVGHODJDOHULDGHWLUGHOD*XjUGLD8UEDQD

F &XUVRVGHIRUPDFLyUHDOLW]DWVSHO6HUYHLGH3UHYHQFLyL([WLQFLyG¶,QFHQGLVL6DOYDPHQW

G &XUVRVGHIRUPDFLyUHDOLW]DWVSHUOD*XjUGLD8UEDQDSHUDOVFRVVRVSROLFLDOVG¶DOWUHVHQWLWDWVORFDOV H 6HUYHLVGHO¶(VSDL%RPEHUV±3DUFGHOD3UHYHQFLyWDOOHUVYLVLWHVJXLDGHVLDOWUHVDFWLYLWDWV

$UWLFOHU2EOLJDFLyGHSDJDPHQW

(VWDUDQREOLJDWVDOSDJDPHQWGHODWDULIDWRWHVOHVSHUVRQHVLQWHUHVVDGHVTXHVROāOLFLWLQDTXHVWVVHUYHLV

$UWLFOHW4XDQWLD

/HVWDULIHVDDSOLFDUVyQOHVFRQVLJQDGHVHQO¶DQQH[

$UWLFOHq1DL[HPHQWGHO¶REOLJDFLyGHSDJDPHQW /¶REOLJDFLyGHSDJDPHQWQHL[DPEODSUHVWDFLyGHOVHUYHL

$UWLFOHq1RUPHVGHJHVWLy

/DJHVWLyGHOSUHXV¶LQLFLDDSHWLFLyGHODSHUVRQDLQWHUHVVDGD

$UWLFOHq5HJOHVHVSHFtILTXHVGHOVVHUYHLVGHOD8QLWDWPXQWDGDLGHODVHFFLyFDQLQD

$TXHVWD SUHVWDFLy Wp XQ FDUjFWHU SXUDPHQW GLVFUHFLRQDO SRGHQW O¶$MXQWDPHQW DFFHSWDU R UHIXVDU OD VROOLFLWXGGHOSDUWLFXODU

6¶DSOLFDUj XQ GHVFRPSWH GHO GHO SUHX D OHV VROOLFLWXGV TXH UHDOLW]LQ DVVRFLDFLRQV R IXQGDFLRQV GH FDUjFWHUEHQqILFRDVVLVWHQFLDO

(QHOVFDVRVHQTXHV¶HVWLPLLSUHYLLQIRUPHGHOD*HUqQFLDGH6HJXUHWDWL3UHYHQFLySHUOHVSUHVWDFLRQVGH VHUYHLV GH OD 8QLWDW 0XQWDGD L GH OD 6HFFLy &DQLQD HV SRGUj H[LPLU GH SDJDPHQW D O¶HQWLWDW VROOLFLWDQW TXDQ HV WUDFWL G¶XQD DVVRFLDFLy GH YHwQV L FRPHUFLDQWV R XQD HQWLWDW VHQVH jQLP GH OXFUH DPE jPELW G¶DFWXDFLyD%DUFHORQDLO¶DFWHDIDYRUHL[LODSUR[LPLWDWORFDORTXDQO¶DFWHFRQWULEXHL[LDODSURMHFFLyGHOD &LXWDWO¶$MXQWDPHQWROD*XjUGLD8UEDQD

4XHGDUDQH[LPLWVGHOSDJDPHQWGHOSUHXS~EOLFSHUODXWLOLW]DFLyGHOD*DOHULDGH7LUTXDQHVWUDFWLG¶DOWUHV FRVVRVSROLFLDOV

(24)

Data 9-3-2020

CVE 2020007492

Pàg. 24-58

A

$UWLFOHq'DWDGHYLJqQFLD

$11(;7$5,)(6

 8QLWDW0XQWDGD*XjUGLD8UEDQDGH%DUFHORQDL6HFFLy &DQLQD

+RUDUL (XURV

$JHQW¼KRUD 'LUQ

$JHQW¼KRUD 1RFWXUQ

$JHQW¼KRUD )HVWLX

&DSRUDO¼KRUD 'LUQ

&DSRUDO¼KRUD 1RFWXUQ

&DSRUDO¼KRUD )HVWLX

6HUJHQW¼KRUD 'LUQ

6HUJHQW¼KRUD 1RFWXUQ

6HUJHQW¼KRUD )HVWLX

,QVSHFWRUD 'HGLFDFLySOHQD

,QWHQGHQW 'HGLFDFLySOHQD

6RWVLQVSHFWRUD 'HGLFDFLySOHQD

3HUFDYDOO¼GLD

3HUJRV¼GLD

 *DOHULDGHWLU +RUDUL (XURV

8WLOLW]DFLyOtQLDGHWLU¼KRUD

3HUVRQD,QVWUXFWRUDGH*DOHULD

$JHQW¼KRUD 'LUQ

$JHQW¼KRUD 1RFWXUQ

(25)

Data 9-3-2020

CVE 2020007492

Pàg. 25-58

A

 &XUVRVGH)RUPDFLy3ROLFLDO

3UHSDUDFLyGHO&XUV (XURV

3HUVRQDO$GPLQLVWUDWLX

3HUVRQDOXQLIRUPDW

'RFqQFLD +RUDUL

6HUJHQW 'LUQD

6HUJHQW 1RFWXUQD

&DSRUDO 'LUQD

&DSRUDO 1RFWXUQD

$JHQW 'LUQD

$JHQW 1RFWXUQD

8WLOLW]DFLy$XOD

0DWHULDO'RFHQW

 &XUVWqFQLTXHVH[WLQFLyLQFHQGLV (XURV 3UHSDUDFLyGHO&XUV

3HUVRQDO(VSHFLDOLW]DW

'RFqQFLD

,QVWUXFWRU

&XUVRV7qFQLTXHVG¶([WLQFLy

&XUVEjVLFSHUVRQHVIRUPDGRUHVKRUHVDOXPQHV &XUVLQWHUPLJSHUVRQHVIRUPDGRUHVKRUHVDOXPQHV &XUVDYDQoDWSHUVRQHVIRUPDGRUHVKRUHVDOXPQHV 7~QHOGHO)RF

8WLOLW]DFLy7~QHOGH)RF

(TXLSDPHQWL0DTXLQjULD

1HWHMD*UDQRWD

1HWHMD-DTXHWy

1HWHMD6REUHSDQWDOy

1HWHMD*XDQWV

1HWHMD7RYDOOROD

1HWHMD&DUHWHVL5HJXODGRU

(26)

Data 9-3-2020

CVE 2020007492

Pàg. 26-58

A

%RPERQDG2[LJHQ

8WLOLW]DFLy9HVWLW5LVF4XtPLF

([WLQWRU$LJXD

([WLQWRU&2

([WLQWRU3ROV

(3,

 3UjFWLTXHVIRUPDFLyWqFQLTXHVVDQLWjULHV 3UHSDUDFLyGHO&XUV'RFqQFLD

3UHSDUDFLy

0RQLWRUD 7qFQLTXHV6DQLWjULHV

0DWHULDO

8WLOLW]DFLy1LQRWSHUD3UjFWLTXHV

8WLOLW]DFLy1LQRWVXSRUW9LWDO

8WLOLW]DFLy1LQRWVXSRUW9LWDO$YDQoDW

 $FWLYLWDWV(VSDL%RPEHUV3DUF3UHYHQFLy

3~EOLFJHQHUDO

9LVLWDJXLDGD ¼JUXS¼SHUSHUVRQD

9LVLWD7DOOHU ¼JUXS¼SHUSHUVRQD

$FWLYLWDWVHVSHFtILTXHV ¼JUXS¼SHUSHUVRQD

(VFROHV 9LVLWDJXLDGD

Pj[LPDOXPQHVSHUYLVLWD

¼JUXS¼DOXPQHDH[WUD

9LVLWD7DOOHU

Pj[LPDOXPQHVSHUYLVLWD

¼JUXS¼DOXPQHDH[WUD

'HVFRPSWHVLJUDWXwWDWV

/¶(VSDL%RPEHUV GHWHUPLQDUjXQQRPEUHGHSODFHVJUDWXwWHVSHUDDFWLYLWDWVSHGDJzJLTXHV DGUHoDGHV DJUXSV G¶HVFROHV S~EOLTXHV GH OD FLXWDW /D &RPLVVLy GH JUDWXwWDWV IRUPDGD SHO &RQVRUFL G¶(GXFDFLy GH %DUFHORQD UHIHUHQWVG¶HGXFDFLyGHOV'LVWULFWHV(VFROHV%UHVVROUHSUHVHQWDQWVGHOHVHQWLWDWVGHO&RQVHOOGH&RRUGLQDFLy 3HGDJzJLFD L OLGHUDGD SHU O¶,QVWLWXW 0XQLFLSDO G¶(GXFDFLy HQ EDVH D OD 5HVROXFLy GH &HQWUHV (GXFDWLXV FODVVLILFDWVFRPGH0j[LPD&RPSOH[LWDWGLVWULEXHL[ OHVSODFHVJUDWXwWHVTXHOHVHQWLWDWVLLQVWLWXFLRQVPHPEUHV SRVHQDGLVSRVLFLyVHJXLQWXQVFULWHULVS~EOLFVWUDQVSDUHQWVLHTXLWDWLXV/DVHFUHWDULDWqFQLFDGHO&RQVHOOGH &RRUGLQDFLy 3HGDJzJLFD FRPXQLFD HO QRP GH OHV HVFROHV L HO QRPEUH G¶DOXPQHV D OHV HQWLWDWV L LQVWLWXFLRQV PHPEUHV

(27)

Data 9-3-2020

CVE 2020007492

Pàg. 27-58

A

6¶DSOLFDUDQGHVFRPSWHVGHOHQHOSUHXGHOHVDFWLYLWDWVHVFRODUVSHUDHVFROHVDPEQHFHVVLWDWVHVSHFLDOV

TXHMDHVWLJXLQLQFORVHVHQODUHODFLyG¶HVFROHVGH0j[LPDFRPSOH[LWDWGHO&RQVRUFLG¶(GXFDFLyGH%DUFHORQD ,JXDOPHQWDTXHVWDPHVXUDV¶DSOLFDUjDHVFROHVGHEDUULVTXHVLJXLQREMHFWHG¶LQWHUYHQFLyHQHOSODGHEDUULV FRQWUDODGHVLJXDOWDWTXHLPSXOVDO¶$MXQWDPHQW

/¶(VSDL%RPEHUVRIHULUjDFWLYLWDWVJUDWXwWHVGXUDQWOHVMRUQDGHVGHSRUWHVREHUWHVGHOVGLHVDGHWHUPLQDUSHU O¶,&8%GHOHVVHWPDQHVGHOGHIHEUHU6DQWD(XOjOLDGHVHWHPEUH0DUHGH'pXGHOD0HUFq3DWURQD GH%DUFHORQD1LWGHOV0XVHXVL%DUFHORQD2SHQ+RXVH

'HPDQHUDSXQWXDOO¶(VSDL%RPEHUVSRGUjRIHULUDOJXQDGHOHVVHYHVDFWLYLWDWVJUDWXwWDPHQWVHPSUHTXHHV WUDFWL G¶DFFLRQV SURPRFLRQDOV GHO SURSL FHQWUH VLJXLQ GH OOLXUH DFFpV SHO S~EOLF HQ JHQHUDO R GLULJLGHV D XQ S~EOLFSUHVFULSWRULKDJLQHVWDWDXWRULW]DGHVSHUOD'LUHFFLyGHO¶63(,6

$11(;,,,35(863Ò%/,&6'(/¶¬5($'¶(&2/2*,$85%$1$

3UHXV S~EOLFV GHOV VHUYHLV GH UHFROOLGD GH UHVLGXV FRPHUFLDOV L LQGXVWULDOV DVVLPLODEOHV DOV PXQLFLSDOV

'¶DFRUGDPEDOOzTXHGLVSRVHQ O¶DUWLFOHGHOD/OHLGHG¶DEULOUHJXODGRUDGHOHVEDVHVGHO UqJLP ORFDO HOV DUWLFOHV L VHJHQWV GHO WH[W UHIyV GH OD /OHL UHJXODGRUD GH OHV KLVHQGHV ORFDOV V¶HVWDEOHL[HQ HOV SUHXV S~EOLFV SHU OD SUHVWDFLy GHO VHUYHL GH UHFROOLGD GH UHVLGXV FRPHUFLDOV L LQGXVWULDOV DVVLPLODEOHV DOV PXQLFLSDOV GHILQLWV HQ HO WH[W UHIyV GH OD /OHL UHJXODGRUD GHOV UHVLGXV DSURYDWSHO'HFUHWOHJLVODWLXGHMXOLRO

$UWLFOHQ2EMHFWHGHOSUHXS~EOLF

&RQVWLWXHL[OREMHFWHGHOSUHXS~EOLFHOVHUYHLGHUHFROOLGDVHOHFWLYDGHOHVGLIHUHQWVIUDFFLRQVGH UHVLGXV UHVWDRUJjQLFDSDSHUFDUWUyYLGUHLHQYDVRVOOHXJHUV GHOVUHVLGXVJHQHUDWVSHUODFWLYLWDW SUzSLDGHOFRPHUoDOGHWDOOLDOHQJUzVOKRVWDOHULDHOVEDUVHOVPHUFDWVOHVRILFLQHVLHOVVHUYHLVL GHOV UHVLGXV RULJLQDWV D OD LQG~VWULD TXH WHQHQ OD FRQVLGHUDFLy GDVVLPLODEOHV DOV PXQLFLSDOV HQ TXDOVHYROGHOHVPRGDOLWDWVGHUHFROOLGDTXHHVWDEOHL[O¶2UGHQDQoDGH0HGL$PELHQWGH%DUFHORQDL HOVHXWUDQVSRUWILQVDOHVSODQWHVGHWUDFWDPHQWLUHFLFODWJHSHOVVHUYHLVPXQLFLSDOV

/HVPRGDOLWDWVGHUHFROOLGDVHOHFWLYDGHUHVLGXVFRPHUFLDOVVyQ

D(Q HVWDEOLPHQWVXELFDWVIRUDGHOVHL[RVR]RQHVFRPHUFLDOVHQHOVTXDOVHVSUHVWDHOVHUYHLGH UHFROOLGD FRPHUFLDO SRUWD D SRUWD 6HUYHL GH UHFROOLGD FRQYHQFLRQDO DVVLPLODEOH D OD UHFROOLGD GRPLFLOLjULD SHU D HVWDEOLPHQWV HQ TXq OD VXPD GHOV YROXPV JHQHUDWV GH OHV IUDFFLRQV UHVWD L RUJjQLFDVLJXL LQIHULRURLJXDODOGLDRDPEXQYROXPJHQHUDW LQIHULRURLJXDODOVHWPDQDGH OHVIUDFFLRQVSDSHUFDUWUyYLGUHRHQYDVRVOOHXJHUV

E(QHVWDEOLPHQWVXELFDWVGLQVGHOVHL[RVR ]RQHVFRPHUFLDOVRQHVSUHVWDHOVHUYHLGHUHFROOLGD FRPHUFLDOSRUWDDSRUWD

(OVHUYHLGHUHFROOLGDFRQYHQFLRQDODVVLPLODEOHDODUHFROOLGDGRPLFLOLjULDSHUDHVWDEOLPHQWVHQ TXqODVXPDGHOVYROXPVJHQHUDWVGHOHVIUDFFLRQVUHVWDLRUJjQLFDVLJXL LQIHULRURLJXDOD OGLDRDPE XQYROXPJHQHUDW LQIHULRURLJXDODOVHWPDQDGHOHVIUDFFLRQVSDSHUFDUWUyYLGUH R HQYDVRV OOHXJHUV H[FHSWH SHU OD IUDFFLy FDUWUy HQ FDV TXH HQ OD ]RQD HVWLJXL LPSODQWDGD OD UHFROOLGDGHFDUWUySOHJDWLOOLJDWHQYRUHUD

(28)

Data 9-3-2020

CVE 2020007492

Pàg. 28-58

A

YROXP JHQHUDW VXSHULRU D OVHWPDQD L LQIHULRU R LJXDO D OVHWPDQD GH OHV IUDFFLRQV

SDSHUFDUWUyYLGUHRHQYDVRVOOHXJHUV(VFRQGLFLRQDDTXHVWDUHFROOLGDDDTXHOOHVIUDFFLRQVSHU OHVTXDOVO¶$MXQWDPHQWRIHUHL[LHOVHUYHLLVHPSUHTXHKRDYDOLQFULWHULVWqFQLFV

F3HU JUDQVJHQHUDGRUVGHUHVLGXVLQGHSHQGHQWPHQWGHOD]RQDRQV¶XELTXLQ

(O VHUYHL GH UHFROOLGD DPE EXMROV SHU D HVWDEOLPHQWV JUDQV JHQHUDGRUV GH UHVLGXV HQ TXq OD VXPDGHOVYROXPVJHQHUDWVGHOHVIUDFFLRQVUHVWDLRUJjQLFDVLJXL VXSHULRUDOGLDRDPE XQ YROXPJHQHUDW VXSHULRUDOVHWPDQDGHOHVIUDFFLRQVSDSHUFDUWUyRYLGUH

G6HUYHL GHUHFROOLGDFRPHUFLDOPLWMDQoDQWVLVWHPDSQHXPjWLF

(OVHVWDEOLPHQWVFRPHUFLDOVTXHHVWURELQGLQVGHO¶jUHDGHUHFROOLGDSQHXPjWLFDDVVLPLODEOHD UHFROOLGDGRPLFLOLjULDKDXUDQGHIHUVHUYLUDTXHVWVLVWHPDSHUOOLXUDUOHVIUDFFLRQVDGPHVHV

(OV HVWDEOLPHQWV FRPHUFLDOV TXH GLVSRVLQ GH ERTXHV LQWHUQHV KDXUDQ GH IHU VHUYLU DTXHVW VLVWHPDOOLXUDQWOHVIUDFFLRQVRUJjQLFDHWLTXHWHVLGHQWLILFDWLYHVGHFRORUPDUUyLUHVWDHWLTXHWHV LGHQWLILFDWLYHVGHFRORUJULV3HUODUHVWDGHIUDFFLRQVV¶KDXUDQG¶DFROOLUDOVVLVWHPHVGHUHFROOLGD HVWDEOHUWVHQODVHYD]RQD

(OVHVWDEOLPHQWVFRPHUFLDOVWHQHQOHVVHJHQWVREOLJDFLRQV

D 6HSDUDUHQRULJHQOHVIUDFFLRQVJHQHUDGHV

E 8WLOLW]DU OHV PRGDOLWDWV GH UHFROOLGD LPSODQWDGD HQ OD VHYD ]RQD G¶DFRUG DPE O¶HVSHFLILFDW HQ DTXHVWDUWLFOH

F (QOHVPRGDOLWDWVRQV¶KDJLG¶XWLOLW]DUFRQWHQLW]DFLyHVSHFtILFDSHUDFDGDIUDFFLyJHQHUDGD

 )UDFFLy UHVWD EXMROFRQWHQLGRU DPE WDSD JULVD R ERFD GH SQHXPjWLFD DPE HWLTXHWD LGHQWLILFDWLYDGHFRORUJULV

 )UDFFLy RUJjQLFD EXMROFRQWHQLGRU DPE WDSD PDUUy R ERFD GH SQHXPjWLFD DPE HWLTXHWD LGHQWLILFDWLYDGHFRORUPDUUy

 )UDFFLySDSHUFDUWUy(OSDSHUDPEEXMROFRQWHQLGRUDPEWDSDEODYDLHOFDUWUySOHJDWLOOLJDW HQYRUHUD

 )UDFFLyYLGUHEXMROFRQWHQLGRUDPEWDSDYHUGD

 )UDFFLyHQYDVRVEXMROFRQWHQLGRUDPEWDSDJURJDHVFRQGLFLRQDDTXHVWDUHFROOLGDDTXH O¶$MXQWDPHQWRIHUHL[LHOVHUYHLLVHPSUHTXHKRDYDOLQFULWHULVWqFQLFV

G (OFRPSOLPHQWGHOGHFUHWOHJLVODWLXGHGHMXOLROSHOTXDOV¶DSURYDHO7H[WUHIyVGHOD /OHLUHJXODGRUDGHOVUHVLGXV

(OV HVWDEOLPHQWV KDXUDQ GH IDFLOLWDU D O¶$MXQWDPHQW LQIRUPDFLy VREUH HO YROXP GH JHQHUDFLy GH UHVLGXVSHUGHWHUPLQDUODFODVVLILFDFLyGHJHQHUDGRUTXHHOVKLFRUUHVSRQJXL

(QOHV]RQHVRQQRH[LVWHL[LQFRQWHQLGRUVGHUHFROOLGDGRPLFLOLjULDHOVHVWDEOLPHQWVOOLXUDUDQOHV IUDFFLRQVXWLOLW]DQWHOVEXMROVFRQWHQLGRUVRVLVWHPDGHERVVHVHQIXQFLyGHODPRGDOLWDWGHUHFROOLGD LPSODQWDGDLHOYROXPGHJHQHUDFLyGHUHVLGXV

(29)

Data 9-3-2020

CVE 2020007492

Pàg. 29-58

A

$UWLFOHU2EOLJDWVDOSDJDPHQW

6yQ REOLJDWV DO SDJDPHQW GHO SUHX S~EOLF SHU OD SUHVWDFLy GH VHUYHLV GH UHFROOLGD GH UHVLGXV FRPHUFLDOV L LQGXVWULDOV GH FDUDFWHUtVWLTXHV DVVLPLODEOHV DOV PXQLFLSDOV OHV SHUVRQHV ItVLTXHV R MXUtGLTXHV S~EOLTXHV R SULYDGHV WLWXODUV GH OHV DFWLYLWDWV JHQHUDGRUHV GHOV PDWHL[RV TXH UHVXOWLQ EHQHILFLDGHVSHUODSUHVWDFLyGHOVHUYHLPXQLFLSDORSHUQRKDYHUREWLQJXWODFRUUHVSRQHQWYDOLGDFLy GH O¶$MXQWDPHQW SHU D OD XWLOLW]DFLy GHO VHUYHL SULYDW GH UHFROOLGD VHOHFWLYD LR VLVWHPD GH ORJtVWLFD LQYHUVDG¶DFRUGDPEO¶HVWDEOHUWDO¶DUWSHUO¶DQ\HQFXUV

$UWLFOHW1RVXEMHFFLy

1RHVWDQVXEMHFWHVDOSDJDPHQWGHOSUHXS~EOLFSHUODSUHVWDFLyGHOVVHUYHLVGHUHFROOLGDGHUHVLGXV FRPHUFLDOVLLQGXVWULDOVDVVLPLODEOHVDOVPXQLFLSDOV

/HV SHUVRQHV WLWXODUV G¶DFWLYLWDWV JHQHUDGRUHV GH UHVLGXV FRPHUFLDOV L LQGXVWULDOV DVVLPLODEOHVDOVPXQLFLSDOVTXHDFUHGLWLQTXHGLVSRVHQGHODYDOLGDFLyGHO¶$MXQWDPHQWSHUD ODXWLOLW]DFLyGHOVHUYHLSULYDWGHUHFROOLGDVHOHFWLYDLRVLVWHPDGHORJtVWLFD LQYHUVDG¶DFRUG DPE O¶HVWDEOHUW D O¶DUW $TXHVW VXSzVLW HV YDOLGDUj VHPSUH L TXDQ V¶DFUHGLWL TXH HV JHVWLRQDGHIRUPDSULYDGDODWRWDOLWDWGHOVUHVLGXVJHQHUDWVSHUO¶DQ\HQFXUV

/HVSHUVRQHVWLWXODUVG¶DFWLYLWDWVVHQVHVXSHUItFLHGHFODUDGD

/HV SHUVRQHV G¶DFWLYLWDWV JHQHUDGRUHV GH UHVLGXV LQGXVWULDOV QR DVVLPLODEOHV DOV UHVLGXV PXQLFLSDOV

$UWLFOHq&ODVVLILFDFLyGHOHVDFWLYLWDWVHQIXQFLyGHOVUHVLGXVJHQHUDWV

&ODVVLILFDFLySHUYROXPGHUHVLGXVJHQHUDWVLVXSHUItFLHGHO¶HVWDEOLPHQWRORFDO

D (OV HVWDEOLPHQWV HQ TXq OD VXPD GHOV YROXPV JHQHUDWV GH OHV IUDFFLRQV UHVWD L RUJjQLFD VLJXL LQIHULRURLJXDODOGLDRDPEXQYROXPJHQHUDWLQIHULRURLJXDOD OVHWPDQDGHOHVIUDFFLRQV SDSHUFDUWUy YLGUH R HQYDVRV OOHXJHUV HQ IXQFLy GHO WLSXV G¶DFWLYLWDW L GH OOXU VXSHUItFLH HV FRQVLGHUDUDQ

*HQHUDGRUVPtQLPVVLHVWUDFWDG¶DFWLYLWDWVGHVHQYROXSDGHVSHUSURIHVVLRQDOV±DJUXSDFLRQVGH OD VHFFLy D GH OHV WDULIHV GH O¶LPSRVW VREUH DFWLYLWDWV HFRQzPLTXHV HQ HVWDEOLPHQWV ORFDOV GHVSDW[RVRHQHOGRPLFLOLKDELWXDOGHVXSHUItFLHLQIHULRURLJXDODP

*HQHUDGRUV SHWLWV VL HV WUDFWD G¶DFWLYLWDWV HPSUHVDULDOV ±VHFFLy D GHVHQYROXSDGHV HQ ORFDOV HVWDEOLPHQWVGHVSDW[RVHWFDPEVXSHUItFLHVGHILQVDP_{LDFWLYLWDWVSURIHVVLRQDOV±VHFFLy} D GHVHQYROXSDGHVHQORFDOVHVWDEOLPHQWVGHVSDW[RVHWFDPEVXSHUItFLHVDSDUWLUGHPL ILQVDPLQFOzV

*HQHUDGRUVPLWMDQVVLHVWUDFWDG¶DFWLYLWDWVHPSUHVDULDOV±VHFFLyD LDFWLYLWDWVSURIHVVLRQDOV± VHFFLyD GHVHQYROXSDGHVHQORFDOVHVWDEOLPHQWVGHVSDW[RVHWFDPEVXSHUItFLHVDSDUWLUGH PLILQVDP

*HQHUDGRUV LPSRUWDQWV VL HV WUDFWD G¶DFWLYLWDWV HPSUHVDULDOV ±VHFFLy D L DFWLYLWDWV SURIHVVLRQDOV ±VHFFLy D GHVHQYROXSDGHV HQ ORFDOV HVWDEOLPHQWV GHVSDW[RV HWF DPE VXSHUItFLHVGHPpVGHP

(30)

Data 9-3-2020

CVE 2020007492

Pàg. 30-58

A

DPELQGHSHQGqQFLDGHOOXUVXSHUItFLHHVFRQVLGHUHQJUDQVJHQHUDGRUVDWRWVHOVHIHFWHVG¶DSOLFDFLy

GHOSUHXS~EOLF

(O UHVLGXV JHQHUDWV SHU O¶DFWLYLWDW KDXUDQ G¶pVVHU VHSDUDWV REOLJDWzULDPHQW HQ RULJHQ DPE FRQWHQLW]DFLy HVSHFtILFD

&ODVVLILFDFLySHUIUDFFLRQVUHVLGXDOVJHQHUDGHV

&/$66,),&$&,Ï'(/(6$&7,9,7$76 (3Ë*5$)6

*583$*HQHUDGRUVGHUHVWD $FWLYLWDWVSURIHVVLRQDOVVHFFLy $FWLYLWDWVHPSUHVDULDOVVHFFLy

6HUYHLV$GPLQLVWUDWLXV

$FWLYLWDWVHPSUHVDULDOVQRFODVVLILFDGHVHQGDOWUHVJUXSV $FWLYLWDWV LQGXVWULDOV JHQHUDGRUHV GHUHVWD DVVLPLODEOH D UHVLGXPXQLFLSDO

*583%*HQHUDGRUVGHUHVWD LSDSHUFDUWUy

&RPHUoPDMRULVWDGHSURGXFWHVWq[WLOV &RPHUoPLQRULVWDWq[WLOVSHOOLFDOoDW )DUPjFLHVLYHQGDSHUIXPHULDLFRVPqWLFD &RPHUoPLQRULVWDDUWLFOHVOODULFRQVWUXFFLy

&RPHUoPLQRULVWDYLQVLEHJXGHV

(VWDQFVORWHULHV

&RPHUoPLQRULVWDEpQVXVDWV

$OWUHFRPHUoPLQRULVWD

6HUYHLVWHOHIzQLFVLDOWUHV

,QVWDOāODFLRQVLPXQWDWJHV

$FDEDWVGREUD

6DORQVEHOOHVDLHVWqWLFD

(GLWRULDOVLDUWVJUjILTXHV

6HUYHLVILQDQFHUV

(QWLWDWVGDVVHJXUDQFHV

6HUYHLVGHSURPRFLyLPPRELOLjULD

6HUYHLVGHJHVWLySURSLHWDWLPPRELOLjULD

$JqQFLHVGHYLDWJHV

6HUYHLVGHSXEOLFLWDWLUHOS~EOLTXHV

6HUYHLVIRWRJUjILFVLIRWRFRSLDGRUHV

&RQVXOWRULVPqGLFV

&OtQLTXHVYHWHULQjULHV

6HUYHLVMXUtGLFVWqFQLFVFRPSWDEOHV

6HUYHLVDGPLQLVWUDWLXV

%LEOLRWHTXHVL0XVHXV

*583'(

&/$66,),&$&,Ï 7,386'()5$&&,216 7,386'¶$&7,9,7$7

*UXS$ 5HVWD 3URIHVVLRQDOLHPSUHVDULDOQRFODVVLILFDW

*UXS% 5HVWD LSDSHUFDUWUy &RPHUoWq[WLOLRILFLQHV

*UXS& 5HVWDSDSHUFDUWUyYLGUHLHQYDVRV 6HUYHLVG¶RFLOOHXUHLEDUV

*UXS' 5HVWDRUJjQLFDLSDSHUFDUWUy &RPHUoDOLPHQWDUL

(31)

Data 9-3-2020

CVE 2020007492

Pàg. 31-58

A

&/$66,),&$&,Ï'(/(6$&7,9,7$76 (3Ë*5$)6

5jGLRWHOHYLVLyLWHOHFRPXQLFDFLRQV

$OWUHVKRVWDODWJHVVHQVHEDU ± ±

2ILFLQHV G¶$GPLQLVWUDFLRQV L HQWLWDWV S~EOLTXHV VHQVH PHQMDGRU

$FWLYLWDWVLQGXVWULDOVJHQHUDGRUHVGHUHVWD LSDSHUFDUWUy

*583&*HQHUDGRUVGHUHVWDHQYDVRVYLGUHLFDUWUy

(VSHFWDFOHVWHDWUDOVPXVLFDOVLWDXULQV

6DOHVGHEDOOLGLVFRWHTXHV

$FWLYLWDWVGHMRFUHFUHDWLYHV

,QVWDOāODFLRQVHVSRUWLYHVJLPQDVRV

&LQHPHV

%DUVFDIHWHULHVJHODWHULHVRU[DWHULHV ± ± ±

$OWUHVKRVWDODWJHVDPEEDU ± ± ± ± ±

$FWLYLWDWV LQGXVWULDOV JHQHUDGRUHV GHUHVWDHQYDVRVYLGUHL SDSHUFDUWUy

2ILFLQHVG¶$GPLQLVWUDFLRQVLHQWLWDWVSXEOLTXHVDPEEDU &HQWUHVGHQHJRFLVVHQVHJHQHUDFLyG¶RUJjQLFD

*583'*HQHUDGRUVGRUJjQLFDUHVWD LFDUWUy

&RPHUoPLQRULVWDGHSURGXFWHVDOLPHQWDULV

&RPHUoPLQRULVWDGHIORUVSODQWHV

6XSHUPHUFDWVLVLPLODUV

$FWLYLWDWVLQGXVWULDOVJHQHUDGRUHVG¶RUJjQLFDUHVWD LFDUWUy

*583 ( *HQHUDGRUV G¶RUJjQLFD UHVWD SDSHU FDUWUy HQYDVRVLYLGUH

+RWHOVDPEUHVWDXUDQW

5HVWDXUDQWVLFjWHULQJV

+RVSLWDOVLFHQWUHVVDQLWDULV

$VVLVWqQFLDLVHUYHLVVRFLDOVDPEUHVLGqQFLD &ROāOHJLVPDMRUVLUHVLGqQFLHVHVWXGLDQWVDPEPHQMDGRU

&HQWUHVGHQVHQ\DPHQWDPEPHQMDGRU

$FWLYLWDWVLQGXVWULDOVJHQHUDGRUHVGH WRWHVOHVIUDFFLRQV 2ILFLQHV G¶$GPLQLVWUDFLRQV L HQWLWDWV S~EOLTXHV DPE PHQMDGRU

&HQWUHVGHQHJRFLVDPEJHQHUDFLyG¶RUJjQLFD

/HV DFWLYLWDWV FRUUHVSRQHQWV DO VHFWRU S~EOLF VDVVLPLODUDQ HQ HO JUXS FRUUHVSRQHQW SHU UDy GH OD VXSHUItFLHLIUDFFLRQVGHUHVLGXV JHQHUDGHV

$UWLFOHq$JUXSDFLyG¶DFWLYLWDWV